Login Obfuscator

Par pascal.sikora

Description

Login Obfuscator makes your login responses more unpredictable to brute-force bots. It adds a subtle security layer by sending an HTTP 403 Forbidden status on failed login attempts, confusing automated attacks that expect standard 200 or 302 responses.

This plugin is simple and silent:
* No configuration required
* No user interface
* Works automatically on activation

Why it works:
* Bots rely on predictable responses (200 = fail, 302 = success)
* A 403 status confuses many automated scripts
* Some bots slow down or stop attacking altogether

Captures d’écran

screenshot-1.png - How it works. — screenshot-1.png – How it works.

screenshot-2.png - Example of a failed login HTTP 403 response (shown in browser dev tools). — screenshot-1.png – How it works.

Installation

Upload the plugin files to the /wp-content/plugins/login-obfuscator directory, or install the plugin through the WordPress plugins screen directly.
Activate the plugin through the ‘Plugins’ screen in WordPress.
Done — there are no settings or UI.