API Home Page :: Secure Your Site From Password Hackers

How it Works

Integrated Setup

GPR plugin is installed in your app. The plugin hooks into the existing codebase of the host app which relates to authentication. Then you edit the plugin to point to the GPR API end point using your GPR Client Key, Setup Key, and Setup Secret. The plugin then tracks, logs, and handles all successful user logins. Simple and easy!

Non-Integrated Setup

Self-hosted GPR app installed on your server. Simple upload of the app package: consisting of folders and tested subfolders, and a few files. This app communicates with GPI API server.
Edit the app config file. Optionally, edit the login page template file.
You or your web host install the mod_auth_form Apache module.
Edit the .htaccess file in your password protected folder to enable. Thereby, the app communicates with the GPR API end point using your GPR Client Key, Setup Key, and Setup Secret.

A little more involved, but easy!

If you choose to install yourself, we provide detailed instructions in the API Console for both Setup types.

Features

Unlimited Domains

Yes. However, a given domain can only be registered once: whether by the same API client or multiple clients. If you need to monitor multiple folders in the case of the Non-Integrated approach, or multiple apps in the case of the Integrated approach, you can create multiple Setups for a domain: each Setup handles a separate folder or app instance. Setups do the "heavy lifting." They perform the login monitoring, and therefore, are the API end points.

Fully Supported

Free via our API HelpDesk ticket system which is monitored by our professional Support Team. Technical support is available 7 days a week, 365 days a year - including all holidays. Same day response time.

Easy Installation

It is very quick and easy to install. In the case of the Integrated setup, it only takes minutes. In the case of the Non-Integrated setup, it takes a little longer, but is still very easy. We provide detailed documentation for setup. However, our professional Tech Team can install for you. No charge. Free.

Low Cost

Inexpensive and very affordable, especially when you factor in the savings of detecting the use and sharing of passwords. The Platform API cost is pennies at $0.01 USD / Login.

Hosted

Not self-hosted. Hosted on the GPR API Platform! Minimal load on your server. Very fast load times on the "built for speed" GPR API Platform dedicated server:

128GB DDR4 RAM

2x2TB Storage RAID-1

NVMe SSD

Xeon^® E-2388G*

8 Core / 16 Thread

As API demand increases, we expand load balancing to divide network traffic by provisioning additional servers as required. This reduces the load on each server to make GoodPassRobot more efficient, speeding up performance, and reducing latency. In this way, we ensure our API engine and thereby our clients will not be impacted.

No need to update as it is hosted remotely on the GRR API Platform, which is updated on a regular basis in the background real-time for all Clients. Your GPR instance will always be up-to-date.

Fully Featured Platform Admin Control Panel (ACP)

Manage API Settings

Historical Login Stats (Textual and Graphical)

Real-Time Login Stats (Textual and Graphical)

Manage Suspended Users: view with option to restore (unsuspend), clear (reset) stats of, and exempt selected users

Manage Exempt Users

Limit Unique Logins Per Unit Time

Ban Access from Certain Countries

Ban Access from Certain IPs

Pause API

Compatibility

Compatible With All Billing Systems Including

2Checkout
CardBilling
ccBill
Epoch
NETbilling
PayPal
SegPay
Verotel
Why? GoodPassRobot functions independently of the underlying billing system.

Compatible With The Following

PHP 7.x or Higher
Apache 2.3 or Higher
IPv4 and IPv6 IP Addresses
Unix and *nix Operating Systems (including but not limited to Unix, Linux, FreeBSD, CentOS, Red Hat Linux, Fedora, Mandrake Linux)

We update the GoodPassRobot API Platform on a regular basis: ensuring the Platform is always up-to-date, and optimally compatible.

Compatible With All Content Management Systems (CMS) Including

aMember
ElevatedX
MechBunny Tube Script
NATS
Sitelok
WordPress

Why? GoodPassRobot can be integrated. Normally, GoodPassRobot is implemented in cases where access to an area is handled via Basic Authentication: where the client (like a web browser) prompts the user for a username and password. This is the Non-Integrated approach.

In the Integrated approach, authentication is handled by a third part app like WordPress. Compatibility is provided by FREE integration plugins we provide. After logging in, the plugin connects to the GoodPassRobot API to process the login: for example, disallow access if it is detected that the login is suspsect. Have another system (e.g., CMS or Content Management System) not on the list? No worries! We will integrate GoodPassRobot for NO charge - FREE!

Requirements

Following only required if using GoodPassRobot as Non-Integrated (not integrated into an app like WordPress which handles authentication). I.e., you are using Apache Basic HTTP Authentication via .htaccess.

PHP 8.x or Higher

PHP cURL Library

Unix or *nix Operating Systems (including but not limited to Unix, Linux, FreeBSD, CentOS, Red Hat Linux, Fedora, Mandrake Linux)

Apache 2.3 or Higher

Apache mod_rewrite Module

Apache mod_auth_form Module

Apache mod_request Module

Apache mod_session Module

Apache mod_session_cookie Module

Apache mod_session_crypto Module

Apache mod_session_crypto Module available in Apache 2.3 and later.

FAQ

Is this a hosted service?

Yes. The API end of it is hosted.

What are the requirements?

Please see the Requirements section.

Is GoodPassRobot easy to install and setup?

Yes.

Can I useGoodPassRobot on multiple domains?

Yes! You can install GoodPassRobot on an unlimited number of domains on the same server or multiple servers.

Can you install GoodPassRobot for me?

Yes. Free service.

Cost

The Platform API cost is $0.01 USD / Login for a singular domain or in the case of multiple domains, totalled for all your domains on the Platform using the Platform API. You are billed monthly at the end of the month.

There is NO fee to Sign Up. Free until you setup an API account, and then use it. Until that time, you will NOT be billed.

If you fail to pay (Due Date on the first of every month), API will be paused. Logins will continue as per usual. But logins will not be tracked and monitored. No protection. Tracking will immediately resume once payment made. You will be email notified 24 hours before the end of the month so you can make payment for the previous month. If and when your API is paused, you will be email notified so you are aware, and can make payment. You will be email notified after each payment.

For billing we use Time Zone: America/Vancouver PDT Daylight Saving Time
Our Current Date and Time: 2025-07-02 20:35:22
Current GMT: 2025-07-03 03:35:22

For API tracking data, by default, we use our Time Zone. However, via the API Console, you can select the Time Zone of your choosing for any given Domain Setup.