What changes?

WordPress can show different messages after a failed login depending on whether the username or password was wrong. WM Guard can replace these with one neutral response.

Purpose

This makes it harder to determine whether a particular username exists based only on login errors.

The measure raises the barrier for automated guessing but does not replace rate limits, strong passwords, or two-factor authentication.