49
All In One Login — Login Page Security and Customization for WordPress with Google reCAPTCHA, Social Login, Temporary Login, 2FA, and more.
Mourning the lightweight legend that turned into a bloated upsell machine.
DecliningReview burstPoor rating
49/100
Loyal users feel betrayed by the recent bloat and aggressive upsells that replaced the original simplicity.
Active installs
~65,000
our estimate · wp.org shows 60k+
Rating
3.6★
35 ratings
Trend · vs a year ago
-44%
Declining fast
442 → 247 installs/day
Warnings
- Reviews concentrated in a single month — usually a marketing push or paid wave.
What to watch out for
- MINORverified rating is 3.71★
- MAJOR40% of reviews in one month (2023-08-19)
- MINORdownloads down 44% vs a year ago
Downloads over time
real new installs per day · release spikes shown separately from the trend2025-04-302025-08-082025-11-162026-02-232026-06-03
organicrelease spikerelease tailorganic trend · 14d rolling median
Declining fast · -44% in the last year
442/day a year ago→247/day today
Reviews
what people actually sayAll In One Login was once well-regarded as a simple, lightweight login-URL security plugin, but its reputation has sharply declined following a major update that introduced bloat, Freemius tracking, aggressive upsells, and a paid-tier shift that users widely describe as a betrayal of the original free tool.
What people like
- +Effective at protecting against brute-force attacks by obscuring the login URL×3
- +Responsive and helpful support when issues are raised×4
- +Compatible with Plesk WordPress Toolkit
- +Previously praised for being simple and lightweight before the 2.0 overhaul×3
Common complaints
- −Version 2.0 update introduced heavy upsells, a new top-level admin menu, and locked features behind a paid tier, widely seen as a betrayal of loyal free users (since 2.0)×4
- −Plugin became bloated after a takeover, adding the Freemius tracking library and unnecessary options contrary to its original lightweight design×2
- −Update from 1.1.3 to 1.1.4 caused widespread site crashes, locking users out of wp-admin and requiring FTP/SSH recovery (since 1.1.4)×5
- −Disabling the plugin can cause permalink issues on the site
- −Breaks WPForms file upload functionality
- −Does not fully block access to the classic wp-admin URL, undermining its core security purpose
- −Accused of being a copycat of an existing plugin, with the same unresolved 404 redirect bug
Review trustMostly organic
- 3.71★Verified rating — holds steady vs the raw 3.60★
- 20%One-shot reviewers — most reviewers are active community members
- past spikeReview timing — up to 40% of all reviews landed in a single month
Reviews per month · 5★ vs lower
2023-07-202025-01-102026-06-04
5★ reviews1–4★ reviews
All-time ratings · 35 total
Latest reviews · 35 analyzed
- 2026-05-08★★★★★Works perfectlyFahad Murtaza
- 2025-01-29★★★★★Once Perfect, Now a Paid Upgrade: A Disappointing Changeufukart
- 2025-01-29★★★★★A great plugin has been destroyedAndrea
- 2024-10-24★★★★★Greatveylau
- 2024-09-12★★★★★nice customization feature, very nasty login URl feature!devsaredead
- 2024-08-06★★★★★I just wanted “one function” plugin …mklusak
- 2023-11-01★★★★★Works But Breaks WPFormsmadmoneymike5
- 2023-08-24★★★★★Great, Simple plugin.jaysonvds
- 2023-08-18★★★★★Great plugin and support!tonygao
- 2023-07-27★★★★★My client's website has crashedolinstru1-shot
Releases
recent versions from WordPress.org SVNAlternatives to All In One Login
Top Security plugins, ranked by score.For developers & the curious
the raw signals behind the grade — none of this is on the friendly summary aboveDownload signals
Baselines are computed on organic days only — release spikes and their tails are excluded, so they're not inflated by the auto-update wave.
408
Baseline · median of last 7 organic days
511
Prior 7-day baseline
278
Floor · 25th percentile over 14 days
1,071
Mean release-day peak (30d)
403
Latest day · 2026-06-03(organic)
-20.2%
Week-over-week organic trend
Review signals
Concentration and drive-by metrics drive the review-burst and fake-review flags. 30–40% solo reviewers is normal; we only flag the extremes.
40%
Max month share · biggest single 30-day window
2.55
Distribution CV · <0.6 even, >1.5 bursty
63%
5★ share in analyzed sample
20%
Solo reviewers · only this one wp.org activity
—
Volume velocity · last 6mo vs prior 6mo
3.63 → 3.71★
Sample avg · raw → solo-filtered