Do you want to remove the option to login with an email address on your WordPress site? Email addresses are widely used as a Croatia B2B List login requirement on many websites, but the more people who know your email, the less secure it is. A popular alternative is to ask visitors to create a username to log in instead.
A username can be different on each website that allows you to create one. This can help guard against brute force attacks on your website. WordPress security should be one of the biggest concerns of any web developer. Today I will show you how to remove login by email address in WordPress using the No Login by Email Address plugin.
Benefits of deleting logins by email address
Anyone who knows your email can attempt a brute force attack. Think about it, all you need is an email and password to log in to most websites. If you have one of these two pieces of information, guessing the other is trivial with software. Emails are also not used for a single account. Take a minute and think about how many accounts need your email address to log in. It’s probably a lot.
This means anyone who knows your email address can attempt to log in as you. Of course, most large websites offer excellent security to guard against these types of cyberattacks, but that’s not always the case for smaller, newer websites.
Disadvantages of deleting logins by email address
In a perfect world, every visitor would create a unique ID for every website, but that’s just not the case. In fact, most people prefer to use the same login credentials for multiple websites. Do not do that ! This can create a domino effect for accounts to be breached. Just because you remove the email address doesn’t mean visitors will use a unique username.
More than likely they will use the same username for every website and it will have the same result as using your email to login. Forcing users to stop using their email address to log in will rarely solve the main problem, but it may be worth a try.
How to Remove Login by Email Address in WordPress
Today I will show you how to remove login by email address in WordPress using the No Login by Email Address plugin. This plugin will immediately remove the ability to log in with an email address on WordPress. Users will only be able to login with their username once the plugin is activated. Keep in mind that you can deactivate the plugin at any time if you want to use email addresses to log in again.