Title: Ultimate Security – Login Protection, 2FA, CAPTCHA & Hardening
Author: WP Ultimate Security
Published: <strong>2025 年 3 月 22 日</strong>
Last modified: 2026 年 5 月 11 日

---

搜索插件

![](https://ps.w.org/ultimate-security/assets/banner-772x250.png?rev=3397281)

![](https://ps.w.org/ultimate-security/assets/icon-256x256.gif?rev=3344476)

# Ultimate Security – Login Protection, 2FA, CAPTCHA & Hardening

 作者：[WP Ultimate Security](https://profiles.wordpress.org/wpultimatesecurity/)

[下载](https://downloads.wordpress.org/plugin/ultimate-security.1.0.19.zip)

[实时预览](https://cn.wordpress.org/plugins/ultimate-security/?preview=1)

 * [详情](https://cn.wordpress.org/plugins/ultimate-security/#description)
 * [评价](https://cn.wordpress.org/plugins/ultimate-security/#reviews)
 *  [安装](https://cn.wordpress.org/plugins/ultimate-security/#installation)
 * [开发进展](https://cn.wordpress.org/plugins/ultimate-security/#developers)

 [支持](https://wordpress.org/support/plugin/ultimate-security/)

## 描述

Ultimate Security protects your WordPress site from brute force attacks, unauthorized
access, and bots. Lightweight, modular, and privacy-focused.

#### Key Features

**Security Dashboard Overview to keep an on everything from one place**

 * Instantly see how protected your site is with our 5-tier scoring system:
 * Catch critical threats before they become problems. The dashboard surfaces security
   issues, outdated software, and misconfigurations — prioritized by severity so
   you know what to tackle
 * Monitor failed login attempts and see who’s currently online. Spot brute-force
   patterns in real time and take action instantly.

**Two-Factor Authentication**
 * Email OTP verification * Google Authenticator, 
Authy, Microsoft Authenticator (TOTP/HOTP) * 2FA status dashboard

**Login Protection**
 * Custom login URL (hide wp-admin) * Login attempt limits *
Password policy enforcement * Session management

**Bot Protection**
 * Google reCAPTCHA v2/v3 * Cloudflare Turnstile * Protect login,
registration, comments, WooCommerce

**Security Hardening**
 * Security keys rotation * Auto-update controls * Site health
monitoring

**Content Protection**
 * Right-click disable * Text selection control * Image drag
prevention

**Tools**
 * Security Score dashboard * Settings backup/restore * Test mode for 
previewing rules

### External Services

This plugin connects to external services:

#### Cloudflare Turnstile

 * When: Turnstile CAPTCHA enabled
 * Sends: Response token, site secret key
 * URL: https://challenges.cloudflare.com/turnstile/v0/siteverify
 * Privacy: https://www.cloudflare.com/privacypolicy/

#### Google reCAPTCHA

 * When: reCAPTCHA enabled
 * Sends: Response token, site secret key
 * URL: https://www.google.com/recaptcha/api/siteverify
 * Privacy: https://policies.google.com/privacy

#### WordPress.org Salt API

 * When: Security keys rotation requested
 * Sends: Request for random salt strings
 * URL: https://api.wordpress.org/secret-key/1.1/salt/

## 屏幕截图

 * [[
 * [[
 * [[
 * [[
 * [[
 * [[
 * [[
 * [[

## 安装

 1. Go to Plugins > Add New
 2. Search “Ultimate Security”
 3. Click Install, then Activate
 4. Go to Ultimate Security menu
 5. Run the setup wizard

#### Quick Start

 1. Enable 2FA for admin accounts
 2. Set login attempt limits
 3. Add CAPTCHA to forms
 4. Check your Security Score

## 常见问题

### Will this slow my site?

No. Adds less than 0.1s to page load.

### Works with WooCommerce?

Yes. CAPTCHA works on checkout and login forms.

### What if I get locked out?

Rename `/wp-content/plugins/ultimate-security` via FTP, or run `wp plugin deactivate
ultimate-security` via SSH.

### Works with other security plugins?

Yes. Disable overlapping features to avoid conflicts.

### Need technical knowledge?

No. The setup wizard handles configuration.

## 评价

此插件暂无评价。

## 贡献者及开发者

「Ultimate Security – Login Protection, 2FA, CAPTCHA & Hardening」是开源软件。 以下
人员对此插件做出了贡献。

贡献者

 *   [ WP Ultimate Security ](https://profiles.wordpress.org/wpultimatesecurity/)

[帮助将「Ultimate Security – Login Protection, 2FA, CAPTCHA & Hardening」翻译成简体中文。](https://translate.wordpress.org/projects/wp-plugins/ultimate-security)

### 对开发感兴趣吗?

您可以[浏览代码](https://plugins.trac.wordpress.org/browser/ultimate-security/)，
查看[SVN仓库](https://plugins.svn.wordpress.org/ultimate-security/)，或通过[RSS](https://plugins.trac.wordpress.org/log/ultimate-security/?limit=100&mode=stop_on_copy&format=rss)
订阅[开发日志](https://plugins.trac.wordpress.org/log/ultimate-security/)。

## 更新日志

#### 1.0.19

 * New: A more detailed modile for Login Actibivity
 * Improvement: Better Server Status card details
 * Fix: Issue regarding Email 2FA being auto applied to seleceted user roles.

#### 1.0.18

 * New: One-click Cloudflare WAF rules apply
 * New: New Modal for Login activity with detailed information.
 * Improvement: Code cleanup and optimization
 * Fix: Login redirected URL was showing exisiting login for password reset

#### 1.0.17

 * Fix: Minor bug fixes and stability improvements
 * Improvement: Code cleanup and optimization

#### 1.0.16

 * Improvement: Code improvements to the ovearll plugin making it snappier.

#### 1.0.15

 * Improvement: Conflict management between applied settings.
 * Improvement: UI improvements to existing settings pages. Making it more intuitive
   to use.
 * Fix: Multiple bug fixes to dashboard. You should get more accurate results now.
 * Fix: New deactivation URL was not saving after deactiviting-activating plugin.

#### 1.0.14

 * Fix: Email 2FA codes were not being sent properly
 * Fix: 2FA code page flickering effect after login

#### 1.0.13

 * New: Completely redesigned user interface for better usability

#### 1.0.12

 * New: Security Score meter to track your site’s security level
 * Improvement: Enhanced modal design for better UI/UX

#### 1.0.11

 * Fix: Minor UI bug fixes

#### 1.0.10

 * Security: Removed unauthenticated AJAX actions
 * Security: REST routes now require admin permission

#### 1.0.9

 * Fix: Dashboard emergency deactivation URL display issue

#### 1.0.8

 * Improvement: Human-readable values in activity log
 * Improvement: Reduced plugin size with optimized code
 * Fix: 2FA reset issue for users
 * Fix: Password policy not applying to new users

#### 1.0.7

 * New: Activity Log feature
 * New: Improved dashboard design
 * Fix: Nonce validation issues
 * Fix: Turnstile not showing on comment forms

#### 1.0.6

 * Fix: Custom login setup issues
 * Fix: Email 2FA asking for OTP twice
 * Fix: Feedback form email delivery
 * Improvement: Reorganized menu navigation
 * Improvement: Performance optimizations

#### 1.0.5

 * Fix: Request logs page display issue
 * Fix: URL Guard SQL query display
 * Improvement: Performance optimizations

#### 1.0.4

 * Redesigned settings page interface

## 额外信息

 *  版本 **1.0.19**
 *  最后更新：**3 天前**
 *  活跃安装数量 **10+**
 *  WordPress 版本 ** 5.8 或更高版本 **
 *  已测试的最高版本为 **6.9.4**
 *  PHP 版本 ** 8.1 或更高版本 **
 *  语言
 * [English (US)](https://wordpress.org/plugins/ultimate-security/)
 * 标签
 * [Brute Force](https://cn.wordpress.org/plugins/tags/brute-force/)[firewall](https://cn.wordpress.org/plugins/tags/firewall/)
   [login security](https://cn.wordpress.org/plugins/tags/login-security/)[security](https://cn.wordpress.org/plugins/tags/security/)
   [two factor authentication](https://cn.wordpress.org/plugins/tags/two-factor-authentication/)
 *  [高级视图](https://cn.wordpress.org/plugins/ultimate-security/advanced/)

## 评级

尚未提交反馈。

[Your review](https://wordpress.org/support/plugin/ultimate-security/reviews/#new-post)

[查看全部评论](https://wordpress.org/support/plugin/ultimate-security/reviews/)

## 贡献者

 *   [ WP Ultimate Security ](https://profiles.wordpress.org/wpultimatesecurity/)

## 支持

有话要说吗？是否需要帮助？

 [查看支持论坛](https://wordpress.org/support/plugin/ultimate-security/)