About This Plugin
MBR Login Customiser is a comprehensive security and customization plugin that allows you to completely transform your WordPress login experience. Hide your login page from automated attacks by using a custom URL, then brand it beautifully with modern design options including Dark Mode and Glassmorphism effects.
Version 2.1 adds a Login Firewall that works in front of the login page itself: a request gate, bad-bot filtering, rate limiting, a honeypot, and a minimum form fill time. Version 2.0 added passwordless passkey sign-in (WebAuthn / FIDO2), real-time security alerts by email or webhook, and trusted-device support to reduce two-factor friction. As with the rest of the plugin, everything is verified on your own server in PHP – no external services, no telemetry, and no third-party calls.
Full security audit is bundled into the zip file.
= Security Features =
* **Login Firewall** – Request-level protection in front of the login page: blocked and locked-out IPs get a 403 before the form is served, script/scanner user agents are refused, floods are rate-limited, and an invisible honeypot plus a signed minimum fill time catch bots that submit credentials directly. Pure PHP, no external services
* **Passkeys (WebAuthn / FIDO2)** – Passwordless, phishing-resistant sign-in using device biometrics, screen lock, or a hardware security key. Verified entirely on your own server in PHP – no external services, no third-party calls
* **Security Alerts** – Get an email or Slack/Discord webhook notification when an IP is locked out, an administrator signs in from a new IP, or failed logins spike. Per-type cooldowns prevent inbox flooding
* **Trusted Devices** – Let users tick “trust this device” to skip the second factor on browsers they choose, using a signed, revocable cookie. Only the second step is skipped – the password or passkey is always required
* **Custom Login URL** – Replace /wp-admin and /wp-login.php with your own custom slug
* **Block Standard Login** – Automatically returns 404 errors for default WordPress login URLs
* **Emergency Access** – Secure backup URL in case you forget your custom login slug
* **Session Token Management** – Secure authentication handling
= Visual Customization =
* **Custom Logo** – Upload your own logo via the WordPress Media Library
* **Background Options** – Choose from solid colors, gradients, or full background images
* **Form Styles** – Default, Dark Mode, or Glassmorphism (frosted glass effect)
* **Custom Fonts** – 10+ Google Fonts or system font stacks
* **Animations** – Fade, Slide, Zoom, or Bounce entrance effects
* **Box Shadows** – Five shadow depths including a colored glow effect
* **Button Colors** – Full color picker for the login button
* **Welcome Message** – Add custom text above the login form
* **Footer Text** – Custom footer content with HTML support
* **Advanced CSS** – Add your own CSS for complete control
