All in One Login Premium

All in One Login Premium extends WordPress login management with additional authentication, access-control, and monitoring settings. The base All In One Login add-on includes login URL customization, email OTP, email-based 2FA, activity logs, and login-page controls. Premium adds further methods for websites with various sign-in and account-recovery needs.

Control access to the login page

Change the default WordPress login URL and add Google reCAPTCHA v2 or v3 to help reduce automated attempts. Cloudflare Turnstile is available as an optional CAPTCHA alternative, and Premium adds hCaptcha. Access controls include IP blacklisting and whitelisting, restrictions on common usernames, and limits on failed login attempts with lockouts. User enumeration protection helps block requests that try to discover WordPress usernames; Premium also entries enumeration events in its logs. The add-on works with WordPress Multisite.

Choose sign-in and recovery methods

Email OTP lets visitors sign in with a one-time code sent to their email. Premium adds app-based 2FA, with one-time backup codes for cases when a visitor's primary method is unavailable. Administrators can generate 1 to 20 backup codes per user, and grace periods can help with a 2FA rollout. Other passwordless options include SMS OTP through Twilio, one-click Login Links sent by email, and temporary login URLs with configurable expiration and visit limits.

Premium social login supports Google, Facebook, Microsoft, GitHub, Apple, Discord, and LINE. WooCommerce integration makes supported social login and passwordless Login Links available on account and checkout pages.

Customize the page and route users

Use the login-page customizer's live preview to adjust logos, colors, backgrounds, and layouts. Premium adds templates and Google Fonts for more styling choices. Login and logout redirection rules can send all users, selected roles, or specific accounts to different pages after authentication.

Review activity and send alerts

Activity logs display login attempts and related details such as usernames, IP addresses, dates, times, and lockouts. Premium can send security notifications to Slack for events including failed logins and IP lockouts. Webhooks send security events to HTTPS endpoints, which can connect with tools such as Zapier, Make, n8n, or custom monitoring systems.

Configure and test sign-in flows

After installing the plugin, open its options to configure the login URL, CAPTCHA option, access controls, and page design. Set up any required authentication method and review its recovery options. Test login, logout, redirects, and account recovery before enabling the configuration for regular users.