A custom login page plugin that replaces the standard WordPress login with a polished, secure page in your own design — and send every client, team member and administrator straight to the right place.
Current version: 2.0.0 · WordPress 6.2 or newer (tested up to 7.1) · PHP 7.4 or newer
Choose your logo, colours, light or dark style and the words on the page, then preview before you save. Signing in, forgotten passwords and choosing a new password all happen on the same polished page.
The attempt limit covers this page, the standard WordPress screen and XML-RPC — and password-reset requests too. Add a free Cloudflare Turnstile robot check, allow sign-in by email only, and ask for the password again before sensitive changes after a long session.
Everyone goes straight to the right place: clients and members to their own area, administrators to the dashboard. Add an account button to your header that shows the person’s initials and their own links once they are signed in.
Logo, colours, light or dark, texts and a brand panel — sign in, forgot password and new password on one page.
A destination and button label per role; links from emails always lead back to the requested screen.
Shows “Log in” to visitors and the person’s initials with their own area, profile and log out when signed in.
Attempt limit for this page, wp-login.php and XML-RPC; optional Cloudflare Turnstile; email-only sign-in.
Every sign-in and failed attempt with device and address, a “Last sign-in” column and automatic clean-up.
Days signed in per role, and the password asked again before sensitive changes after a set time.
Use the arrows to browse the screens — click any screenshot to see it full size.
Give people a sign-in that feels part of your brand, not part of WordPress.
Deliver a professional, secure login on every website you build.
Attempt limits and an optional robot check on every way in.
The standard WordPress screen always stays available at a safe fallback address.
Limit Login Attempts Reloaded, two-factor plugins and others that use the normal sign-in hooks keep working.
A wrong email or password gets the same neutral answer, so nobody can find out which accounts exist.
Old entries are cleaned up automatically and can be exported or erased on request.
No. The standard WordPress login is always available at /wp-login.php?esl=off, and the robot check only switches on after its keys are verified.
Yes — plugins that use WordPress’s normal sign-in hooks (for example Limit Login Attempts Reloaded or two-factor plugins) keep working on the new page.
No. WaveLogin works on its own on any WordPress website, with any theme. Plugins that send people to their own area after signing in — shops, memberships, client areas — keep working.
Find businesses in many places at once, get their verified emails and phone numbers, and send outreach and newsletters from your own WordPress.
Plan. Chat. Execute. Deliver. — projects, chats, tasks and invoices for your team and your clients
Every email your WordPress site sends — in your design and your words, with templates and a live preview.
Message us on WhatsApp — we’ll answer your questions and help you get set up.
