Title: 24TT Login Security and Brander Author: 24 Tech Time Published: 8 May 2026 Last modified: 4 October 2026 --- Search plugins ![](https://ps.w.org/24tt-login-security-and-brander/assets/banner-772x250.jpg?rev =3526886) ![](https://ps.w.org/24tt-login-security-and-brander/assets/icon-256x256.png?rev =3526886) # 24TT Login Security and Brander By [24 Tech Time](https://profiles.wordpress.org/24techtime/) [Download](https://downloads.wordpress.org/plugin/24tt-login-security-and-brander.1.0.4.zip) * [Details](https://en-gb.wordpress.org/plugins/24tt-login-security-and-brander/#description) * [Reviews](https://en-gb.wordpress.org/plugins/24tt-login-security-and-brander/#reviews) * [Installation](https://en-gb.wordpress.org/plugins/24tt-login-security-and-brander/#installation) * [Development](https://en-gb.wordpress.org/plugins/24tt-login-security-and-brander/#developers) [Support](https://wordpress.org/support/plugin/24tt-login-security-and-brander/) ## Description **24TT Login Security and Brander** is an enterprise-grade, zero-bloat security and white-labeling solution for WordPress. Designed for agencies and security-conscious site owners, it fortifies your WordPress perimeter while delivering a seamless, custom-branded login experience for your clients. Instead of relying on heavy frameworks, this plugin uses native WordPress APIs and strictly optimized PHP to protect your site without slowing it down. ### 🛡️ Enterprise Perimeter Defense * **Hide wp-login.php & /wp-admin/:** Completely obfuscate your login portal. Bots and unauthenticated guests attempting to access default login routes are silently redirected to your homepage before core authentication redirects even trigger. * **Brute Force Protection:** Transient-based Limit Login Attempts. Locks out attackers for 15 minutes after 3 failed attempts, intercepting them at Priority 1 before heavy database queries execute. * **Kill XML-RPC:** Permanently disables XML-RPC to shut down massive DDoS and brute-force vectors. * **Block User Enumeration:** Prevents hackers from scraping usernames via author archives (`/?author=1`) and the REST API. * **Generic Error Masking:** Overwrites default login errors so attackers cannot verify if a username exists. ### 🎨 Agency-Grade Brander * **Custom Login Logo:** Replace the default WordPress logo with your client’s brand. * **Custom Colors:** Tailor the background and primary button colors using the native WordPress Color Picker. * **Smart Contrast Calculator:** Automatically detects if your background is light or dark (using the YIQ formula), adjusting the “Lost Password” and “Back to Site” links to guarantee 100% visual accessibility. * **Role-Based Redirects:** Automatically route administrators to the backend dashboard, while sending clients or subscribers to a custom URL (like a user portal). ## Screenshots [⌊The Visual Branding & User Interface (UI) settings panel.⌉⌊The Visual Branding& User Interface (UI) settings panel.⌉[ The Visual Branding & User Interface (UI) settings panel. [⌊The Perimeter Defense & Routing configuration.⌉⌊The Perimeter Defense & Routing configuration.⌉[ The Perimeter Defense & Routing configuration. [⌊A fully white-labeled, secure login portal with dynamic contrast text.⌉⌊A fully white-labeled, secure login portal with dynamic contrast text.⌉[ A fully white-labeled, secure login portal with dynamic contrast text. ## Installation 1. Upload the `24tt-login-security-and-brander` directory to the `/wp-content/plugins/` directory via FTP, or upload the zipped file directly through the WordPress plugins screen. 2. Activate the plugin through the ‘Plugins’ menu in WordPress. 3. Navigate to **Settings > 24TT Security** to configure your secret login slug, branding colors, and client redirects. 4. **Important:** If you set a custom login slug, remember it! You will need it to log back in. ## FAQ ### I forgot my secret login slug and am locked out! What do I do? Simply access your site via FTP or a File Manager. Navigate to `/wp-content/plugins/` and temporarily rename the `24tt-login-security-and-brander` folder to something else (e.g., `disabled-24tt`). This will safely deactivate the plugin, and you can log in normally via `wp-login.php`. Once logged in, rename the folder back, reactivate the plugin, and check your settings. ### Will this slow down my website? Absolutely not. The admin settings interface only loads in the backend, and the security rules are designed to intercept attacks at the earliest possible hook (` init` and `authenticate`), saving your server from processing heavy WordPress database queries. ## Reviews ![](https://secure.gravatar.com/avatar/2dd824f0f95e9b767040de58bf94d9f54eb1fcf6ddb0b1278d005b589dfb870b? s=60&d=retro&r=g) ### 󠀁[Excellent performance and Easy to Use](https://wordpress.org/support/topic/excellent-performance-and-easy-to-use/)󠁿 [teddyug](https://profiles.wordpress.org/teddyug/) 12 June 2026 We tested this plugin and it performs excellently. We are using on some of our sites and plan to activate on all our sites. We loved the branding customisation. [ Read all 1 review ](https://wordpress.org/support/plugin/24tt-login-security-and-brander/reviews/) ## Contributors and Developers “24TT Login Security and Brander” is open source software. The following people have contributed to this plugin. Contributors * [ 24 Tech Time ](https://profiles.wordpress.org/24techtime/) * [ Johnious Tumusiime ](https://profiles.wordpress.org/johniouspatriot/) [Translate “24TT Login Security and Brander” into your language.](https://translate.wordpress.org/projects/wp-plugins/24tt-login-security-and-brander) ### Interested in development? [Browse the code](https://plugins.trac.wordpress.org/browser/24tt-login-security-and-brander/), check out the [SVN repository](https://plugins.svn.wordpress.org/24tt-login-security-and-brander/), or subscribe to the [development log](https://plugins.trac.wordpress.org/log/24tt-login-security-and-brander/) by [RSS](https://plugins.trac.wordpress.org/log/24tt-login-security-and-brander/?limit=100&mode=stop_on_copy&format=rss). ## Change Log #### 1.0.4 * **Minor:** Version bump to correct the version number mentioned in the change log section in the readme.txt to the actual version number. #### 1.0.3 * **Maintenance:** Tested and confirmed full compatibility with WordPress 7.1. * **Minor:** Version bump to clear repository resubmission. #### 1.0.2 * Minor version bump for repository resubmission. #### 1.0.1 * Minor version bump for repository resubmission. #### 1.0.0 * Initial Release: The fortress is sealed. ## Meta * Version **1.0.4** * Last updated **2 weeks ago** * Active installations **10+** * WordPress version ** 5.8 or higher ** * Tested up to **7.1.3** * PHP version ** 7.4 or higher ** * Language * [English (US)](https://wordpress.org/plugins/24tt-login-security-and-brander/) * Tags * [Brute Force](https://en-gb.wordpress.org/plugins/tags/brute-force/)[custom login](https://en-gb.wordpress.org/plugins/tags/custom-login/) [hide login](https://en-gb.wordpress.org/plugins/tags/hide-login/)[security](https://en-gb.wordpress.org/plugins/tags/security/) [White Label](https://en-gb.wordpress.org/plugins/tags/white-label/) * [Advanced View](https://en-gb.wordpress.org/plugins/24tt-login-security-and-brander/advanced/) ## Ratings 5 out of 5 stars. * [ 1 5-star review ](https://wordpress.org/support/plugin/24tt-login-security-and-brander/reviews/?filter=5) * [ 0 4-star reviews ](https://wordpress.org/support/plugin/24tt-login-security-and-brander/reviews/?filter=4) * [ 0 3-star reviews ](https://wordpress.org/support/plugin/24tt-login-security-and-brander/reviews/?filter=3) * [ 0 2-star reviews ](https://wordpress.org/support/plugin/24tt-login-security-and-brander/reviews/?filter=2) * [ 0 1-star reviews ](https://wordpress.org/support/plugin/24tt-login-security-and-brander/reviews/?filter=1) [Your review](https://wordpress.org/support/plugin/24tt-login-security-and-brander/reviews/#new-post) [See all reviews](https://wordpress.org/support/plugin/24tt-login-security-and-brander/reviews/) ## Contributors * [ 24 Tech Time ](https://profiles.wordpress.org/24techtime/) * [ Johnious Tumusiime ](https://profiles.wordpress.org/johniouspatriot/) ## Support Got something to say? Need help? [View support forum](https://wordpress.org/support/plugin/24tt-login-security-and-brander/)