Check Login Lite

Description

Check Login Lite enhances your WordPress login security with multiple protective features:

  • IP whitelist / blacklist management
  • 🌍 Country-based access restrictions (up to 5 countries allowed)
  • ✉️ Email alerts when unfamiliar IP logs in
  • 💬 Discord webhook notification support
  • 🔐 Pseudo Basic Authentication system for emergency lockdown
  • 🧠 Automatic country list fetch
  • 📜 Login history log

No need for advanced setup. Simple UI inside WordPress admin dashboard.

External services

This plugin uses third-party services only to provide the features you configure.

  1. countriesnow.space (country list generation)

– Service URL: https://countriesnow.space/api/v0.1/countries
– Used for: Building and refreshing the selectable country list used in admin settings.
– Data sent: No personal data is intentionally sent by the plugin for this request.
– When sent: On activation and when refreshing the country list file.
– Terms: https://github.com/MartinsOnuoha/countriesNowAPI/blob/master/LICENSE
– Privacy: A dedicated privacy policy URL is not publicly provided by this service provider as of March 23, 2026.
– Additional references: https://countriesnow.space/ / https://documenter.getpostman.com/view/1134062/T1LJjU52?version=latest

  1. freeipapi.com (IP geolocation)

– Service URL pattern: https://free.freeipapi.com/api/json/{IP}
– Used for: Determining country from IP for admin access restriction and login alert context.
– Data sent: The IP address being checked (current request IP).
– When sent: During admin access checks, settings page rendering, and login alert evaluation.
– Terms: https://freeipapi.com/terms
– Privacy: https://freeipapi.com/privacy

  1. Notification providers (optional, admin-configured)

– Services: Discord Webhook, Slack Webhook, Chatwork API
– Used for: Sending security alert messages and emergency authentication credentials.
– Data sent: Site URL, username, login IP/country, emergency token/URL, and configured message body.
– When sent: Only when an alert/security event occurs and the corresponding provider is configured.
– Discord Terms/Privacy: https://discord.com/terms / https://discord.com/privacy
– Slack Terms/Privacy: https://slack.com/terms-of-service / https://slack.com/privacy-policy
– Chatwork Terms/Privacy: https://go.chatwork.com/en/terms.html / https://go.chatwork.com/en/privacy.html

This plugin does not include behavioral tracking or analytics for end users by default. Notification delivery is administrator-configured and event-driven.

Installation

  1. Upload the plugin folder to /wp-content/plugins/check-login-lite
  2. Activate the plugin through the ‘Plugins’ menu in WordPress
  3. Go to Settings > Check Login Lite in the admin panel
  4. Configure IP, country access, alert options, etc.

FAQ

Will this block me from logging in if I make a mistake?

No. The plugin always allows access from IPs in your whitelist, regardless of country settings.

What if I forget my Basic Auth credentials?

The pseudo Basic Auth expires automatically in 24 hours or after successful login.

Does it work on multisite?

Currently, this plugin is tested only in single-site installations.

Reviews

There are no reviews for this plugin.

Contributors & Developers

“Check Login Lite” is open source software. The following people have contributed to this plugin.

Contributors

Translate “Check Login Lite” into your language.

Interested in development?

Browse the code, check out the SVN repository, or subscribe to the development log by RSS.

Changelog

1.0.0

  • Initial release