Logins & site admin

Login lockouts, custom login addresses, maintenance mode and lightweight visitor statistics.

• 
  Custom login URLs and login links in WordPress: what they do and don't protect

  Moving the WordPress login page to a custom address, redirecting users after login, and passwordless login links: how each works, and the security trade-offs.

• 
  Lightweight visitor statistics for WordPress: options without the bloat

  How to count visitors on a WordPress site without a heavy analytics suite: privacy-friendly plugins, self-hosted Matomo, hosted alternatives and server logs compared.

• 
  Locking WordPress down: login lockouts and maintenance mode

  Two kinds of lock-out for WordPress: limiting failed login attempts against brute-force attacks, and closing the site to visitors during maintenance without hurting SEO.