How to Disable Login With Email Address Feature in WordPress

By default, WordPress allows users to log in with either their username or email address, a feature we also use on our sites for convenience.

While this makes logging in easier, it also comes with security risks since email addresses are easier for hackers to guess.

If you run a membership site, online store, or multi-author blog, disabling email logins can help strengthen security by adding an extra layer of protection.

In this article, we’ll show you how to disable the login with the email address feature in WordPress.

Why Disable Login With Email in WordPress?

Some users believe that email addresses are more common knowledge than a username. If you send an email to someone, then they already know your email address.

If someone wants to break into your WordPress site, knowing an email address could potentially make it easier for them to break in by guessing your password or hacking your email account.

We don’t believe using an email address to log in makes a WordPress site less secure. You can always add more security layers like password-protecting the WordPress admin directory and adding two-step verification.

Having said that, we understand that some users may still want to disable login with email feature on their WordPress sites. Here are 2 methods for how you can easily do that:

• Method 1. Disable Login with Email in WordPress using Code (Recommended)
• Method 2. Disable Login with Email in WordPress using a Plugin

Let’s dive right in.

Method 1. Disable Login with Email in WordPress using Code (Recommended)

This method requires you to add code to your WordPress files. If you haven’t done that before, see our guide to pasting snippets from the web into WordPress.

To disable the login with the email feature, you’ll typically need to add the following code to your theme’s functions.php file or a code snippets plugin.

remove_filter( 'authenticate', 'wp_authenticate_email_password', 20 );

To make it easier, you can use WPCode, which is the best code snippets plugin for WordPress.

It has a built-in library with ready-to-use code snippets for all of the most popular WordPress feature requests, including disabling login with email, removing the WordPress version number, disabling comments, and more.

We have thoroughly tested the tool on our demo website and have found it to be super beginner-friendly. To learn more, see our detailed WPCode review.

First, you need to install and activate the free WPCode plugin. If you need help, you can read our tutorial on how to install a WordPress plugin.

Once the plugin is activated, you’ll want to go to Code Snippets » Library from your WordPress admin dashboard.

Next, you can search for the ‘Disable Login by Email’ snippet and click on the ‘Use snippet’ button.

Then, WPCode will automatically add the code snippet and select the proper insertion method.

Here’s what it might look like in the WPCode editor:

From here, all you need to do is toggle the switch from ‘Inactive’ to ‘Active.’

Then, go ahead and click the ‘Update’ button.

That’s it!

This will not change anything on the login page, and users will still see that they can log in using either a username or email address. But if they enter the email address to log in, they will receive an invalid username error.

Method 2. Disable Login With Email in WordPress using a Plugin

You can also disable the login with the email feature with a single-use plugin – No Login by Email Address.

To do this, you first need to install and activate the plugin. For more details, feel free to refer back to our step-by-step guide on how to install a WordPress plugin.

The plugin works out of the box, which means that there are no settings to configure. Simply visit your WordPress site’s login screen and try logging in with your email address.

You can see that you get an invalid username error. The plugin will also change the ‘Username or Email address’ label to simply ‘Username.’

That’s all, we hope this article helped you disable login with email address feature in WordPress. Next, you may also want to see our guide on how to disable login hints in WordPress login error messages and our tutorial on adding security questions to the WordPress login screen.

If you liked this article, then please subscribe to our YouTube Channel for WordPress video tutorials. You can also find us on Twitter and Facebook.