Melapress Login Security plugin releases history

On this page, you’ll find a highlight of what is new and improved with every update release of the Melapress Login Security plugin. Entries are listed in chronological order, starting from the most recent at the top. For a complete and detailed list of all changes, including bug fixes, please refer to the Melapress Login Security change log.

Update 2.4.1 (Premium only)

Release date: 3rd September 2026

Version 2.4.1 is a minor follow-up update to change the uninstall function of the plugin, making it compatible with both Freemius and our new in-house licensing system. This change will also be available in the free edition of the plugin in the next update.

Update 2.4.0

Release date: 2nd September 2026

Version 2.4.0 is an update that introduces new ways to protect sensitive account changes, improves user lock and device management, and gives administrators more flexibility when configuring login security policies.

Additional verification for sensitive account changes

This update introduces two new policies that allow you to add extra verification when users make security-sensitive changes to their user accounts on your WordPress website.

You can now require users to enter their current password before setting a new password. You can also require users to answer their security questions before changing their own email address.

These policies provide additional safeguards against unauthorized account changes when someone gains access to an authenticated user session.

Improved user locking and administration

We’ve expanded the user locking functionality introduced in version 2.3.0 to make locked accounts easier to find and manage.

Administrators can now lock or unlock an account directly from the user’s profile page. The Locked Users page also includes new search and filtering options for username, email address, user ID, user role, and the reason the account was locked.

We have also improved how locks are handled internally. A user can now have only one active lock, the original lock reason is retained, and manual locks record when they were applied.

Better device and session security

This update includes several improvements to the unrecognized devices functionality. Device recognition now uses a secure device cookie rather than relying on the browser User-Agent, making device identification more reliable.

You can also configure how long a device remains recognized, with options ranging from one month to one year. And the users can now view the known devices associated with their account directly from their WordPress user profile, and remove them.

Last but not least, users will now also receive a new email notification when a login occurs while the user already has an active session.

More flexible policy management

Password, session, device, and login policies are now organized into separate groups that administrators can enable or disable independently. This makes it easier to configure the security policies that are relevant to your website without affecting unrelated functionality.

We’ve also made a number of improvements to the plugin interface, reports, emails, settings validation, and security hardening.

PHP 8.0 is now required

The minimum supported PHP version for Melapress Login Security is now PHP 8.0. Websites running an older PHP version will need to upgrade PHP before updating to version 2.4.1.

Other improvements and fixes

This release also includes a large number of reliability and compatibility fixes, including improvements to role-specific password policy enforcement, settings imports, password reset and account unlock processes, reports, email notifications, and WordPress 7.x compatibility.

Update 2.3.0

Release date: 26th January 2026

The first update for this plugin of 2026 adds more flexibility around user account magnagement, improves how temporary users are handled, and makes day-to-day security management a bit easier for site administrators.

Manually lock user accounts

You can now manually lock a user account and prevent that user from logging in.

This gives administrators a quick way to block access when needed. For example, when an employee is unavailable for an extended period of time, or a user leaves the company but the account is not ready to be deleted, or simply, an an account looks suspicious.

More flexible temporary logins

Temporary logins are now easier to manage in security-heavy setups.

A new option in the Temporary Logins module now lets you exclude temporary users from 2FA enforcement, when using WP 2FA. This means that if 2FA is enforced on the temp user’s role, they can still log in without 2FA, making the process of granting short-term access to contractors etc much easier, while keeping your main user base fully protected.

Better control over password reset emails

We’ve added a new setting that allows you to control how many password reset emails are sent when users with expired passwords attempt to log in.

This helps reduce unnecessary email noise and avoids flooding users’ inboxes while still enforcing strong password policies.

Other highlights

On top of the above, we’ve also improved help texts across the plugin to make settings clearer and easier to understand. This update also introduces a new plugin deactivation feedback form, helping us better understand user needs and improve the plugin over time.

Update 2.2.1

Release date: 11th November 2025

This release of Melapress Login Security is a maintenance update. It includes a number of bug fixes and other plugin functionality improvements.

Update 2.2.0 – Security update

Release date: 15th July 2025

This release includes a security fix and a number of updates focused on better support for the latest WordPress versions and improved reliability.

In addition to the security fix, we have made several overall plugin and code security improvements, and addressed a number of issues reported by our users during the last few weeks.

Update 2.1.1

Release date: 7th April 2025

This release is a security and maintenance release which includes a number of important security and performance updates.

Update 2.1.0

Release date: 27th March 2025

This release includes important maintenance and security improvements, along with a powerful new feature designed to simplify secure access management for your WordPress website.

Do you need to grant temporary access to a developer, client, or third party? You can now create secure, one-click login links that don’t require a password and automatically expire after a set time or number of uses.

Create unlimited temporary login links
Assign any user role
Set expiration time and usage limits
Streamline access without compromising security

This is the safest and most efficient way to provide temporary access to your site—no more sharing credentials or creating disposable accounts.

Other Enhancements & Updates

Custom failed login notification: New setting to customize the default failed login message on your site.
New notification template tags: More flexibility with additional variable tags for email and user notification templates.
Performance improvements: Under-the-hood code enhancements for better plugin performance.
Security fix: An important patch to keep your site safe and secure.

We highly recommend updating to this latest version to benefit from the new features, improved performance, and enhanced security.

Update 2.0.2

Release date: 27th January 2025

This is a Premium edition only release. It is a maintenance update featuring a number of plugin improvements and also a number of bug fixes.

Update 2.0.1

Date: 10th December 2024

Update 2.0.1 is a maintenance release and it features some interoperability improvements with WP 2FA, a number of text and UI updates, and several bug fixes.

Update 2.0.0

Date: 5th November 2024

Update 2.0.0 is a major Melapress Login Security update that adds several new features and improvements. Several new security policies have been added to the plugin, alongside enhancements to existing features, updates to the code, UI, and UX, and several bug fixes.

What’s new?

Here is an overview of the new login policies and hardening methodologies included with this version:

Security questions

You can now require users to configure security questions. These questions are used for verification purposes whenever users perform actions such as resetting their password and unlocking their user account. This provides additional security measures with no involvement from the website administrator required.

Unrecognized devices policy

You can configure Melapress Login Security to alert the user whenever their username logs in from a browser session/device that has not been used before. Alerts are sent via email, ensuring the users stay informed on the go. There is also the option to remotely log out the session.

You can now restrict access to the login page by IP address(es) through whitelists/allowlists for additional login page hardening.

Session cookies settings

This new policy enables you to configure how long WordPress session cookies are valid for, with a separate option for users who check the “Remember me” option during login.

What else is new?

Aside from the new login policies mentioned above, version 2.0 also adds:

Restrict logins by either username, email address, or both.
Require all users to configure a new password on their next login

And much more.

What’s improved?

This update also packs several improvements and bug fixes that, among other things, include:

Code updates and enhancements ensuring better performance and more efficient resource usage code while adhering to WordPress coding standards
More granular password policies; you can now individually enable/disable specific password policies
Several UI improvements, such as improved help and settings text, grouped all the editable user notices on one page, etc.

Previous versions release notes:

Version 1

Melapress Login Security Release notes