Your WordPress, Secured.
Brute force attacks are a growing concern for many website administrators. By integrating features from the WordPress plugin BruteProtect, Jetpack’s brute force protection can help you take control of site security and protect your site from this common attack vector.
A Centralized Experience
Continuing Jetpack’s mission to bring feature parity between self-hosted WordPress sites and WordPress.com, you will soon be able to manage security features from either your site’s dashboard or a central interface on WordPress.com. Locked out of your site from too many failed login attempts? You can whitelist your IP address in WordPress.com.
Jump Start
With the click of a button, you can immediately boost performance, security, and engagement to jump start your site with a curated set of Jetpack modules. This feature is tailored for those who are new to the plugin or new installation of Jetpack.
How to Update
Visit the Plugins page in your Dashboard and update Jetpack from there. Alternatively update all your sites in bulk from wordpress.com/plugins/jetpack.
How to Install
You can install Jetpack by visiting our install page or by searching for it in your Plugins page on your dashboard.
Feedback
Please give us your feedback by leaving a comment and letting us know what you love or what you’d like to see in future updates. If you find any bugs or issues, please file a new issue on GitHub, create a new forum post, or simply contact our support team.
Jetpack 
I have a question – I have two self-hosted blogs – I have the Wordfence plugin installed on BOTH blogs – do I have any reason to be concerned about the updated Jetpack plugin crossing with that, affecting the function of Wordfence – and of the blogs? Thanks!
LikeLike
Hi there,
This should not be a concern. Thanks for using Jetpack!
LikeLike
If I am already using the Brute protect plugin is it safe top remove it now that jetpack has it integrated?
LikeLike
Hi! Yes, you can remove the Bruteprotect plugin now, as its functioanlity is now part of Jetpack!
LikeLike
This is awesome! Keep up the great work! Question: If we have BruteProtect installed, has all functionality been duplicated and should we then remove BruteProtect or should we continue to run it alongside Jetpack? Thanks!
LikeLike
Yup, it’s all in Jetpack now! You should definitely deactivate and remove BruteProtect now. 🙂
LikeLike
Hi Stephen,
I just did the update and noticed that BruteProtect is deactivated, but still showing up in the list of plugins. Should we delete the BruteProtect plugin?
LikeLike
Yup, you can go ahead and delete it now!
LikeLike
Congrats on the BruteProtect integration!
For those of us with pre-existing installs of BruteProtect, is there a ‘best way’ of upgrading to the new Jetpack?
LikeLike
Nevermind. Looks like the upgrade will deactivate the ‘old’ BruteProtect plugin. via http://wptavern.com/jetpack-3-4-adds-protection-against-brute-force-attacks#comment-65902
LikeLike
Exactly! 🙂
LikeLike
Top post widget does not work on Jetpack 3.4
LikeLike
Hi! We’re aware of this and working on a fix. Thanks for the report!
LikeLike
Top Posts widget does not work anymore after the jetpack update.Else there are no Top Posts or Top Search Terms anymore in the admin dashboard widget. I got two blogs updated, both show the same probs. Any advice, what I can do? Thanks in advance…
LikeLike
Have you updated your sites to Jetpack 3.4.1? That should have fixed the problem with the Top Posts widget. If it doesn’t, please contact us and we’ll take a look! http://jetpack.me/contact-support/
LikeLiked by 1 person
How many bad logins must occur before an IP is blocked, and how long will it be blocked?
LikeLike
Hello! It’s not a set number, but based on how fast they’re submitted, along with other factors. You can also whitelist IP addresses either in the plugin or on WordPress.com – please see http://jetpack.me/support/security-features/#unblock for more info. Hope this helps!
LikeLike
Where is the “Allow remote actions” setting? I’m not seeing it.
LikeLike
Hey! That setting was part of the 3.3 release and has since been retired. Once the Manage feature is activated it’s on.
LikeLike
I like that the Brute Protect new functionality in JetPack is an additional login protection. Over the past week or so, someone broke into some of my sites and seemingly changed the wp-login and wp-admin code. So…I was seeing the “please prove you’re not a bot” equation but it has disappeared again. I am using both Firefox, Safari, and Chrome browsers on a Mac using OS X Yosemite and Firefox browser on a PC using Linux. Shouldn’t I be seeing the equation on the login screen? I’ve only seen the equation once this morning (both machines, all browsers) and it has now disappeared on login screens for my three affected sites. Already reinstalled current version of WordPress as well just in case. Thoughts?
LikeLike
Hello,
You should not see the math captcha on a regular basis, that’s only there as a fallback if the normal tools are not functioning as they should. Hope this helps, please let us know if you have any additional questions by visiting http://jetpack.me/contact-support/
LikeLike