Guard Dog

Àpèjúwe

Guard Dog is a comprehensive security plugin designed to protect your WordPress site from unauthorized access and brute-force attacks. With features like custom login URLs, two-factor authentication, and multiple CAPTCHA providers, Guard Dog provides enterprise-level security for any WordPress site.

Key Features:

• Custom Login URLs Ìtumọ̀ Yorùbá: – Hide your wp-admin and wp-login.php from attackers
• Two-Factor Authentication (2FA) Ìtumọ̀ Yorùbá: – TOTP-based authentication with recovery codes
• Social Login (OAuth) Ìtumọ̀ Yorùbá: – Sign in with Google, Microsoft, or Apple
• Passkeys Ìtumọ̀ Yorùbá: – Use device-based biometric authentication like Face ID, Touch ID or Windows Hello
• Multiple CAPTCHA Providers Ìtumọ̀ Yorùbá: – Support for Google reCAPTCHA v2/v3, hCaptcha, and Cloudflare Turnstile
• Login Attempt Limiting Ìtumọ̀ Yorùbá: – Prevent brute-force attacks with intelligent lockout
• Access Control Ìtumọ̀ Yorùbá: – IP-based whitelist/blacklist protection
• Activity Monitoring Ìtumọ̀ Yorùbá: – Comprehensive logging of security events
• Temporary User Access Ìtumọ̀ Yorùbá: – Create temporary WordPress users with time-limited, secure access
• User Management Ìtumọ̀ Yorùbá: – Advanced user permission controls

Why Choose Guard Dog?

• Privacy-Focused Ìtumọ̀ Yorùbá: – Multiple CAPTCHA options including privacy-first providers
• WordPress.org Compliant Ìtumọ̀ Yorùbá: – Built following WordPress coding standards
• Enterprise-Ready Ìtumọ̀ Yorùbá: – Scalable features suitable for any site size
• User-Friendly Ìtumọ̀ Yorùbá: – Intuitive interface with helpful documentation
• Regular Updates Ìtumọ̀ Yorùbá: – Actively maintained and updated

Perfect For:

• Business websites requiring enhanced security
• WordPress sites handling sensitive data
• Multi-user sites with complex access requirements
• Anyone wanting comprehensive protection without complexity

Additional Information

Support:
For support questions, please use the WordPress.org support forums.

Privacy:
Guard Dog respects user privacy and offers multiple privacy-focused CAPTCHA options. No data is transmitted to third parties except for CAPTCHA verification when enabled.

Security:
Guard Dog follows WordPress security best practices and undergoes regular security audits. All user input is sanitized and all output is escaped.

Third-Party Services

Guard Dog integrates with the following third-party services to provide CAPTCHA protection. These services are optional and only used when CAPTCHA features are enabled.

Google reCAPTCHA (v2 and v3)

What it is: GoogleÌtumọ̀ Yorùbá: ’s CAPTCHA service that helps protect websites from spam and abuse.

What itÌtumọ̀ Yorùbá: ’s used for:
Ìtumọ̀ Yorùbá: – Verifying that login, registration, and password reset attempts are made by humans
Ìtumọ̀ Yorùbá: – Preventing automated bot attacks on your WordPress forms

What data is sent and when:
Ìtumọ̀ Yorùbá: – User interaction data (mouse movements, time spent on page) when CAPTCHA is solved
Ìtumọ̀ Yorùbá: – IP address of the user
Ìtumọ̀ Yorùbá: – Site domain for verification
Ìtumọ̀ Yorùbá: – CAPTCHA response token

Privacy and Terms:
Ìtumọ̀ Yorùbá: – Google reCAPTCHA Privacy Policy
Ìtumọ̀ Yorùbá: – Google reCAPTCHA Terms of Service
Ìtumọ̀ Yorùbá: – Google reCAPTCHA Data Usage

Cloudflare Turnstile

What it is: CloudflareÌtumọ̀ Yorùbá: ’s privacy-first CAPTCHA alternative that doesnÌtumọ̀ Yorùbá: ’t require user interaction.

What itÌtumọ̀ Yorùbá: ’s used for:
Ìtumọ̀ Yorùbá: – Invisible verification of human users during login, registration, and password reset
Ìtumọ̀ Yorùbá: – Privacy-focused protection without tracking or cookies

What data is sent and when:
Ìtumọ̀ Yorùbá: – Non-interactive browser signals when forms are submitted
Ìtumọ̀ Yorùbá: – IP address for verification
Ìtumọ̀ Yorùbá: – Site domain for validation

Privacy and Terms:
Ìtumọ̀ Yorùbá: – Cloudflare Privacy Policy
Ìtumọ̀ Yorùbá: – Cloudflare Terms of Service
Ìtumọ̀ Yorùbá: – Turnstile Documentation

hCaptcha

What it is: A privacy-focused CAPTCHA service that doesnÌtumọ̀ Yorùbá: ’t track users across websites.

What itÌtumọ̀ Yorùbá: ’s used for:
Ìtumọ̀ Yorùbá: – Human verification during login, registration, and password reset forms
Ìtumọ̀ Yorùbá: – Privacy-conscious alternative to Google reCAPTCHA

What data is sent and when:
Ìtumọ̀ Yorùbá: – User interaction with CAPTCHA challenge
Ìtumọ̀ Yorùbá: – IP address for verification
Ìtumọ̀ Yorùbá: – Site domain for validation

Privacy and Terms:
Ìtumọ̀ Yorùbá: – hCaptcha Privacy Policy
Ìtumọ̀ Yorùbá: – hCaptcha Terms of Service
Ìtumọ̀ Yorùbá: – hCaptcha Data Processing

Google OAuth (Social Login)

What it is: GoogleÌtumọ̀ Yorùbá: ’s OAuth 2.0 service that allows users to sign in using their Google account.

What itÌtumọ̀ Yorùbá: ’s used for:
Ìtumọ̀ Yorùbá: – Authenticating WordPress users via their Google account
Ìtumọ̀ Yorùbá: – Retrieving basic profile information (name, email) to link or create accounts

What data is sent and when:
Ìtumọ̀ Yorùbá: – User is redirected to GoogleÌtumọ̀ Yorùbá: ’s authorization server when clicking “Sign in with Google”
Ìtumọ̀ Yorùbá: – An authorization code is exchanged for an access token on your server
Ìtumọ̀ Yorùbá: – Basic profile information (name, email, Google user ID) is retrieved from GoogleÌtumọ̀ Yorùbá: ’s API
Ìtumọ̀ Yorùbá: – No ongoing data sharing Ìtumọ̀ Yorùbá: – data is only retrieved during the login process

Privacy and Terms:
Ìtumọ̀ Yorùbá: – Google OAuth Privacy Policy
Ìtumọ̀ Yorùbá: – Google OAuth Terms of Service
Ìtumọ̀ Yorùbá: – Google API Services User Data Policy

Microsoft Azure AD (Social Login)

What it is: MicrosoftÌtumọ̀ Yorùbá: ’s OAuth 2.0 service via Azure Active Directory that allows users to sign in using their Microsoft account.

What itÌtumọ̀ Yorùbá: ’s used for:
Ìtumọ̀ Yorùbá: – Authenticating WordPress users via their personal Microsoft account or organizational (work/school) account
Ìtumọ̀ Yorùbá: – Retrieving basic profile information (name, email) to link or create accounts

What data is sent and when:
Ìtumọ̀ Yorùbá: – User is redirected to MicrosoftÌtumọ̀ Yorùbá: ’s authorization server when clicking “Sign in with Microsoft”
Ìtumọ̀ Yorùbá: – An authorization code is exchanged for an access token and ID token (JWT) on your server
Ìtumọ̀ Yorùbá: – Basic profile information (name, email, Azure object ID) is extracted from the ID token
Ìtumọ̀ Yorùbá: – No ongoing data sharing Ìtumọ̀ Yorùbá: – data is only retrieved during the login process

Privacy and Terms:
Ìtumọ̀ Yorùbá: – Microsoft Privacy Statement
Ìtumọ̀ Yorùbá: – Microsoft Services Agreement
Ìtumọ̀ Yorùbá: – Microsoft Identity Platform Documentation

Apple Sign In (Social Login)

What it is: AppleÌtumọ̀ Yorùbá: ’s OAuth 2.0 / OpenID Connect service that allows users to sign in using their Apple ID.

What itÌtumọ̀ Yorùbá: ’s used for:
Ìtumọ̀ Yorùbá: – Authenticating WordPress users via their Apple ID
Ìtumọ̀ Yorùbá: – Retrieving basic profile information (name, email) to link or create accounts

What data is sent and when:
Ìtumọ̀ Yorùbá: – User is redirected to AppleÌtumọ̀ Yorùbá: ’s authorization server when clicking “Sign in with Apple”
Ìtumọ̀ Yorùbá: – An authorization code is exchanged for an access token and ID token (JWT) on your server
Ìtumọ̀ Yorùbá: – Basic profile information (email, user ID) is extracted from the ID token
Ìtumọ̀ Yorùbá: – UserÌtumọ̀ Yorùbá: ’s name is only provided on first authorization; subsequent logins return only the user ID
Ìtumọ̀ Yorùbá: – Apple may provide a private relay email address instead of the userÌtumọ̀ Yorùbá: ’s real email
Ìtumọ̀ Yorùbá: – No ongoing data sharing Ìtumọ̀ Yorùbá: – data is only retrieved during the login process

Privacy and Terms:
Ìtumọ̀ Yorùbá: – Apple Privacy Policy
Ìtumọ̀ Yorùbá: – Sign in with Apple Guidelines
Ìtumọ̀ Yorùbá: – Apple Developer Program License Agreement

TOTP (Time-based One-Time Password) Standard

What it is: An open standard (RFC 6238) for generating time-based one-time passwords used in two-factor authentication.

What itÌtumọ̀ Yorùbá: ’s used for:
Ìtumọ̀ Yorùbá: – Generating secure, time-limited authentication codes for 2FA
Ìtumọ̀ Yorùbá: – Providing backup authentication when primary 2FA methods are unavailable
Ìtumọ̀ Yorùbá: – Enabling compatibility with popular authenticator apps (Google Authenticator, Authy, Microsoft Authenticator, etc.)

What data is sent and when:
Ìtumọ̀ Yorùbá: – No external data transmission Ìtumọ̀ Yorùbá: – TOTP codes are generated locally using the TOTP algorithm
Ìtumọ̀ Yorùbá: – Secret key generation Ìtumọ̀ Yorùbá: – A unique secret key is generated locally when 2FA is enabled for a user
Ìtumọ̀ Yorùbá: – QR code generation Ìtumọ̀ Yorùbá: – QR codes are generated locally for easy setup with authenticator apps
Ìtumọ̀ Yorùbá: – Code verification Ìtumọ̀ Yorùbá: – Generated codes are verified locally against the stored secret key

Privacy and Terms:
Ìtumọ̀ Yorùbá: – RFC 6238 Ìtumọ̀ Yorùbá: – TOTP Standard
Ìtumọ̀ Yorùbá: – Google Authenticator Privacy Policy (if using Google Authenticator app)
Ìtumọ̀ Yorùbá: – Authy Privacy Policy (if using Authy app)
Ìtumọ̀ Yorùbá: – Microsoft Authenticator Privacy Policy (if using Microsoft Authenticator app)

Data Handling Summary

When CAPTCHA is disabled: No data is sent to any third-party services.

When CAPTCHA is enabled: Only the specific provider you choose receives verification data. Data is not shared between providers or stored by Guard Dog beyond the verification process.

When 2FA is disabled: No external data transmission occurs.

When 2FA is enabled:
Ìtumọ̀ Yorùbá: – All TOTP operations (code generation, verification) happen locally on your server
Ìtumọ̀ Yorùbá: – No data is transmitted to external services for 2FA functionality
Ìtumọ̀ Yorùbá: – Authenticator apps only receive the initial setup QR code or secret key
Ìtumọ̀ Yorùbá: – Recovery codes are generated locally and stored securely

When Social Login is disabled: No data is sent to any OAuth provider.

When Social Login is enabled:
Ìtumọ̀ Yorùbá: – Data is only sent to the configured providers (Google, Microsoft, Apple) during the login process
Ìtumọ̀ Yorùbá: – Only basic profile information (name, email, user ID) is retrieved
Ìtumọ̀ Yorùbá: – Social account links are stored locally in your WordPress database
Ìtumọ̀ Yorùbá: – Users can unlink their social accounts from their profile at any time

User control: Users can choose which CAPTCHA provider to use, or disable CAPTCHA entirely. 2FA can be enabled/disabled per user, and users can choose their preferred authenticator app. Social login can be enabled/disabled by administrators, and users can manage their linked social accounts. All security features are optional and configurable.