Login Guard1.8.1
See who is knocking at the door.
Blocks brute-force attacks, emails an alert when an account signs in from an unknown device or country, password policy, active sessions and a map of logins.
- Price
- 59 € excl. VAT
- Compatible
- Dolibarr 16 to 24
- Languages
- French, English
What you get
Attacks stop on their own.
Addresses that keep trying wrong passwords are paused, longer each time. Your own address stays on the allow list.
An unusual login stands out.
When an account signs in from a new device or country, an alert email goes out with the city, the network and a map of the area.
Everything stays on your server.
Password policy, revocable active sessions, log and map of logins. Geolocation runs locally, no IP address is sent to a third party.
In pictures
Specifications
- Current version
- 1.8.1
- Compatible
- Dolibarr 16 to 24
- Price
- 59 € excl. VAT
- Updated
- 3 October 2026
- Languages
- French, English
- Documentation
- Dolibarr wiki
Frequent questions
I locked myself out, what can I do?
The pause lasts 5 minutes the first time, then gets longer each time it happens again, up to the cap you set. Wait for the pause to end, or sign in from another address, then unblock yours in the current blocks screen. To keep it from happening again, add your address to the allow list with the "add my current IP" button.
The city shown on the map is wrong
IP geolocation is only approximate, especially on mobile networks, where the address may be tied to another city of the operator. The "connection source" shows the operator and the network type (fixed, mobile, hosting or VPN), which helps you tell whether the city is reliable. For your offices or your VPN, declare the real position in "Declared places" and it will take priority over the public databases.
Are IP addresses sent to an outside service?
No. Geolocation uses a database installed on your server, either the free DB-IP Lite or MaxMind GeoLite2 with your key. The maps in alert emails are drawn on your server too. There is no API key and no subscription.
Why no alert on the first day?
Each account's first login is learned silently and becomes the known device and country. After that, an alert is only sent for a new device or a new country. This avoids a wave of false alerts on the day you install it.
Customer reviews
No review published yet. If you use one of my modules, your feedback will help the next customers decide.
Reviews are left freely by customers, read by me before publication and shown with their date. No review is paid for. I do not publish off-topic, abusive or promotional messages.
Announcements
When I fix a vulnerability, when an update is needed or when something changes, I write it here.
No announcement yet.
Get notified of new versions
One email per new release and per security alert, nothing else. One-click unsubscribe.