[ Web Proxy ]
URL:
Viewing: https://ko.wordpress.org/plugins/better-wp-security/ [Back]  [Original]
Kadence Security Password, Two Factor Authentication, and Brute Force Protection – | WordPress.org
WordPress.org

WordPress.org

Plugin Directory

Kadence Security Password, Two Factor Authentication, and Brute Force Protection

:
[]
[]

Kadence Security Password, Two Factor Authentication, and Brute Force Protection

: Nexcess

Reduce your WordPress websites risk to nearly zero with Kadence Security

iTheme Security. iThemes ? .

3 .* 2022 57% .** 24 .

, .

Kadence Security shields your site from cyberattacks and prevents security vulnerabilities. It automatically locks out bad users identified by our Brute Force Protection Network that is nearly 1 million sites strong and leverages your own blacklist. It secures and protects your most commonly attacked part of your WordPress website user login authentication.

() .

Thats 24/7/365 always-on truly Kadence Security.

The Kadence Security setup and onboarding experience allows anyone to secure their WordPress website in under 10 minutes, regardless of technical acumen. Knowing that you have enabled all the right security settings for your website will leave you feeling like your site has never been more secure.

Enabling the correct security settings based on the type of website you are building or maintaining is essential for proper security. An eCommerce site requires a different level of security than a basic blog. Kadence Security Site Templates make it quick and easy to apply the right security settings for your website.

6 :

  1. –
  2. –
  3. –
  4. –
  5. –
  6. –

. .

The Kadence Security Pro plugin provides a real-time WordPress security dashboard that monitors security-related events on your site around the clock. The Kadence Security Dashboard is a dynamic dashboard with all your WordPress websites security activity stats in one place, including brute force attacks, banned users, active lockouts, site scan results, and user security stats (Pro).

. .

  • Two Factor Authentication (2FA) – Make your WordPress login nearly impenetrable to attack by requiring users to enter a security code along with a password to login. The Kadence Security plugin allows you to add two-factor authentication to your WordPress login with several authentication methods, including mobile apps like Authy and Google Authenticator, email, and backup codes.

  • – 1 .

  • reCAPTCHA (Pro) – .

  • (Pro) – . 2 .

  • (Pro) – .

  • Automated Vulnerability Patching (Pro) – Kadence Security Pro includes Patchstack which patches vulnerabilities before you have a chance to and applies fixes even before a plugin developer or vendor has issued a patch.

Learn more about how passwordless login is the future and how Kadence Security can help you implement it today.

Different types of user levels require different levels of security. During the Kadence Security setup process, you can identify your websites key user groups. Once the different types of users are identified, you can apply the level of security that is just right for each user group.

:

  • For Clients Lets say you are configuring Kadence Security on a clients website. You will decide whether or not they are required to use two-factor authentication and if they should have access to the Kadence Security settings.

  • – .

() .

  • ( ) – .
    – .

  • ( ) – .

  • Network Brute Force Protection (Basic and Pro) – The network is the Kadence Security community and is nearly one million websites strong. If someone tries to break into websites in the Kadence Security community, Kadence Security will block them across the network.

  • Magic Links (Pro) – Security shouldnt get in your way. Magic Links allow you to log in to your WordPress site while your username is locked out by the Kadence Security Local Brute Force Protection feature.

  • File Change Detection (Basic and Pro) – Kadence Security logs changes made to your website that can help detect malicious activity on your website.

  • ( ) – () () , . Google API Google Google .

  • (Pro) – .

  • (Pro) – .

  • (Pro) – /, , /, , .

  • Version Management (Pro) – The Version Management feature in Kadence Security Pro allows you to auto-update WordPress, plugins, and themes. Beyond that, Version Management also has options to harden your website when you are running outdated software and scan for old websites.

CVSS( ) .

Kadence Security now uses the Patchstack Priority score, which goes beyond CVSS to provide a real-world risk assessment tailored to WordPress. It factors in how likely a vulnerability is to be exploited and its actual impact on your site.

.

  • SSL – SSL/TLS .

  • – . ( .)

  • (Pro) – API .

  • IP – IP .
  • ID 1 – ID ID1 .
  • – “wp_” .
  • – .
  • Server Config Rules – View or flush the server security rules generated by Kadence Security.
  • wp-config.php Rules – View or flush the wp-config.php security rules generated by Kadence Security.
  • – .
  • URL – URL .

?

Free support may be available with the communitys help in the WordPress.org support forums. Our Kadence Security support team provides top-notch technical support to all our Kadence Security Basic users there.

iTheme Security .

Get additional peace of mind with professional support from our expert team and pro features to take your sites security to the next level with Kadence Security Pro.

Kadence Security makes regular backups of your WordPress database, allowing you to get back online quickly in the event of a hack or security breach. Use Kadence Security to create and email database backups on a customizable schedule.

.

? , , .

*. “30 [2023]: , ” Zippia.com. June 15, 2023, https://www.zippia.com/advice/cybersecurity-statistics/

**https://blog.checkpoint.com/2023/01/05/38-increase-in-2022-global-cyberattacks/

GNU .

1 .

  • Kadence Security User Security Settings

FAQ

Why does Kadence Security require the latest WordPress version? Can’t I use a slightly older version?

  • . .

?

  • No. Kadence Security is designed to help improve the security of your WordPress installation from many common attack methods, but it cannot prevent every possible attack. Nothing replaces diligence and good practice. This plugin makes it a little easier for you to apply both.

, ?

  • While Kadence Security can be installed on either a new or existing site, we strongly recommend making a complete backup of your existing site before applying any features included in this plugin.

?

  • Kadence Security requires Apache or LiteSpeed and mod_rewrite or NGINX to work.

?

  • Kadence Security makes significant changes to your database and other site files which can be problematic for existing WordPress sites. Again, we strongly recommended making a complete backup of your site before using this plugin. While problems are rare, most support requests involve the failure to make a proper backup before installation. DISCLAIMER: Under no circumstances do we release this plugin with any warranty, implied or otherwise. We cannot be held responsible for any damage that might arise from the use of this plugin.

0102ebdf9550bca745d24ccea40c631d0acae73d6dd6b368e6a4ef83e3b01201 [0102ebdf9550bca745d24ccea40c631d0acae73d6dd6b368e6a4ef83e3b01201]

since August 2026 not usable any more

jenja 2026 8 14
It used to be a great plugin, which I have been using for many years on many websites. Since August 2026 it is not installable any more at most hosting environments. Also setting changes can’t be saved any more. The support writes that it is not a priority to solve the problem, because users can discuss with their hosters to adapt their security settings to the demands of Kadence
45e1fd67696a2761d143f694b60e7aa03fbe516116585061cd60f33b98abcc07 [45e1fd67696a2761d143f694b60e7aa03fbe516116585061cd60f33b98abcc07]

Terrible rebranding!

fabiopp 2026 8 2
It took me quite a lot to understand how to login to the new plugin owner company’s website interface. Plugin is having issues here and there. It is not sparking confidence so far!
885772c39b1f7094c40daace9c86e568dd1ff089b39292f2e50bf02e4daac469 [885772c39b1f7094c40daace9c86e568dd1ff089b39292f2e50bf02e4daac469]

Company-Changes but better Support

Rafael Gaus 2026 7 23
Well, i had plenty of situations i had no good support (IThemes, Solid). Since it changed to Liquid, much faster and better Support, it seems. Keep going!
918feaceadd90c58f67374695535071f36f47682184ef74038f0473d0c9835d3 [918feaceadd90c58f67374695535071f36f47682184ef74038f0473d0c9835d3]

Rebrand b.s.

Tekguild 2026 5 29 4
Another Liquidweb cockup – no advance messaging about rebrand, just suddenly seeing Kadence in my plugins and wondering WTF. I wouldn’t touch that garbage with someone else’s 10 foot pole. I want my money back. I’ll switch to Wordfence free + Cloudflare before having anything to do with Liquidweb or Kadence.
bc979ce03cac0a442b79c667df759fa0b9e7c876ef7e2a573d7e28d6362dbabc [bc979ce03cac0a442b79c667df759fa0b9e7c876ef7e2a573d7e28d6362dbabc]

Yet another Liquidweb mess up / rebrand

Charles 2026 5 29 2
No advanced comms. Just changed the name without changing anything else. Confused the hell out of me – thought all my sites had been hacked. Useless. Plugin description still talks about iThemes to Solid rebrand. Was it planned by a 5 year old? Same nonsense with the Learndash takeover – dreadful experience. Moved away from Liquidweb hosting a few years ago, only to find they are now creeping back into good stuff I want to use.
db41171f090c42c53b0d894a6f73ef286594be59f40900df9b4cd988858e7277 [db41171f090c42c53b0d894a6f73ef286594be59f40900df9b4cd988858e7277]

Terrible Rebranding

updesignme 2026 5 28 4
No communication, no information, everything changed and we are left in the dark. And I was paying for a subscription! This is now way to treat your loyal clients! Support also seem to have degraded. Slow, unresponsive. And now you have to buy a whole bundle of nonsense to have security! I’m done with this brand. They obviously don’t care about their existing clients. Very disappointed!
3,989

10.0.2

  • Bug Fix: Handle WP_Error in login interstitial session creation to prevent fatal errors.

10.0.1

  • Bug Fix: Race condition in file write could empty wp-config.php/.htaccess files.

10.0.0

  • Tweak: Updated branding from SolidWP to Kadence.
  • New: QR code for 2FA is generated locally by default (the GD PHP extension is required), with a Kadence Security-hosted solution as a fallback.

9.4.7

  • Bug Fix: Prevent email retry loops by ensuring the scheduled notification properties are saved.

9.4.6

  • Enhancement: Update Patchstack details for existing vulnerabilities.

9.4.5

  • Tweak: Ensure generated Nginx config rules are valid for customized directory structures.

9.4.4

  • Tweak: The Solid Security Basic and Solid Security Pro plugins can no longer be active at the same time.
  • Tweak: Config files now show “Solid Security” instead of “iThemes Security”.
  • Tweak: Improved Database Backups dashboard widget when the feature is disabled.
  • Tweak: Clarify the 2FA onboarding email confirmation message.
  • Tweak: All Gutenberg blocks use API version 3.
  • Security: Update the “tmp” npm package.
  • Bug Fix: Vulnerable Software dashboard card didn’t render properly.
  • Bug Fix: Firewall rules that depend on HTTP headers didn’t work correctly in all cases.
  • Bug Fix: PHP Warning: Undefined array key 1 core/admin-pages/logs-list-table.php.
  • Bug Fix: Logs will appear in the correct order regardless of database version.
  • Bug Fix: PHP Warning: Array offset on value of type null core/modules/security-check-pro/class-itsec-security-check-pro.php.

9.4.3

  • : .
  • : .

9.4.2

  • : PHP .

9.4.1

  • : 9.4.0 .

9.4.0

  • : Solid Security PHP 7.4 .
  • : .
  • : .
  • : .
  • : 4 .
  • : JS React 18 .

9.3.10

  • : SolidWP

9.3.9

  • : .
  • : .

9.3.8

  • : JS . React UI .
  • : StellarWP .

9.3.7

  • : API 3 .
  • : HTTP_HOST PHP .

9.3.6

  • : .

9.3.5

  • : PHP .

9.3.4

  • : Solid Security 6.5 .
  • : solid_security_mail_site_logo .
  • : PHP .
  • : PHP .
  • : SSL PHP .

9.3.3

  • : .
  • : .
  • : 6.6 .
  • : .

9.3.2

  • : “( )” IP . : https://go.solidwp.com/firewall-features-not-available
  • : WP- UI 2 TOTP .
  • : SolidWP .
  • : .

9.3.1

  • : .
  • : .
  • : .
  • : .
  • : .
  • : PHP 8.2 .

9.3.0

  • : IP IP .
  • : ( ) StellarWP .
  • : .
  • : iThemes .
  • : 2FA 2 .
  • : .
  • : .
  • : .
  • : .
  • : .
  • : PHP .

9.2.0

  • : 2 UI . 2 UI SOLID_SECURITY_LEGACY_2FA_UI .
  • : ‘ ’ UI . [solid_security_user_profile_settings] .
  • : 6.3 .
  • : 2FA .
  • : .
  • : ‘ iThemes Security ’ .
  • : .
  • : .

9.1.0

  • : .
  • : .
  • : .

9.0.3

  • :

9.0.2

  • : SVN dist

9.0.1

  • : URL . Naveen Muthusamy .
  • : edit_user promote_user .
  • : ‘iThemes Security ’ .
  • : ‘ ’ .
  • : .
  • : 2 .
  • : .
  • : 6.4 .

9.0.0

  • : iThemes Security ! : https://go.solidwp.com/security-welcome-to-solidwp
  • : 6.2 .
  • : . !
  • : .
  • : .
  • : . .
  • : .
  • : .
  • : MU-Plugin .
  • : IP .
  • : PHP 8.2 .
  • : PHP .

8.1.8

  • : iThemes Security . : https://go.solidwp.com/security-free-notice-ithemes-becoming-solidwp

8.1.7

  • : 2 .
  • : .
  • : ‘ ’ ‘ ’ .

8.1.6

  • : SSL .
  • : IP X-Forwarded-For IP IP .

8.1.5

  • : Enforce SSL . , . nlpro . : https://ithemes.com/?p=84309
  • : . .

8.1.4

  • : ‘’ .
  • : ‘’ .
  • : WP Cron .
  • : libsodium .
  • : “notify_admin” .
  • : 5 .

8.1.3

  • : iTheme Security PHP 7.3 5.9 .
  • : 2 . – .
  • : . . IP .
  • : “ ” .
  • : .
  • : PHP .
  • : Cron .
  • : .
  • : PHP 8.1 .
  • : “notify_admin” .
  • Calvin Alkan .

8.1.2

  • : .
  • : .

8.1.1

  • : .
  • : withState .

8.1.0

  • : iTheme Security 5.8 .
  • : iThemes Security iThemes Security . .
  • : iTheme Security “Go Pro” .
  • : .
  • : .
  • : ITSEC_DISABLE_MODULES .
  • : .
  • : NGINX .
  • : “ 1 ” .
  • : 5.9 .
  • : .

8.0.2

  • : UI .
  • : ‘’ ‘’ .
  • : .
  • : .
  • : .

8.0.1

  • : HTTPS SSL HTTPS .
  • : 2 iThemes Security 2 .
  • : 5.7.0 .
  • : .

8.0.0

  • : iTheme Security 5.7 PHP 7.0 .
  • : iThemes Security . : https://ithemes.com/?p=65086.
  • iThemes Security .
  • : . “ IP ” “ ” .
  • : , iThemes iThemes YouTube . ‘’ ‘’ .
  • : UI , , .
  • : 2 iThemes Security .
  • : .
  • : .
  • : “ ” .
  • : “ ” iThemes Security . .
  • : . “ITSEC_ENABLE_BACKUPS” .
  • : API “ ” .
  • : “Have I Been Pwned” .
  • : CSS JS .
  • : : 404 , , .
  • : : , URI , , , , URL , , , .
  • : “ ” .
  • : SSL “SSL ”, “ SSL ” “ SSL” .
  • : PHP 8 .
  • : .
  • : ITSEC_Setup . .
  • : PHP .
  • : .
  • : .
  • : .
  • : module.json . iTheme Security core/module-schema.json JSON module.json .
  • : “ipcheck” “network-brute-force” .
  • : API.
  • : REST API .
  • : RPC REST API . API .

.

5 4.6.

Your review

2 :

14 6

WordPress.org WordPress.org

The WordPress® trademark is the intellectual property of the WordPress Foundation.
state.selectedImage.alt [state.selectedImage.alt]
state.selectedImage.alt [state.selectedImage.alt]
Web Proxy Viewer  |  New URL  |  Original Page