Branexa

Branexa combines full admin branding, login page customisation, social login (Google and Facebook), brute-force login protection, agency role targeting, and optional maintenance / panic tools in a single install.

Built for WordPress agencies and developers who hand off client sites and need a polished, branded admin experience without installing five separate plugins.

Features

Branding * Replace the WordPress logo in the admin sidebar and admin bar * Custom favicon * Custom or hidden admin footer * Inject custom CSS across all admin pages * Adds branexa-elementor-active body class when Elementor is active (for custom CSS) * Reset all settings to defaults from the Branding tab

Login Page * Custom logo on the login form * Background colour and image * Submit button colour and optional custom button label * “Remember me” checked by default (optional) * Logo links to your site instead of wordpress.org

Dashboard * Custom welcome panel title and message * Optional welcome panel visible only to selected roles * Hide the welcome panel entirely * Hide individual dashboard widgets (Activity, At a Glance, Quick Draft, etc.) * RSS feed widget showing your latest updates * Second HTML dashboard panel for client notes * Hide common post / page meta boxes in the editor

Menus & Plugins * Hide admin menu items and plugins for non-admins, selected roles only, or everyone (configurable) * Hide specific plugins from the plugin list

Security — Limit Login Attempts * Configurable maximum failed attempts per IP * Configurable lockout duration * Uses WordPress transients — no extra database tables

Social Login * “Continue with Google” button on the login page * “Continue with Facebook” button on the login page * Auto-creates subscriber accounts for new users * Full OAuth 2.0 flow with CSRF state tokens

Agency tools * Panic URL on wp-login.php clears IP lockout and temporarily bypasses rate limits * Optional public maintenance / “coming soon” page with countdown and bypass password

Who is this for?

• WordPress agencies delivering white-label sites to clients
• Freelance developers who want a reusable all-in-one branding tool
• SaaS and membership site owners who want a branded admin experience

External services

This plugin can connect to third-party services only when the site administrator enables Social Login and saves API credentials.

Google (OAuth 2.0)

Used for optional “Continue with Google” login on wp-login.php and compatible front-end login forms.

When a visitor uses Google login, the plugin sends an authorization code to Google’s OAuth token endpoint (oauth2.googleapis.com) using the site owner’s Client ID and Client Secret, then requests basic profile data (email and name) from Google’s OpenID userinfo endpoint (openidconnect.googleapis.com).

Data is sent only when the visitor clicks the Google login button.

Service provider: Google LLC Terms of Service: https://policies.google.com/terms Privacy Policy: https://policies.google.com/privacy

Facebook (OAuth)

Used for optional “Continue with Facebook” login on wp-login.php and compatible front-end login forms.

When a visitor uses Facebook login, the plugin exchanges an authorization code with Facebook’s Graph API OAuth endpoints and requests basic profile data (email and name) from graph.facebook.com.

Data is sent only when the visitor clicks the Facebook login button.

Service provider: Meta Platforms, Inc. Terms of Service: https://www.facebook.com/terms.php Privacy Policy: https://www.facebook.com/privacy/policy