=== MisticGate ===
Contributors: misticuantum
Tags: security, login security, brute force, hide login, login protection
Requires at least: 6.4
Tested up to: 7.1
Requires PHP: 7.4
Stable tag: 1.0.0
License: GPL2
License URI: https://www.gnu.org/licenses/gpl-2.0.html

MisticGate puts a gate in front of your login page without changing its URL. Without the gate only you know, reaching the login page is very hard.

== Description ==

**Keep your login URL. Keep the bots out.**

MisticGate™ places a private gate in front of the standard WordPress login page. You reach the login form from your gate bookmark. Brute-force bots never get that far.

As soon as you install MisticGate, the screen for setting your gate URL opens. After you bookmark it, check the box and enable the gate, and setup is complete.

= What MisticGate does =

* Puts a private gate in front of your login page.
* Administrators with a valid session skip the gate. You choose which other roles may skip it too.
* Supports Multisite, with one gate for the whole network or a gate for each site.
* After you pass through the gate with a single-use pass, reusing that pass returns a 404.
* The gate URL is built so you can switch it periodically while you keep using the gate.
* The settings screen also has documentation that explains recovery and more.

= Recommended setup =

MisticGate is the first layer. We recommend combining it with:

* Two-factor authentication (2FA) from a security plugin.
* A login challenge, such as a math question or CAPTCHA.
* HTTPS and strong, unique passwords.

== Installation ==

1. Install and activate MisticGate. The settings screen opens.
2. Copy the gate URL and save it as a bookmark.
3. Confirm that you saved the bookmark, then enable the gate.

From then on, log in from your bookmark.

== Frequently Asked Questions ==

= I lost my gate URL. How do I log in? =

Add `define( 'MISTICGATE_DISABLE', true );` to `wp-config.php` and log in. Check or change the URL in the MisticGate settings, then remove the line.

= Can I use MisticGate with a plugin that changes the login URL? =

No. MisticGate protects the standard login URL. Do not combine it with plugins that change or hide the login URL.

= Where can I find the full instructions? =

In the Readme tab of the MisticGate settings.

== Screenshots ==

1. Settings screen 1.
2. Settings screen 2.

== Changelog ==

= 1.0.0 =
* Initial release.

== Upgrade Notice ==

= 1.0.0 =
Initial release.
