Securing Admin Accounts – Username Discovery

If you have pretty permalinks enabled WordPress will redirect all calls to /?author=1 to the author archive with the user name, eg.: /author/bob/. And then the visitor will know the author name.

Use Login Lockdown, that plugin does not reset accounts, it will block IP addresses.

Leave a Comment