PREDAX
Get started
Help Center/WordPress Security/Login lockout thresholds

WordPress Security

Login lockout thresholds

Tune how many failed logins trigger lockouts.

Predax protects your login page from brute-force attempts. The limits live under Settings → Protection → Login Thresholds.

The settings

  • Risky IP block threshold — for VPN, proxy, datacenter, Tor, or high-risk IPs. After this many failed logins, the IP is permanently blacklisted. Keep this low (for example 3) — these visitors rarely have a good reason to fail repeatedly.
  • Clean IP lockout threshold — for ordinary residential/clean IPs. After this many failed logins they get a temporary lockout instead of a permanent ban (so a real customer who mistypes their password is not banned forever).
  • Clean IP lockout duration — how long that temporary lockout lasts before they can try again.

Recommendation

The defaults are sensible for most sites. Lower the thresholds if you are seeing brute-force attempts; raise the clean-IP threshold slightly if real users complain about lockouts.

Locked out yourself? See I locked myself out.

More in WordPress Security

Install & connect Predax Security

Install the plugin from WordPress.org, add your API key, and confirm it is connected.

Choose what to protect (Protected Areas)

What Login, Registration, Comment protection and Visitor Screening do — and why Visitor Screening must be on to screen browsing visitors.

Recommended starter settings

The setup-wizard presets and what each one turns on.

Detection Modes: Off, Monitor, Block

How the VPN, Proxy, Tor and Datacenter controls work — and the difference between Monitor and Block.

Risk Threshold explained

What the risk slider does and which preset to choose.

Allow-list and Block-list

Force-allow or force-block specific IPs or ranges.

Block by country or region

Block visitors from chosen countries or whole regions.

WordPress hardening

Extra protections that reduce your attack surface, under Settings → Advanced.

Why isn't Predax blocking a VPN, proxy, or bad IP?

A step-by-step checklist for when the plugin is installed but does not block the visitor you expect.

How to test safely

Test blocking without locking yourself out.

I locked myself out

Regain access if the plugin blocks you.

It's blocking real visitors

Loosen things if legitimate customers are being blocked.

← Back to Help CenterContact support