How to configure the Max Login Attempts (Firewall)

To protect your WordPress site from brute force login attempts, Staq applies a default limit of 4 failed login attempts before temporarily banning the IP address for 1 hour. However, you can customize these settings to meet your specific security requirements.

Steps to Configure Max Login Attempts

1. Log into WordPress: Access the WordPress backend of your site.
2. Navigate to Staq Hosting: Click on Staq Hosting > Firewall, then select the Advanced subtab.

Customizing Login Attempt Settings

From the Advanced subtab, you can modify the following parameters:

• Max allowed failed login attempts: Define the maximum number of failed login attempts allowed before an IP address is temporarily banned.
• Login attempts time window: Set the time window in which failed login attempts are counted.
• Ban duration for failed logins: Specify the duration an IP address is banned after exceeding the maximum number of failed login attempts.

Disabling Max Login Attempts

If you wish to disable the max login attempts feature altogether, you can do so within the same settings. Note: Disabling this feature is strongly discouraged, as it significantly reduces your site’s protection against brute force attacks.

Conclusion

Configuring max login attempts provides an additional layer of security to your WordPress site, protecting it from unauthorized access. By customizing these settings in the Staq Hosting interface, you can tailor the protection to suit your site’s needs. For further assistance, feel free to contact our support team.