For my customers i usually secure the wp-admin section by htaccess/htpasswd method
# Auth protect wp-login.php
<Files wp-login.php>
AuthName "Restricted Admin-Area"
AuthType Basic
AuthUserFile /home/www/.htpasswd
Require valid-user
</Files>
but how do you secure your sites if a blog with public registration is in use?
login-attempts plugin or something like this.
Or is it possible to devide forum-login and wp-login ?
Hey Guenter!
You can try to install a log in widget like: https://wordpress.org/plugins/sidebar-login/ – then the user does not need to go to wp-login.php to log in. BBPress integrates seamlessly into WordPress though and shares the user database, etc. with wordpress. Thus you can’t separate the wordpress login from the bbpress login. You can also try to install security plugins: https://wordpress.org/plugins/search.php?q=wordpress+login+security&sort= but I can’t recommend a certain plugin because I never used them for personal projects.
Best regards,
Peter