Title: Ultimate Security – ຕົວສະແກນຊ່ອງໂຫວ່, 2FA ແລະ ການປົກປ້ອງການເຂົ້າສູ່ລະບົບ Author: WP Ultimate Security Published: 22 ມີນາ 2025 Last modified: 30 ກັນຍາ 2026 --- ຄົ້ນຫາປລັກອິນ ![](https://ps.w.org/ultimate-security/assets/banner-772x250.png?rev=3695904) ![](https://ps.w.org/ultimate-security/assets/icon-256x256.gif?rev=3678713) # Ultimate Security – ຕົວສະແກນຊ່ອງໂຫວ່, 2FA ແລະ ການປົກປ້ອງການເຂົ້າສູ່ລະບົບ ໂດຍ [WP Ultimate Security](https://profiles.wordpress.org/wpultimatesecurity/) [ດາວໂຫຼດ](https://downloads.wordpress.org/plugin/ultimate-security.1.0.40.zip) * [ລາຍລອຽດ](https://lo.wordpress.org/plugins/ultimate-security/#description) * [ການຣີວິວ](https://lo.wordpress.org/plugins/ultimate-security/#reviews) * [ການຕິດຕັ້ງ](https://lo.wordpress.org/plugins/ultimate-security/#installation) * [ການພັດທະນາ](https://lo.wordpress.org/plugins/ultimate-security/#developers) [ການຊ່ວຍເຫຼືອ](https://wordpress.org/support/plugin/ultimate-security/) ## ຄຳອະທິບາຍ **Stop hackers and bots from getting into your WordPress site.** Ultimate Security adds two-factor login, blocks password-guessing attacks, stops spam bots and warns you about plugins with known security holes. A setup wizard picks the right settings for your kind of site, so you don’t have to understand every option. #### Why site owners choose it * **Free, with no account needed.** Install it and it works. No sign-up and no usage tracking. * **Set up in about 3 minutes.** The wizard asks what kind of site you run, checks it, and shows every change before applying it. You can undo it all later. * **Try before you enforce.** Test Mode shows what would have been blocked, without blocking anyone. * **You can’t lock yourself out for good.** The wizard gives you an emergency link that switches the plugin off from any browser. #### Protect your login **Two-factor login.** After the password, users confirm with a code sent by email or shown in an authenticator app (Google Authenticator, Authy, Microsoft Authenticator and similar). Choose which user roles need it. Works on the WordPress, WooCommerce and Ultimate Member login forms. **Stop password-guessing bots.** * Lock out anyone who gets the password wrong too many times. Repeat offenders wait longer each time. * Permanently block addresses you never want to see again. * An administrator can send a locked-out user a 15-minute recovery link. * Works behind Cloudflare automatically. Site Health tells you if your host’s setup needs one extra step. **Hide your login page.** Move `wp-login.php` to a private address so bots can’t find it. **Stronger passwords.** * Set rules for length, letters, numbers and symbols, or pick a ready-made preset. * Stop people reusing old passwords, and ask for a new one on first login or after a set time. * Reject passwords that have appeared in known data leaks. The check never sends the password itself anywhere. **Control who stays signed in.** * Limit how many devices one account can use at once. * Sign people out automatically after a period of inactivity. * See who is signed in right now, and end any session with one click. #### Block spam and bots on your forms Add Google reCAPTCHA or Cloudflare Turnstile to your login, registration, password reset and comment forms, and to WooCommerce login, registration and checkout. * Check that your keys work before going live. * If the CAPTCHA service is down, your forms keep working. * Won’t clash with another CAPTCHA plugin on the same form. #### Find security problems before hackers do **Vulnerability scanner.** Checks WordPress, your plugins and your themes against a database of known security holes, and emails you when it finds one. It works without an API key; WPScan or Patchstack keys add extra coverage. * Runs on a schedule in the background. * ແຈ້ງເຕືອນປລັກອິນທີ່ບໍ່ໄດ້ຮັບການອັບເດດມາເປັນເວລາດົນນານ. * Results show in the dashboard, Site Health and your plugins list. **Security score.** One number that tells you how well protected your site is, and which fix to do next. **File check.** Compares your WordPress core files with the official copies, so changed or added files stand out. **Safer updates.** Choose when WordPress, plugins and themes update automatically. Set update days and quiet periods, delay updates by a few days, and get an email when something changes. #### Advanced protection **Cloudflare firewall rules.** If your site uses Cloudflare, connect your account and turn on ready-made rules from wp-admin: let good bots through, block bad crawlers and risky traffic, and block attacks on known WordPress flaws before you’ve had a chance to update. You can preview every rule before it goes live. **Security keys (salts).** Change the secret keys in `wp-config.php` on demand or on a schedule, which signs everyone out and makes stolen login cookies useless. You get a warning before a scheduled change, and can restore a previous set. #### ໂໝດທົດສອບ Turn on your protections without blocking anyone, and review a log of what would have been blocked. Choose which user roles it covers. Visitors who aren’t signed in are still held to the login limit, and Test Mode switches itself off after seven days, so a forgotten test never leaves your site unprotected. #### Moving from another plugin * Import your two-factor and login settings from Wordfence Login Security. Preview it first and undo it if you change your mind. * Copy your settings to another site, or keep a backup, as a file. * Detects WooCommerce, Ultimate Member, page builders, form, caching and SEO plugins, and warns you if another security plugin is already doing the same job. #### Privacy No usage tracking. The plugin contacts an outside service only when you switch on a feature that needs one, and each is listed under External Services below. #### For developers ``` wp ultimate-security template list wp ultimate-security template apply