Install and activate

This page shows how to install Nahnu Login Shield and turn it on. It takes about two minutes.

Before you start

• Make a backup. It’s a good habit before adding any plugin.
• Keep a way back in. Shield can lock out an IP, including yours, after repeated failed sign-ins. Keep access to your hosting account or files, just in case. Our “I locked myself out” page shows how to get back in.
• Check your versions. Shield checks your PHP and WordPress versions when you activate it. If your site doesn’t meet the requirements, it stays off and tells you which version it needs. The current requirements are listed on the plugin’s WordPress.org page.

Install from the WordPress dashboard (recommended)

You can also view the plugin and its reviews on the Nahnu Login Shield page on WordPress.org.

1. In your WordPress admin, go to Plugins → Add New Plugin.
2. Search for Nahnu Login Shield.
3. Find it in the results and click Install Now.
4. When the button changes, click Activate.

Install by uploading the plugin

Use this if you downloaded the plugin file yourself.

1. Go to Plugins → Add New Plugin → Upload Plugin.
2. Choose the plugin’s .zip file and click Install Now.
3. Click Activate Plugin.

You can also upload the nahnu-login-shield folder to /wp-content/plugins/ with SFTP, and then activate the plugin under Plugins.

Open the settings

After activating, go to Settings → Login Shield. This is where everything is configured. The header shows a Protected badge when protection is on.

What’s on after you activate

On a fresh install, Shield starts protecting your login and registration forms right away. Failed sign-ins are counted and locked out, and the JavaScript presence check turns away bots that skip your page’s script.

A few things are off until you choose them:

• CAPTCHA. No CAPTCHA is used until you choose a provider on the Widget tab.
• Geo-blocking. Blocking by country is off until you turn it on in the Geo tab.
• Early blocking. This optional extra is never installed automatically. You install it yourself from the General tab.
• Form integrations. Turn on WooCommerce, Bricks Builder, SureForms and comment protection on the Integrations tab.

Using OOPSpam

OOPSpam needs its own plugin. Install and activate the OOPSpam Anti-Spam plugin and enter your API key there first. Shield detects it automatically.

If activation fails

If WordPress shows an error when you activate, it’s almost always because the PHP or WordPress version is too old. Ask your host to update PHP, or update WordPress, and try again. If you’re stuck, contact us through the Support page.