Login IP & Country Restriction

What is Login IP & Country Restriction?

Developed by Iulia Cazan and maintained for 12 years, Login IP & Country Restriction is a focused security plugin that controls WordPress authentication based on location. It hooks into the authenticate filter to block login attempts from specific IP addresses or entire countries. The plugin currently holds 8K+ active installs with a 4.6/5 rating from 52 reviews, where 82% are 3% are one-star. Version 6.8.2 was last updated on May 21, 2026, reflecting consistent maintenance over a decade.

This plugin handles two independent restriction types: IP-based blocking and country-based blocking. You can enable either or both. The core logic is simple—if a visitor’s IP is not in your allowed list, or their country is not selected, they cannot log in. This makes it a direct tool for those seeking to block country WordPress access without complex firewall rules.

Key Features of Login IP & Country Restriction

• IP Whitelist Login Control – Restrict access to only specified IP addresses, with localhost IPs (127.0.0.1 and ::1) added by default for local setups.
• Country-Based Login Filtering – Select allowed countries from a built-in list to enforce a country ip restriction on the login page.
• Independent Restriction Modes – Configure IP and country rules separately, or combine both for layered security.
• Redirect on Block – Send restricted users to the frontpage when they attempt to access login URLs.
• Default Allow Mode – Ships in an “allow all” state, so you must explicitly configure restrictions before they take effect.
• Authenticate Filter Integration – Works at the WordPress authentication hook level, blocking unauthorized access before any session is created.
• Lightweight Codebase – No external API calls for geolocation; the country list is embedded, keeping performance overhead minimal.

Who Should Use Login IP & Country Restriction?

This plugin suits site owners who need a straightforward method to block login by country WordPress or limit admin access to known IPs. With 8K+ active installs, it appeals to beginners and intermediate users who manage small-to-medium WordPress sites—blogs, business sites, or membership portals—where login security is a priority but dedicated firewall tools are overkill. The 4.6 rating suggests it meets expectations for this audience.

If you want to restrict wp admin by ip country without editing server config files, this plugin provides a UI-based solution. However, the 0% support resolution rate (0 resolved threads out of 0 open in the past 2 months) indicates very low support activity, meaning users must be comfortable self-diagnosing issues. The developer assumes no warranty, so testing on a staging site is advised before production use.

Installation & Setup

Installation follows the standard WordPress process: upload the plugin folder to /wp-content/plugins/, activate it, then configure settings under the Users menu. The setup is beginner-friendly, but the plugin includes a critical warning—you must add your own IP or country to the allowed list before enabling restrictions. Failing to do so can lock you out of the admin area. The default whitelist includes 127.0.0.1 and ::1 for local development, easing setup for localhost users.

Support & Community

Support data for the last two months shows 0 open threads and 0 resolved threads, yielding a 0% resolution rate. This likely reflects the plugin’s simplicity rather than neglect—users rarely need help because the feature set is narrow. The 83% five-star rating suggests most users get it working without issue. However, the 2% one-star rate could indicate lockout problems for those who misconfigure the allowed IPs or countries. With 51 total ratings, the sample is small, so the 4.6 score should be viewed as generally positive but not extensively validated. The plugin’s 12-year age and consistent updates (last on May 21, 2026) provide some reassurance of reliability.