Visit Documentation Site<\/a><\/p>\n\nKey Features<\/h4>\n\n
Two-Factor Authentication<\/strong>\n* Email OTP verification\n* Google Authenticator, Authy, Microsoft Authenticator (TOTP\/HOTP)\n* 2FA status dashboard<\/p>\n\nLogin Protection<\/strong>\n* Custom login URL (hide wp-admin)\n* Login attempt limits\n* Password policy enforcement\n* Session management<\/p>\n\nBot Protection<\/strong>\n* Google reCAPTCHA v2\/v3\n* Cloudflare Turnstile\n* Protect login, registration, comments, WooCommerce<\/p>\n\nSecurity Hardening<\/strong>\n* Security keys rotation\n* Auto-update controls\n* Site health monitoring<\/p>\n\nContent Protection<\/strong>\n* Right-click disable\n* Text selection control\n* Image drag prevention<\/p>\n\nTools<\/strong>\n* Security Score dashboard\n* Settings backup\/restore\n* Test mode for previewing rules<\/p>\n\nExternal Services<\/h3>\n\n
This plugin connects to external services:<\/p>\n\n
Cloudflare Turnstile<\/h4>\n\n\n- When: Turnstile CAPTCHA enabled<\/li>\n
- Sends: Response token, site secret key<\/li>\n
- URL: https:\/\/challenges.cloudflare.com\/turnstile\/v0\/siteverify<\/li>\n
- Privacy: https:\/\/www.cloudflare.com\/privacypolicy\/<\/li>\n<\/ul>\n\n
Google reCAPTCHA<\/h4>\n\n\n- When: reCAPTCHA enabled<\/li>\n
- Sends: Response token, site secret key<\/li>\n
- URL: https:\/\/www.google.com\/recaptcha\/api\/siteverify<\/li>\n
- Privacy: https:\/\/policies.google.com\/privacy<\/li>\n<\/ul>\n\n
WordPress.org Salt API<\/h4>\n\n\n- When: Security keys rotation requested<\/li>\n
- Sends: Request for random salt strings<\/li>\n
- URL: https:\/\/api.wordpress.org\/secret-key\/1.1\/salt\/<\/li>\n<\/ul>\n\n\n
\n- Go to Plugins > Add New<\/li>\n
- Search \"Ultimate Security\"<\/li>\n
- Click Install, then Activate<\/li>\n
- Go to Ultimate Security menu<\/li>\n
- Run the setup wizard<\/li>\n<\/ol>\n\n
Quick Start<\/h4>\n\n\n- Enable 2FA for admin accounts<\/li>\n
- Set login attempt limits<\/li>\n
- Add CAPTCHA to forms<\/li>\n
- Check your Security Score<\/li>\n<\/ol>\n\n\n
\nWill this slow my site?<\/h3><\/dt>\nNo. Adds less than 0.1s to page load.<\/p><\/dd>\n
Works with WooCommerce?<\/h3><\/dt>\nYes. CAPTCHA works on checkout and login forms.<\/p><\/dd>\n
What if I get locked out?<\/h3><\/dt>\nRename \/wp-content\/plugins\/ultimate-security<\/code> via FTP, or run wp plugin deactivate ultimate-security<\/code> via SSH.<\/p><\/dd>\nWorks with other security plugins?<\/h3><\/dt>\nYes. Disable overlapping features to avoid conflicts.<\/p><\/dd>\n
Need technical knowledge?<\/h3><\/dt>\nNo. The setup wizard handles configuration.<\/p><\/dd>\n\n<\/dl>\n\n\n
1.0.17<\/h4>\n\n\n- Fix: Minor bug fixes and stability improvements<\/li>\n
- Improvement: Code cleanup and optimization<\/li>\n<\/ul>\n\n
1.0.16<\/h4>\n\n\n- Improvement: Code improvements to the ovearll plugin making it snappier.<\/li>\n<\/ul>\n\n
1.0.15<\/h4>\n\n\n- Improvement: Conflict management between applied settings.<\/li>\n
- Improvement: UI improvements to existing settings pages. Making it more intuitive to use.<\/li>\n
- Fix: Multiple bug fixes to dashboard. You should get more accurate results now.<\/li>\n
- Fix: New deactivation URL was not saving after deactiviting-activating plugin.<\/li>\n<\/ul>\n\n
1.0.14<\/h4>\n\n\n- Fix: Email 2FA codes were not being sent properly<\/li>\n
- Fix: 2FA code page flickering effect after login<\/li>\n<\/ul>\n\n
1.0.13<\/h4>\n\n\n- New: Completely redesigned user interface for better usability<\/li>\n<\/ul>\n\n
1.0.12<\/h4>\n\n\n- New: Security Score meter to track your site's security level<\/li>\n
- Improvement: Enhanced modal design for better UI\/UX<\/li>\n<\/ul>\n\n
1.0.11<\/h4>\n\n\n- Fix: Minor UI bug fixes<\/li>\n<\/ul>\n\n
1.0.10<\/h4>\n\n\n- Security: Removed unauthenticated AJAX actions<\/li>\n
- Security: REST routes now require admin permission<\/li>\n<\/ul>\n\n
1.0.9<\/h4>\n\n\n- Fix: Dashboard emergency deactivation URL display issue<\/li>\n<\/ul>\n\n
1.0.8<\/h4>\n\n\n- Improvement: Human-readable values in activity log<\/li>\n
- Improvement: Reduced plugin size with optimized code<\/li>\n
- Fix: 2FA reset issue for users<\/li>\n
- Fix: Password policy not applying to new users<\/li>\n<\/ul>\n\n
1.0.7<\/h4>\n\n\n- New: Activity Log feature<\/li>\n
- New: Improved dashboard design<\/li>\n
- Fix: Nonce validation issues<\/li>\n
- Fix: Turnstile not showing on comment forms<\/li>\n<\/ul>\n\n
1.0.6<\/h4>\n\n\n- Fix: Custom login setup issues<\/li>\n
- Fix: Email 2FA asking for OTP twice<\/li>\n
- Fix: Feedback form email delivery<\/li>\n
- Improvement: Reorganized menu navigation<\/li>\n
- Improvement: Performance optimizations<\/li>\n<\/ul>\n\n
1.0.5<\/h4>\n\n\n- Fix: Request logs page display issue<\/li>\n
- Fix: URL Guard SQL query display<\/li>\n
- Improvement: Performance optimizations<\/li>\n<\/ul>\n\n
1.0.4<\/h4>\n\n\n- Redesigned settings page interface<\/li>\n<\/ul>","raw_excerpt":"Protect your WordPress site with 2FA, brute force protection, CAPTCHA, custom login URL, and security hardening.","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/bal.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin\/222131","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/bal.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin"}],"about":[{"href":"https:\/\/bal.wordpress.org\/plugins\/wp-json\/wp\/v2\/types\/plugin"}],"replies":[{"embeddable":true,"href":"https:\/\/bal.wordpress.org\/plugins\/wp-json\/wp\/v2\/comments?post=222131"}],"author":[{"embeddable":true,"href":"https:\/\/bal.wordpress.org\/plugins\/wp-json\/wporg\/v1\/users\/wpultimatesecurity"}],"wp:attachment":[{"href":"https:\/\/bal.wordpress.org\/plugins\/wp-json\/wp\/v2\/media?parent=222131"}],"wp:term":[{"taxonomy":"plugin_section","embeddable":true,"href":"https:\/\/bal.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_section?post=222131"},{"taxonomy":"plugin_tags","embeddable":true,"href":"https:\/\/bal.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_tags?post=222131"},{"taxonomy":"plugin_category","embeddable":true,"href":"https:\/\/bal.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_category?post=222131"},{"taxonomy":"plugin_contributors","embeddable":true,"href":"https:\/\/bal.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_contributors?post=222131"},{"taxonomy":"plugin_business_model","embeddable":true,"href":"https:\/\/bal.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_business_model?post=222131"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}