When enabled, an alert email is sent each time any user successfully logs into the Joomla administrator backend. The email is sent to the address configured in the Email notifications section. This allows you to detect unauthorized or unexpected backend access in real time.
When enabled, members of the Super Users group are prevented from logging in through the frontend. Super Users should always authenticate through the backend (administrator) interface, which is more securely controlled. This setting reduces the risk of Super User credentials being exposed through frontend login forms.
When enabled, any newly created user account that is assigned to the Super Users group is automatically deleted. This prevents privilege escalation attacks in which an attacker creates a new administrator account after gaining partial access to the site.