Enhance WordPress Login Security: How to Add Security Questions

If you prefer not to use a plugin, custom code can achieve the same result.

Warning:

Backup your website before making changes to avoid accidental errors.

Steps to Implement:

1. Add Custom Fields to Login Form
   
   Use the following code snippet to display a security question field on the login form. Add this to your theme’s functions.php file:

   php

   Copy code

   function custom_security_question_field() {
echo '<p><label for="security_question">What is your favorite color?<br />
<input type="text" name="security_question" id="security_question" class="input" /></label></p>';
}
add_action('login_form', 'custom_security_question_field');

2. Validate the Answer

   Add this validation to ensure users answer the security question correctly:

   php

   Copy code

   function validate_security_question($user, $password) {
$answer = $_POST['security_question'];
if ($answer !== 'blue') { // Replace 'blue' with your correct answer
return new WP_Error('error', 'Incorrect security question answer.');
}
return $user;
}
add_filter('authenticate', 'validate_security_question', 30, 2);

3. Test Your Changes
   
   Log out and test the login page to ensure the security question appears and functions correctly.