Logo icon cloodo.com
Logo icon cloodo.com


  • Login
cloodo - Project Listing - iThemes Security (formerly Better WP Security)

iThemes Security (formerly Better WP Security)

Rating Cloodo

1,468 Reviews, TrustScore 4.53

Project In iThemes Security (formerly Better WP Security)

The Best WordPress Security Plugin to Secure & Protect WordPress

On average, 30,000 websites are hacked every day. Every 39 seconds, a new cyberattack happens somewhere on the web.

The good news is that most security disasters can be prevented. Using iThemes Security, you can identify and stop attacks on your website. Saving yourself the time and cost of repairing a hacked website.

Secure your Website in Minutes

The iThemes Security setup and onboarding experience is designed to allow anyone to secure their WordPress website in under 10 minutes, without needing a degree in cybersecurity.

Knowing that you have enabled all the right security settings for your website will leave you feeling like your site has never been more secure.

Security Site Templates to Fit Your Type of Site

An eCommerce site requires a different level of security than your average blog. iTheme Security Site Templates make it quick and easy to apply the right security settings for your website.

Choose from six different site templates to apply the type of security your site needs:
1. Ecommerce – websites that sell products or services
2. Network – websites that connect people or communities
3. Non-Profit – websites that promote your cause and collect donations
4. Blog – websites that share your thoughts or start a conversation
5. Portfolio – websites that showcase your craft
6. Brochure – simple websites that promote your business

Real-Time Website Security Dashboard

Every day, lots of activity is happening on your website that you can’t see. Many of these activities can be related to your site’s security, so monitoring these events is vital to keeping your site secure.

The iThemes Security Pro plugin provides a real-time WordPress security dashboard that monitors security-related events on your site around the clock. The iThemes Security Dashboard is a dynamic dashboard with all your WordPress website’s security activity stats in one place, including brute force attacks, banned users, active lockouts, site scan results, and user security stats (Pro).

WordPress Login Security

Secure your WordPress login with several layers of security

  • Two-Factor Authentication (2FA) – Make your WordPress login nearly impenetrable to attack by requiring users to enter a security code along with a password to login. The iThemes Security plugin allows you to add two-factor authentication to your WordPress login with several authentication methods, including mobile apps like Authy and Google Authenticator, email, and backup codes.
  • Password Requirements – Create and enforce a password policy for your users in less than a minute.
  • reCAPTCHA (Pro) – Stop bad bots from engaging in abusive activities on your website, such as attempting to break into your website using compromised passwords, posting spam, or even scraping your content.
  • Passwordless Logins (Pro) – WordPress security made easy. Secure your user accounts with 2fa & strong passwords while allowing real users login with a click of a mouse.
  • Trusted Devices (Pro) – Identify the devices you and other users use to block session hijacking attacks and limit Administrator privileges to Trusted Devices.

The Right Amount of Security for Every User Level

Different types of user levels require different levels of security. During the iThemes Security setup process, you can identify your website’s key user groups. Once the different types of users are identified, you can apply the level of security that is just right for each user group.

Here are a couple of examples of how User Groups are useful for securing your site:

  • For Clients – Let’s say you are configuring iThemes Security on a client’s website. You will decide whether or not they are required to use two-factor authentication and if they should have access to the iThemes Security settings.
  • For Customers – If you have an eCommerce website, you will decide whether or not you want to protect customer accounts with a password policy.

Privilege Escalation (Pro) also adds a safe, secure way to grant temporary admin-level access to your website.

Block Bad Bots & Ban User Agents with Lockouts

  • Ban Users – Permanently block repeat offenders from accessing your site.
    Local Brute Force Protection – Automatically identify and stop the most common method of attack on WordPress sites.
  • Network Brute Force Protection – The network is the iThemes Security community and is over a million websites strong. If someone tries to break into websites in the iThemes Security community, iThemes Security will block them across the network.
  • Magic Links (Pro) – Security shouldn’t get in your way. Magic Links allow you to log in to your WordPress site while your username is locked out by the iThemes Security Local Brute Force Protection feature.

Monitor Your Site’s Security Health

  • File Change Detection – iThemes Security logs changes made to your website that can help detect malicious activity on your website.
  • Site Scanner (Pro) – Enable twice-daily checks for known vulnerabilities and automatically apply a patch if one is available. Using the Google Safe Browsing API, the Site Scan also checks your Google’s blocklist status and will alert you if Google has found any malware on your website.
  • User Logging (Pro) – Keep a record of user activity in your WordPress security logs, including login/logout, user registration, adding/removing plugins, switching themes, changes to posts and pages, and more.
  • Version Management (Pro) – The Version Management feature in iThemes Security Pro allows you to auto-update WordPress, plugins, and themes. Beyond that, Version Management also has options to harden your website when you are running outdated software and scan for old websites.

Website Security Utilities

  • Enforce SSL – Force all connections to the website to be made over SSL/TLS.
  • Database Backups – Create backups of your WordPress database. (Not a complete backup.)
  • Geolocation (Pro) – Improve Trusted Devices by connecting to an external location or mapping API.

Advanced Security Tools

  • Identify Server IPs – Prevent issues caused by inadvertently locking out your server IPs.
  • Change User ID 1 – Change the user ID for the first WordPress user.
  • Change Database Prefix -Change the database prefix that WordPress uses.
  • Check File Permission – See the file and directory permissions of key areas of your site.
  • Server Config Rules – View or flush the server security rules generated by iThemes Security.
  • wp-config.php Rules – View or flush the wp-config.php security rules generated by iThemes Security.
  • Change WordPress Salts – Secure your site after a successful attack by changing the WordPress salts used to secure cookies and security tokens.
  • Hide Login URL – The Hide Backend setting can change the login URL of your site.

Need Help?

Free support may be available with the community’s help in the WordPress.org support forums (Note: this is community-provided support. iThemes does not monitor the WordPress.org support forums).

Our Help Center will help you become an iThemes Security expert.

Get added peace of mind with professional support from our expert team and pro features to take your site’s security to the next level with iThemes Security Pro.

Recover From a Hacked Site

iThemes Security makes regular backups of your WordPress database, allowing you to get back online quickly in the event of a hack or security breach. Use iThemes Security to create and email database backups on a customizable schedule.

For complete site backups and the ability to restore or move WordPress to a new host or domain, check out BackupBuddy.


Please let us know if you would like to contribute a translation.

iThemes Sync Integration

Manage more than one WordPress site? Release lockouts and keep your themes, plugins, and WordPress core up to date from one dashboard with iThemes Sync Pro. Start your free trial of Themes Sync Pro.


Released under the terms of the GNU General Public License.



screen short projects
screen short projects
screen short projects
screen short projects
screen short projects
screen short projects
screen short projects
Rating Cloodo

Reviews 1,468

Filter by:


From the very first day when this plugin is installed, it starts simulating various virus attacks on Your site. Through these fake attacks, the company sells the PRO version. Absolutely brazenly making You pay for non-existent threats. A lot of time was spent trying to track this behavior algorithm. The result of this whole Scam is that the company imitated the security system and extorts money from customers for this. It is surprising that WordPress itself does not attach importance to this and does not ban these scammers and extortionists. All hosting companies in the world use their own security systems, so you should not use this infectious plugin.



2022-03-24 at 19:34:30

Rating Cloodo

Careful using this plugin for any production sites. My website was locked with the message “You have been locked out due to too many invalid login attempts” even though I did not fail to login. This message was shown not only for me but also for my client.

If you are busy and away from your website, the entire day the website will not be functional!



2022-03-24 at 19:34:30

Rating Cloodo

and no way back. Forget it forever.



2022-03-24 at 19:34:27

Rating Cloodo

I stopped on the site of passwords, very grateful to you for it



2022-03-24 at 19:32:58

Rating Cloodo

I have been using wp since ho well 2000, am not good with dates, anyway after getting defaced a couple of times, I started getting my finger tips into making wp more secure, I recall changing the name of my db´s, not using admin, differerent prefix, using mod_auth and writing my own .htpas… and .htacc…, well; those days are gone. Now it takes me a whole 5 minutes to add some more security to my wp sites.



2022-03-24 at 19:31:22

Rating Cloodo

nice plugin



2022-03-24 at 19:31:19

Rating Cloodo

This one plugin covers so many bases! Essential.



2022-03-24 at 19:30:23

Rating Cloodo

i really hate your plugins its because before installing this plugin everything was working fine but now water changes i make to my website i get some error just because of your plugins this plugins keeps on changing your files and always gets so many error because of this plugin

  • This topic was modified 4 years, 4 months ago by ronwisely.


2022-03-24 at 19:30:13

Rating Cloodo

Very comprehensive security plugin. One-click gives you a detailed security audit. The only reason I didn’t give it 5 stars is because it fails to recognize security measures you may have implemented manually via the .htaccess file. Otherwise, I recommend this plugin to anyone.



2022-03-24 at 19:30:13

Rating Cloodo

Works great!



2022-03-24 at 19:30:02

Rating Cloodo

I’m happy with this plugin. Never had any problems with my site security.



2022-03-24 at 19:29:34

Rating Cloodo

Works well, very little hassle



2022-03-24 at 19:29:34

Rating Cloodo

This plugins stops unwanted bots from probing your site for weaknesses.



2022-03-24 at 19:29:10

Rating Cloodo

This app is helping our website in blocking spammers and hackers.



2022-03-24 at 19:28:34

Rating Cloodo

i’m using WP version 4.4 Beta 2 and it works well.



2022-03-24 at 19:28:29

Rating Cloodo

Very happy with how this has been working.



2022-03-24 at 19:28:29

Rating Cloodo

It works well, thanks to developers



2022-03-24 at 19:28:27

Rating Cloodo

Wouldn’t set up a site without this in place!


Shaa Taylor

2022-03-24 at 19:28:25

Rating Cloodo

As long as you take the time to work out what all the options mean and don’t try to fully lock down your site straight away, it works really well.

Be warned: If you start messing with options that you don’t understand, then be prepared to lock yourself out of your site, so make sure you whitelist your IP first. Its actually pretty easy to get back in though. Still, isn’t it supposed to keep people out of your site ????

Also, deactivate this plugin if you are moving your site as you may well have trouble logging in at the other end.


Alan Wood

2022-03-24 at 19:28:25

Rating Cloodo

Great plug-in. Takes a little time to figure out all the settings and tweak it correctly but it offers a lot of great features.



2022-03-24 at 19:26:47

Rating Cloodo

Great product that works well



2022-03-24 at 19:26:27

Rating Cloodo

Smooth and no conflict with other plug ins (so far).



2022-03-24 at 19:26:11

Rating Cloodo

Once you get the settings right, it works really, really well.



2022-03-24 at 19:23:13

Rating Cloodo

unable to turn off file change alerts for cache but ok otherwise. Excluded folder wp-content/cache/ but still get alerted every time cache changes. It is a little unsettling to see the constant alerts.

If I decide to ignore then something might get missed.



2022-03-24 at 19:22:39

Rating Cloodo

Great plugin. The free version suits for most of my sites.


Projects Statistics



Latest update








About Listing

This profile is being listed freely by Cloodo community member. If you are owner of this profile, please click here to

Cloodo is open for all usefull and constructive reviews which is almost automatically published, but we fight fake reviews

Logo icon cloodo.com

Cloodo helps to accellerate Digital Transformation for any business with Know-How Agencies supported by Smart Project Management Apps and Secured Payment for Final Result

Cloodo is a trademark of Cloodo Inc, an Atlas company with registered address at Suite 206, 651 N Broad St , MiddleTown, NewsCattle, Delaware, US

Cloodo is also a sister company with Netbase JSC. whom Development Center at Suite 207, M3M4 Building, 91 Nguyen Chi Thanh, Hanoi, VN





Licenses And Terms

Privacy Policy

Browse All Directories Agency

Browse All Directories Project

Logo icon cloodo.com

Cloodo Inc. Copyright ©2011-2021 All Rights Reserved.


Developed by Netbase JSC