{"id":81055,"date":"2018-02-02T05:52:17","date_gmt":"2018-02-02T05:52:17","guid":{"rendered":"https:\/\/wordpress.org\/plugins\/wp-edit-password-protected\/"},"modified":"2026-04-05T12:13:17","modified_gmt":"2026-04-05T12:13:17","slug":"wp-edit-password-protected","status":"publish","type":"plugin","link":"https:\/\/bal.wordpress.org\/plugins\/wp-edit-password-protected\/","author":14819852,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_crdt_document":"","version":"2.0.0","stable_tag":"trunk","tested":"7.0","requires":"6.0","requires_php":"7.4","requires_plugins":null,"header_name":"WPEPP \u2013 Login Security, Password Protect & Login Page Customizer","header_author":"Noor alam","header_description":"Change the message displayed, add social icons and change form style on content which is Password Protected.","assets_banners_color":"17102b","last_updated":"2026-04-05 12:13:17","external_support_url":"https:\/\/wpthemespace.com\/custom-service\/","external_repository_url":"","donate_link":"https:\/\/wpthemespace.com\/donation\/","header_plugin_uri":"http:\/\/wpthemespace.com","header_author_uri":"http:\/\/wpthemespace.com","rating":4.5,"author_block_rating":0,"active_installs":3000,"downloads":76791,"num_ratings":17,"support_threads":0,"support_threads_resolved":0,"author_block_count":0,"sections":["description","installation","faq","changelog"],"tags":{"1.1.12":{"tag":"1.1.12","author":"nalam","date":"2022-09-24 04:26:01"},"1.2.7":{"tag":"1.2.7","author":"nalam","date":"2024-07-06 03:22:24"},"1.2.8":{"tag":"1.2.8","author":"nalam","date":"2024-07-06 03:51:39"},"1.3.7":{"tag":"1.3.7","author":"nalam","date":"2026-04-05 12:11:13"}},"upgrade_notice":{"2.0.0":"<p>Major update \u2014 complete rebuild with React admin, login security, brute force protection, 2FA, AI blocker, content lock, and login page customizer. All v1.x settings are migrated automatically.<\/p>"},"ratings":{"1":1,"2":1,"3":1,"4":0,"5":14},"assets_icons":{"icon-128x128.gif":{"filename":"icon-128x128.gif","revision":3499151,"resolution":"128x128","location":"assets","locale":""}},"assets_banners":{"banner-772x250.jpg":{"filename":"banner-772x250.jpg","revision":3499123,"resolution":"772x250","location":"assets","locale":""}},"assets_blueprints":{"blueprint.json":{"filename":"blueprint.json","revision":3499213,"resolution":false,"location":"assets","locale":"","contents":"{\"landingPage\":\"\\\/wp-admin\\\/admin.php?page=wp-edit-password-protected\",\"preferredVersions\":{\"php\":\"8.0\",\"wp\":\"latest\"},\"phpExtensionBundles\":[\"kitchen-sink\"],\"features\":{\"networking\":true},\"steps\":[{\"step\":\"installPlugin\",\"options\":{\"activate\":true},\"pluginData\":{\"resource\":\"wordpress.org\\\/plugins\",\"slug\":\"wp-edit-password-protected\"}},{\"step\":\"login\",\"username\":\"admin\",\"password\":\"password\"}]}"}},"all_blocks":[],"tagged_versions":["1.1.12","1.2.7","1.2.8","1.3.7"],"block_files":[],"assets_screenshots":{"screenshot-1.jpg":{"filename":"screenshot-1.jpg","revision":3499123,"resolution":"1","location":"assets","locale":""},"screenshot-2.jpg":{"filename":"screenshot-2.jpg","revision":3499123,"resolution":"2","location":"assets","locale":""},"screenshot-3.jpg":{"filename":"screenshot-3.jpg","revision":3499123,"resolution":"3","location":"assets","locale":""},"screenshot-4.jpg":{"filename":"screenshot-4.jpg","revision":3499123,"resolution":"4","location":"assets","locale":""},"screenshot-5.jpg":{"filename":"screenshot-5.jpg","revision":3499123,"resolution":"5","location":"assets","locale":""},"screenshot-6.jpg":{"filename":"screenshot-6.jpg","revision":3499123,"resolution":"6","location":"assets","locale":""},"screenshot-7.jpg":{"filename":"screenshot-7.jpg","revision":3499123,"resolution":"7","location":"assets","locale":""}},"screenshots":{"1":"React-powered admin dashboard \u2014 feature overview, quick stats, and one-click navigation","2":"Login page customizer with real-time live preview \u2014 change background, logo, form, and button styles","3":"Password-protected form styling \u2014 4 unique styles with custom text, social icons, and templates","4":"Security settings \u2014 login limiter, honeypot, hide login, 2FA, reCAPTCHA, and hardening options","5":"AI crawler blocker \u2014 one-click toggle to block GPTBot, CCBot, Google-Extended, and more","6":"Conditional display settings in the Gutenberg editor sidebar","7":"Site access control \u2014 admin-only mode, login required, and site-wide password","8":"Templates gallery \u2014 10+ one-click designs for password forms and login pages"},"jetpack_post_was_ever_published":false},"plugin_section":[],"plugin_tags":[259453,9374,41128,1229,26180],"plugin_category":[56],"plugin_contributors":[84037],"plugin_business_model":[216238],"class_list":["post-81055","plugin","type-plugin","status-publish","hentry","plugin_tags-block-ai-crawlers","plugin_tags-limit-login-attempts","plugin_tags-login-customizer","plugin_tags-login-security","plugin_tags-password-protected","plugin_category-social-and-sharing","plugin_contributors-nalam-1","plugin_business_model-commercial","plugin_committers-nalam-1"],"banners":{"banner":"https:\/\/ps.w.org\/wp-edit-password-protected\/assets\/banner-772x250.jpg?rev=3499123","banner_2x":false,"banner_rtl":false,"banner_2x_rtl":false},"icons":{"svg":false,"icon":"https:\/\/ps.w.org\/wp-edit-password-protected\/assets\/icon-128x128.gif?rev=3499151","icon_2x":false,"generated":false},"screenshots":[{"src":"https:\/\/ps.w.org\/wp-edit-password-protected\/assets\/screenshot-1.jpg?rev=3499123","caption":"React-powered admin dashboard \u2014 feature overview, quick stats, and one-click navigation"},{"src":"https:\/\/ps.w.org\/wp-edit-password-protected\/assets\/screenshot-2.jpg?rev=3499123","caption":"Login page customizer with real-time live preview \u2014 change background, logo, form, and button styles"},{"src":"https:\/\/ps.w.org\/wp-edit-password-protected\/assets\/screenshot-3.jpg?rev=3499123","caption":"Password-protected form styling \u2014 4 unique styles with custom text, social icons, and templates"},{"src":"https:\/\/ps.w.org\/wp-edit-password-protected\/assets\/screenshot-4.jpg?rev=3499123","caption":"Security settings \u2014 login limiter, honeypot, hide login, 2FA, reCAPTCHA, and hardening options"},{"src":"https:\/\/ps.w.org\/wp-edit-password-protected\/assets\/screenshot-5.jpg?rev=3499123","caption":"AI crawler blocker \u2014 one-click toggle to block GPTBot, CCBot, Google-Extended, and more"},{"src":"https:\/\/ps.w.org\/wp-edit-password-protected\/assets\/screenshot-6.jpg?rev=3499123","caption":"Conditional display settings in the Gutenberg editor sidebar"},{"src":"https:\/\/ps.w.org\/wp-edit-password-protected\/assets\/screenshot-7.jpg?rev=3499123","caption":"Site access control \u2014 admin-only mode, login required, and site-wide password"}],"raw_content":"<!--section=description-->\n<p><strong>WPEPP best for Best Login security, password protected content, block AI crawlers, limit login attempts &amp; login customizer with live preview. Total site protection! WPEPP is the all-in-one WordPress login security and login page customizer plugin.<\/strong> It combines everything you need to limit login attempts, block brute force attacks, hide the login page, password protect content, and customize the WordPress login page \u2014 all from a single, modern dashboard with real-time live preview.<\/p>\n\n<p>Stop installing five separate plugins. WPEPP replaces your login limiter, login page customizer, password form styler, content restriction plugin, and AI crawler blocker with one lightweight solution that loads zero external scripts on the front end.<\/p>\n\n<p><a href=\"https:\/\/wpthemespace.com\/wpepp\/\">View Details<\/a> | <a href=\"https:\/\/wpthemespace.com\/product\/wpepp-login-security-password-protect-login-page-customizer\/#pricing\">View Pricing<\/a><\/p>\n\n<h3>\ud83d\udd10 Limit Login Attempts &amp; Brute Force Protection<\/h3>\n\n<p>Protect your WordPress login form from brute force attacks with built-in login attempt limiting and IP-based lockouts.<\/p>\n\n<ul>\n<li><strong>Login Attempt Limiter<\/strong> \u2014 automatically block IP addresses after repeated failed login attempts<\/li>\n<li><strong>Configurable lockout<\/strong> \u2014 set the maximum number of failed attempts and lockout duration in minutes<\/li>\n<li><strong>Login Honeypot<\/strong> \u2014 invisible bot trap field catches automated brute force login attacks instantly<\/li>\n<li><strong>Registration Honeypot<\/strong> \u2014 hidden spam trap on the WordPress registration form blocks fake signups<\/li>\n<li><strong>Registration Rate Limiter<\/strong> \u2014 prevent mass registration spam with per-IP rate limiting<\/li>\n<li><strong>IP-based tracking<\/strong> \u2014 every failed login is tracked by IP address for accurate blocking<\/li>\n<\/ul>\n\n<h3>\ud83d\udee1\ufe0f Hide Login Page &amp; Custom Login URL (Pro)<\/h3>\n\n<p>Move your default WordPress login page to a secret URL so bots and attackers can never find it.<\/p>\n\n<ul>\n<li><strong>Custom Login URL<\/strong> \u2014 change <code>wp-login.php<\/code> to any URL you choose (e.g., <code>\/my-secret-login<\/code>)<\/li>\n<li><strong>Hide Default Login<\/strong> \u2014 the original <code>wp-login.php<\/code> returns a 404, invisible to attackers<\/li>\n<li><strong>After-Login Redirect<\/strong> \u2014 send users to a specific page after successful login<\/li>\n<li><strong>Auto-Login Links<\/strong> \u2014 generate secure one-time login tokens for specific users<\/li>\n<\/ul>\n\n<h3>\ud83d\udd11 Two-Factor Authentication \u2013 2FA (Pro)<\/h3>\n\n<p>Add an extra layer of security to every WordPress login with TOTP-based two-factor authentication.<\/p>\n\n<ul>\n<li><strong>Authenticator App Support<\/strong> \u2014 works with Google Authenticator, Authy, Microsoft Authenticator, and any TOTP app<\/li>\n<li><strong>QR Code Setup<\/strong> \u2014 users scan a QR code to set up 2FA in seconds<\/li>\n<li><strong>Recovery Codes<\/strong> \u2014 8 one-time backup codes in case a user loses their authenticator device<\/li>\n<li><strong>Role-Based Enforcement<\/strong> \u2014 enable 2FA for specific user roles (administrators, editors, etc.)<\/li>\n<li><strong>RFC 6238 Compliant<\/strong> \u2014 industry-standard time-based one-time password implementation<\/li>\n<\/ul>\n\n<h3>\ud83e\udd16 Google reCAPTCHA Integration (Pro)<\/h3>\n\n<p>Add Google reCAPTCHA to your login and registration forms to stop bots before they even try.<\/p>\n\n<ul>\n<li><strong>Login Form reCAPTCHA<\/strong> \u2014 prevent automated login attempts with CAPTCHA verification<\/li>\n<li><strong>Registration Form reCAPTCHA<\/strong> \u2014 block bot signups on the WordPress registration page<\/li>\n<li><strong>Easy Setup<\/strong> \u2014 just enter your Site Key and Secret Key to activate<\/li>\n<\/ul>\n\n<h3>\ud83d\udcca Login Activity Log (Pro)<\/h3>\n\n<p>Monitor every login attempt on your WordPress site with a detailed activity log.<\/p>\n\n<ul>\n<li><strong>Complete Logging<\/strong> \u2014 records every successful, failed, and locked-out login attempt<\/li>\n<li><strong>IP Address Tracking<\/strong> \u2014 see which IPs are attempting to access your site<\/li>\n<li><strong>User-Agent Detection<\/strong> \u2014 identify the browser or bot behind each login attempt<\/li>\n<li><strong>Status Filtering<\/strong> \u2014 filter the log by success, failure, or lockout status<\/li>\n<li><strong>Timestamp Records<\/strong> \u2014 exact date and time of every login event<\/li>\n<\/ul>\n\n<h3>\ud83d\uded1 Block AI Crawlers &amp; Bots<\/h3>\n\n<p>Prevent AI companies from crawling and training on your website content. Block GPTBot, CCBot, Google-Extended, and more.<\/p>\n\n<ul>\n<li><strong>One-Click AI Blocker<\/strong> \u2014 toggle known AI crawlers on or off from a simple checklist<\/li>\n<li><strong>robots.txt Rules<\/strong> \u2014 automatically generates and injects bot-blocking rules into your <code>robots.txt<\/code><\/li>\n<li><strong>User-Agent Blocking<\/strong> \u2014 returns 403 Forbidden to blocked AI crawlers at the server level<\/li>\n<li><strong>Rule Preview<\/strong> \u2014 see exactly what rules will be added before saving<\/li>\n<\/ul>\n\n<h3>\ud83d\udd12 Lock Entire Site \u2014 Site Access Control<\/h3>\n\n<p>Need to lock your entire WordPress site? WPEPP gives you two powerful ways to do it \u2014 no plugins or code required.<\/p>\n\n<p><strong>Admin Only Mode<\/strong> \u2014 restricts the entire site to logged-in users only. Anyone who is not signed in is automatically redirected to the login page or shown a login popup. Perfect for intranet sites, staging environments, or member communities.<\/p>\n\n<p><strong>Site Password Protection<\/strong> \u2014 lock the whole site behind a single shared password. Visitors must enter the password before they can view any page. Logged-in administrators always bypass it automatically. Set a cookie duration so returning visitors are not asked again.<\/p>\n\n<ul>\n<li><strong>Admin-Only Mode<\/strong> \u2014 lock the entire front end so only logged-in users can view it<\/li>\n<li><strong>Site Password<\/strong> \u2014 require a single password for all visitors to access the site<\/li>\n<li><strong>Configurable Cookie Duration<\/strong> \u2014 set how many days the access cookie lasts before asking again<\/li>\n<li><strong>Bypass for Admins<\/strong> \u2014 logged-in administrators always skip the password gate automatically<\/li>\n<li><strong>Custom Access Message<\/strong> \u2014 show a branded message above the password form<\/li>\n<li><strong>Login Popup Option<\/strong> \u2014 show a blurred login overlay instead of a redirect (Pro)<\/li>\n<li><strong>Page Whitelist<\/strong> \u2014 keep login, register, and selected pages accessible while the rest is locked<\/li>\n<\/ul>\n\n<h3>\ud83d\udd10 Password Protect Pages &amp; Content Lock (Pro)<\/h3>\n\n<p>Lock any WordPress post, page, or custom post type so only authorized users can see the content.<\/p>\n\n<ul>\n<li><strong>Per-Post Toggle<\/strong> \u2014 lock individual posts from the Gutenberg editor sidebar or Classic Editor meta box<\/li>\n<li><strong>Multiple Lock Actions<\/strong> \u2014 choose from login link, inline password form, full-page popup with blur, or redirect<\/li>\n<li><strong>Role-Based Locking<\/strong> \u2014 restrict content to specific user roles (subscribers, members, etc.)<\/li>\n<li><strong>Auto-Expiry Unlock<\/strong> \u2014 automatically unlock content at a scheduled date and time<\/li>\n<li><strong>Excerpt on Archives<\/strong> \u2014 optionally show a teaser excerpt on blog listing pages<\/li>\n<li><strong>Works Everywhere<\/strong> \u2014 compatible with posts, pages, and all registered custom post types<\/li>\n<\/ul>\n\n<h3>\ud83d\udccb Conditional Content Display<\/h3>\n\n<p>Show or hide any post or page based on smart conditions \u2014 without shortcodes.<\/p>\n\n<ul>\n<li><strong>User Status<\/strong> \u2014 show content only to logged-in or logged-out users (Free)<\/li>\n<li><strong>User Role<\/strong> \u2014 target administrators, editors, subscribers, or any custom role (Pro)<\/li>\n<li><strong>Device Type<\/strong> \u2014 show different content on desktop, tablet, or mobile (Pro)<\/li>\n<li><strong>Time &amp; Date<\/strong> \u2014 schedule visibility by time range, date range, day of week, or recurring schedule (Pro)<\/li>\n<li><strong>Browser Detection<\/strong> \u2014 target Chrome, Firefox, Safari, Edge, or Opera users (Pro)<\/li>\n<li><strong>URL Parameters<\/strong> \u2014 show content based on query string values like <code>?ref=email<\/code> (Pro)<\/li>\n<li><strong>Referrer Source<\/strong> \u2014 display content based on where the visitor came from (Pro)<\/li>\n<li><strong>REST API Compatible<\/strong> \u2014 hidden content is stripped from API responses for headless WordPress setups<\/li>\n<li><strong>12 Conditions Total<\/strong> \u2014 the most flexible conditional visibility system available<\/li>\n<\/ul>\n\n<h3>\ud83d\udc65 Member-Only Pages<\/h3>\n\n<p>Create pages visible only to logged-in members \u2014 no membership plugin required.<\/p>\n\n<ul>\n<li><strong>Dedicated Page Template<\/strong> \u2014 assign the \"Member Only\" template to any WordPress page<\/li>\n<li><strong>Built-In Login Form<\/strong> \u2014 visitors see a login form; authenticated users see the real content<\/li>\n<li><strong>Zero Configuration<\/strong> \u2014 works out of the box, no setup needed<\/li>\n<\/ul>\n\n<h3>\ud83c\udfa8 Login Page Customizer with Live Preview<\/h3>\n\n<p>Customize the default WordPress login page (<code>wp-login.php<\/code>) with a visual editor and real-time preview.<\/p>\n\n<ul>\n<li><strong>Background Options<\/strong> \u2014 solid color, CSS gradient, background image, or background video with overlay<\/li>\n<li><strong>Custom Logo<\/strong> \u2014 upload your own logo image, set its size, or use a text-based logo with custom font<\/li>\n<li><strong>Form Styling<\/strong> \u2014 customize background, border, width, padding, and box shadow of the login form<\/li>\n<li><strong>Field Styling<\/strong> \u2014 change input background, text color, border, padding, height, and focus state<\/li>\n<li><strong>Button Styling<\/strong> \u2014 customize background, text color, font size, border radius, and hover state<\/li>\n<li><strong>Heading &amp; Links<\/strong> \u2014 style the form heading text and \"Lost your password?\" link<\/li>\n<li><strong>Error Messages<\/strong> \u2014 customize the color, font, background, and padding of login error messages<\/li>\n<li><strong>Register &amp; Lost Password Pages (Pro)<\/strong> \u2014 same visual editor for <code>wp-login.php?action=register<\/code> and <code>?action=lostpassword<\/code><\/li>\n<li><strong>Live Preview<\/strong> \u2014 every change is visible in real time before you save<\/li>\n<\/ul>\n\n<h3>\ud83c\udfaf Password-Protected Form Styling<\/h3>\n\n<p>Replace the plain WordPress password form with beautiful, branded designs using a real-time visual editor.<\/p>\n\n<ul>\n<li><strong>4 Unique Form Styles<\/strong> \u2014 2 free styles, 2 additional styles with Pro<\/li>\n<li><strong>Custom Text<\/strong> \u2014 add header and description text above or below the password form<\/li>\n<li><strong>Button &amp; Label Text<\/strong> \u2014 change the submit button label, input placeholder, and error messages<\/li>\n<li><strong>Social Media Icons<\/strong> \u2014 add links to Facebook, X (Twitter), YouTube, Instagram, LinkedIn, Pinterest, and Tumblr<\/li>\n<li><strong>Icon Controls<\/strong> \u2014 set position (top, middle, bottom), alignment, and visual style<\/li>\n<li><strong>10+ One-Click Templates<\/strong> \u2014 import pre-built designs like Minimal, Modern Dark, Corporate, Nature, Gradient Wave, and more<\/li>\n<\/ul>\n\n<h3>\ud83d\udee1\ufe0f Security Hardening<\/h3>\n\n<p>Reduce your WordPress attack surface with built-in hardening tools.<\/p>\n\n<ul>\n<li><strong>Disable XML-RPC<\/strong> \u2014 shut down the <code>xmlrpc.php<\/code> endpoint used by bots for brute force and DDoS attacks<\/li>\n<li><strong>Hide WordPress Version<\/strong> \u2014 remove the generator meta tag and version query strings from your source code<\/li>\n<li><strong>Disable REST API User Enumeration<\/strong> \u2014 block the <code>\/wp\/v2\/users<\/code> endpoint to prevent username discovery<\/li>\n<li><strong>IP Blocklist &amp; Allowlist (Pro)<\/strong> \u2014 manually block or allow specific IP addresses<\/li>\n<li><strong>Disposable Email Blocker (Pro)<\/strong> \u2014 prevent registrations with temporary email addresses<\/li>\n<li><strong>Email Domain Whitelist\/Blacklist (Pro)<\/strong> \u2014 restrict or allow signups by email domain<\/li>\n<li><strong>Admin Approval for Registrations (Pro)<\/strong> \u2014 require manual admin approval before new users can log in<\/li>\n<\/ul>\n\n\n\n<h3>\u2705 Free vs Pro Comparison<\/h3>\n\n<p><strong>Login Security<\/strong><\/p>\n\n<ul>\n<li>Limit Login Attempts &amp; IP Lockout \u2014 Free &amp; Pro<\/li>\n<li>Login Honeypot (Bot Trap) \u2014 Free &amp; Pro<\/li>\n<li>Registration Honeypot \u2014 Free &amp; Pro<\/li>\n<li>Registration Rate Limiter \u2014 Free &amp; Pro<\/li>\n<li>Hide Login Page (Custom Login URL) \u2014 Pro<\/li>\n<li>Two-Factor Authentication (2FA) \u2014 Pro<\/li>\n<li>Google reCAPTCHA (Login + Register) \u2014 Pro<\/li>\n<li>Login Activity Log \u2014 Pro<\/li>\n<li>IP Blocklist \/ Allowlist \u2014 Pro<\/li>\n<li>Disposable Email Blocker \u2014 Pro<\/li>\n<li>Email Domain Whitelist\/Blacklist \u2014 Pro<\/li>\n<li>Admin Registration Approval \u2014 Pro<\/li>\n<\/ul>\n\n<p><strong>Security Hardening<\/strong><\/p>\n\n<ul>\n<li>Disable XML-RPC \u2014 Free &amp; Pro<\/li>\n<li>Hide WordPress Version \u2014 Free &amp; Pro<\/li>\n<li>Disable REST API User Enumeration \u2014 Free &amp; Pro<\/li>\n<li>AI Crawler &amp; Bot Blocker \u2014 Free &amp; Pro<\/li>\n<\/ul>\n\n<p><strong>Content Protection<\/strong><\/p>\n\n<ul>\n<li>Site-Wide Access Control \u2014 Free &amp; Pro<\/li>\n<li>Admin-Only Mode \u2014 Free &amp; Pro<\/li>\n<li>Site-Wide Password \u2014 Free &amp; Pro<\/li>\n<li>Content Lock (Per-Post) \u2014 Pro<\/li>\n<li>Auto-Expiry Unlock \u2014 Pro<\/li>\n<li>Role-Based Content Lock \u2014 Pro<\/li>\n<li>Conditional Display (Login Status) \u2014 Free &amp; Pro<\/li>\n<li>Conditional Display (12 Conditions) \u2014 Pro<\/li>\n<li>Member-Only Page Template \u2014 Free &amp; Pro<\/li>\n<\/ul>\n\n<p><strong>Login Page Customizer<\/strong><\/p>\n\n<ul>\n<li>Login Page Styling (Background, Logo, Form) \u2014 Free &amp; Pro<\/li>\n<li>Login Page Advanced Styling + Custom CSS \u2014 Pro<\/li>\n<li>Register Page Styling \u2014 Pro<\/li>\n<li>Lost Password Page Styling \u2014 Pro<\/li>\n<\/ul>\n\n<p><strong>Password Form Styling<\/strong><\/p>\n\n<ul>\n<li>Password Form \u2013 Styles 1 &amp; 2 \u2014 Free &amp; Pro<\/li>\n<li>Password Form \u2013 Styles 3 &amp; 4 \u2014 Pro<\/li>\n<li>Custom Text, Labels &amp; Social Icons \u2014 Free &amp; Pro<\/li>\n<li>Templates Gallery (3 Free \/ 10+ Pro) \u2014 Free &amp; Pro<\/li>\n<\/ul>\n\n<p><strong>Preview &amp; Admin<\/strong><\/p>\n\n<ul>\n<li>Real-Time Live Preview \u2014 Free &amp; Pro<\/li>\n<li>Desktop Responsive Preview \u2014 Free &amp; Pro<\/li>\n<li>Tablet &amp; Mobile Responsive Preview \u2014 Pro<\/li>\n<li>React-Powered Admin Dashboard \u2014 Free &amp; Pro<\/li>\n<\/ul>\n\n\n\n<h3>\ud83c\udf10 Live Demos<\/h3>\n\n<p>See WPEPP in action:<\/p>\n\n<ul>\n<li><a href=\"https:\/\/wpthemespace.com\/wpepp\/\">Password-protected page demo<\/a> <\/li>\n<\/ul>\n\n<h3>\ud83c\udfd7\ufe0f Built for Performance<\/h3>\n\n<p>WPEPP is designed to be fast and lightweight:<\/p>\n\n<ul>\n<li><strong>No external scripts<\/strong> on the front end \u2014 zero impact on page load speed<\/li>\n<li><strong>Conditional asset loading<\/strong> \u2014 CSS and JS load only on pages that need them<\/li>\n<li><strong>Modern React admin<\/strong> \u2014 the settings panel is fast and responsive without slowing your site<\/li>\n<li><strong>REST API powered<\/strong> \u2014 all settings are saved via the WordPress REST API, no page reloads<\/li>\n<\/ul>\n\n<h3>\ud83c\udf0d Translations<\/h3>\n\n<ul>\n<li>English (default)<\/li>\n<li>Translation-ready \u2014 <code>.pot<\/code> file included for translators<\/li>\n<\/ul>\n\n<h3>Privacy Policy<\/h3>\n\n<p>WPEPP uses the <a href=\"https:\/\/appsero.com\">Appsero<\/a> SDK to collect telemetry data <strong>only after the user opts in<\/strong> via an admin notice. No data is collected by default.<\/p>\n\n<p>The SDK gathers basic diagnostic information (PHP version, WordPress version, plugin version, site URL) to help us troubleshoot issues and improve the product. It does <strong>not<\/strong> collect personal user data, passwords, or content.<\/p>\n\n<p>Learn more: <a href=\"https:\/\/appsero.com\/privacy-policy\/\">Appsero Privacy Policy<\/a>.<\/p>\n\n<!--section=installation-->\n<h4>Install from WordPress (Recommended)<\/h4>\n\n<ol>\n<li>Go to <strong>Plugins \u2192 Add New<\/strong> in your WordPress dashboard.<\/li>\n<li>Search for <strong>WPEPP<\/strong> or <strong>limit login attempts customizer<\/strong>.<\/li>\n<li>Click <strong>Install Now<\/strong>, then <strong>Activate<\/strong>.<\/li>\n<li>Click <strong>WPEPP<\/strong> in the admin sidebar to open the settings dashboard.<\/li>\n<\/ol>\n\n<h4>Install Manually via FTP<\/h4>\n\n<ol>\n<li>Download the plugin <code>.zip<\/code> file and extract it.<\/li>\n<li>Upload the <code>wp-edit-password-protected<\/code> folder to <code>\/wp-content\/plugins\/<\/code>.<\/li>\n<li>Go to <strong>Plugins<\/strong> in your WordPress dashboard and click <strong>Activate<\/strong> next to WPEPP.<\/li>\n<li>Click <strong>WPEPP<\/strong> in the admin sidebar to configure your security and styling settings.<\/li>\n<\/ol>\n\n<h4>After Activation<\/h4>\n\n<ol>\n<li><strong>Security First<\/strong> \u2014 Go to the <strong>Security<\/strong> tab to enable login limiter, honeypots, and hardening options.<\/li>\n<li><strong>Site Access<\/strong> \u2014 If you need site-wide restriction, configure it under the <strong>Site Access<\/strong> tab.<\/li>\n<li><strong>Style Your Login<\/strong> \u2014 Open the <strong>Form Style<\/strong> tab to customize your login page with live preview.<\/li>\n<li><strong>Protect Content<\/strong> \u2014 Use the <strong>Content<\/strong> tab to set up conditional display rules and member-only pages.<\/li>\n<\/ol>\n\n<!--section=faq-->\n<dl>\n<dt id=\"how%20do%20i%20limit%20login%20attempts%20in%20wordpress%3F\"><h3>How do I limit login attempts in WordPress?<\/h3><\/dt>\n<dd><p>Install and activate WPEPP, then go to <strong>WPEPP \u2192 Security<\/strong> in your WordPress dashboard. Enable the <strong>Login Limiter<\/strong> toggle. You can set the maximum number of failed login attempts allowed and the lockout duration in minutes. Once an IP address exceeds the limit, it is automatically blocked for the configured period. This protects your site from brute force attacks without any additional configuration.<\/p><\/dd>\n<dt id=\"how%20do%20i%20hide%20the%20wordpress%20login%20page%3F\"><h3>How do I hide the WordPress login page?<\/h3><\/dt>\n<dd><p>With WPEPP Pro, go to <strong>WPEPP \u2192 Security<\/strong> and enable the <strong>Custom Login URL<\/strong> feature. Enter your preferred slug (e.g., <code>my-login<\/code>). The default <code>wp-login.php<\/code> URL will return a 404 error, and your login page will only be accessible at your new custom URL. This prevents bots from finding and attacking your login form.<\/p><\/dd>\n<dt id=\"how%20do%20i%20password%20protect%20a%20wordpress%20page%3F\"><h3>How do I password protect a WordPress page?<\/h3><\/dt>\n<dd><p>WordPress includes built-in password protection for any post or page \u2014 just set the visibility to \"Password protected\" in the editor. WPEPP enhances the default password form by letting you customize the design with 4 form styles, custom header text, social media icons, and 10+ one-click templates. With WPEPP Pro, you can also lock content to logged-in users, specific roles, or set auto-expiry dates.<\/p><\/dd>\n<dt id=\"how%20do%20i%20customize%20the%20wordpress%20login%20page%20without%20coding%3F\"><h3>How do I customize the WordPress login page without coding?<\/h3><\/dt>\n<dd><p>Go to <strong>WPEPP \u2192 Form Style \u2192 Login Page<\/strong> in your dashboard. The visual editor lets you change the background (color, gradient, image, or video), upload a custom logo, style the login form, input fields, buttons, links, and error messages \u2014 all with a real-time live preview. No code required. Pro users can also style the register and lost-password pages.<\/p><\/dd>\n<dt id=\"how%20do%20i%20block%20ai%20crawlers%20like%20chatgpt%20and%20google%20ai%20from%20scraping%20my%20site%3F\"><h3>How do I block AI crawlers like ChatGPT and Google AI from scraping my site?<\/h3><\/dt>\n<dd><p>Go to <strong>WPEPP \u2192 Security \u2192 AI Crawler Blocker<\/strong>. You will see a checklist of known AI bots including GPTBot (ChatGPT), CCBot (Common Crawl), Google-Extended, and others. Toggle any bot to block it. WPEPP automatically adds the rules to your <code>robots.txt<\/code> file. You can preview the generated rules before saving.<\/p><\/dd>\n<dt id=\"how%20do%20i%20add%20two-factor%20authentication%20%282fa%29%20to%20wordpress%3F\"><h3>How do I add two-factor authentication (2FA) to WordPress?<\/h3><\/dt>\n<dd><p>With WPEPP Pro, go to <strong>WPEPP \u2192 Security<\/strong> and enable <strong>Two-Factor Authentication<\/strong>. Select which user roles should be required to use 2FA. Users will be prompted to set up 2FA on their next login by scanning a QR code with any authenticator app (Google Authenticator, Authy, etc.). Eight recovery codes are provided as backup. The implementation follows the RFC 6238 TOTP standard.<\/p><\/dd>\n<dt id=\"how%20do%20i%20restrict%20content%20to%20logged-in%20users%20only%3F\"><h3>How do I restrict content to logged-in users only?<\/h3><\/dt>\n<dd><p>WPEPP offers three ways to restrict content: (1) <strong>Site Access Control<\/strong> \u2014 lock the entire site to logged-in users under the Site Access tab. (2) <strong>Content Lock (Pro)<\/strong> \u2014 lock individual posts or pages from the editor sidebar. (3) <strong>Conditional Display<\/strong> \u2014 show or hide specific content blocks based on login status, user role, device type, and 9 more conditions.<\/p><\/dd>\n<dt id=\"how%20do%20i%20create%20a%20members-only%20page%20in%20wordpress%3F\"><h3>How do I create a members-only page in WordPress?<\/h3><\/dt>\n<dd><p>Edit any page and assign the <strong>Member Only<\/strong> page template from the template dropdown. Logged-out visitors will see a login form. Once they log in, they see the real page content. No membership plugin needed \u2014 it works out of the box.<\/p><\/dd>\n<dt id=\"does%20wpepp%20slow%20down%20my%20website%3F\"><h3>Does WPEPP slow down my website?<\/h3><\/dt>\n<dd><p>No. WPEPP loads zero external scripts on the front end. CSS and JavaScript files are conditionally loaded only on pages that require them. The admin panel runs on React but only loads inside the WordPress dashboard. Your site speed score will not be affected.<\/p><\/dd>\n<dt id=\"is%20wpepp%20compatible%20with%20caching%20plugins%3F\"><h3>Is WPEPP compatible with caching plugins?<\/h3><\/dt>\n<dd><p>Yes. WPEPP works with all major caching plugins including WP Super Cache, W3 Total Cache, LiteSpeed Cache, WP Rocket, and others. Password-protected pages and member-only templates are excluded from caching by default in most setups. If you use site-wide password protection, ensure your caching plugin excludes password-check pages.<\/p><\/dd>\n<dt id=\"does%20the%20conditional%20display%20feature%20work%20with%20the%20wordpress%20rest%20api%3F\"><h3>Does the conditional display feature work with the WordPress REST API?<\/h3><\/dt>\n<dd><p>Yes. Content hidden via WPEPP conditional display rules is also stripped from REST API responses. This means conditional visibility works correctly with headless WordPress setups, Gatsby, Next.js, and other front-end frameworks that consume the REST API.<\/p><\/dd>\n<dt id=\"can%20i%20use%20wpepp%20with%20woocommerce%3F\"><h3>Can I use WPEPP with WooCommerce?<\/h3><\/dt>\n<dd><p>Yes. WPEPP is compatible with WooCommerce. You can use conditional content display on WooCommerce product pages, restrict access to the shop, or password-protect individual products. The login page customizer styles the default WordPress login form which WooCommerce also uses.<\/p><\/dd>\n<dt id=\"will%20my%20settings%20be%20preserved%20when%20i%20update%20wpepp%3F\"><h3>Will my settings be preserved when I update WPEPP?<\/h3><\/dt>\n<dd><p>Yes. WPEPP includes a built-in migration system that automatically preserves all your settings across version updates, including the upgrade from v1.x to v2.0. Your customizations, security rules, and styling options are never lost during an update.<\/p><\/dd>\n<dt id=\"does%20wpepp%20support%20multisite%3F\"><h3>Does WPEPP support multisite?<\/h3><\/dt>\n<dd><p>Yes. WPEPP works in WordPress multisite (network) installations. Each sub-site has its own independent settings. Network-wide activation is supported.<\/p><\/dd>\n\n<\/dl>\n\n<!--section=changelog-->\n<h4>2.0.0<\/h4>\n\n<ul>\n<li>Complete rebuild with React-powered admin dashboard<\/li>\n<li>Added real-time live preview for all form and login page styling<\/li>\n<li>Added login page customizer (background, logo, form, fields, buttons, links, errors)<\/li>\n<li>Added register page styling (Pro)<\/li>\n<li>Added lost-password page styling (Pro)<\/li>\n<li>Added login limiter \u2014 limit login attempts with configurable lockout<\/li>\n<li>Added login honeypot \u2014 invisible bot trap for the login form<\/li>\n<li>Added registration honeypot \u2014 spam trap for the registration form<\/li>\n<li>Added registration rate limiter<\/li>\n<li>Added custom login URL \u2014 hide wp-login.php (Pro)<\/li>\n<li>Added two-factor authentication (2FA) with TOTP (Pro)<\/li>\n<li>Added Google reCAPTCHA integration for login and registration (Pro)<\/li>\n<li>Added login activity log (Pro)<\/li>\n<li>Added IP blocklist and allowlist (Pro)<\/li>\n<li>Added disposable email blocker (Pro)<\/li>\n<li>Added email domain whitelist\/blacklist (Pro)<\/li>\n<li>Added admin approval for user registrations (Pro)<\/li>\n<li>Added disable XML-RPC<\/li>\n<li>Added hide WordPress version<\/li>\n<li>Added disable REST API user enumeration<\/li>\n<li>Added AI crawler blocker (GPTBot, CCBot, Google-Extended, etc.)<\/li>\n<li>Added content lock system \u2014 lock posts\/pages to logged-in users (Pro)<\/li>\n<li>Added auto-expiry unlock for content lock (Pro)<\/li>\n<li>Added role-based content lock (Pro)<\/li>\n<li>Added conditional content display with 12 condition types<\/li>\n<li>Added site access control \u2014 admin-only, login-required, site-wide password<\/li>\n<li>Added member-only page template<\/li>\n<li>Added templates gallery with 10+ professionally designed templates<\/li>\n<li>Added after-login redirect<\/li>\n<li>Added auto-login token generator<\/li>\n<li>Added responsive preview toggle (desktop free, tablet\/mobile Pro)<\/li>\n<li>Migrated from Customizer (Kirki) to REST API settings<\/li>\n<li>Full backward compatibility with v1.x settings<\/li>\n<\/ul>\n\n<h4>1.3.5<\/h4>\n\n<ul>\n<li>Conditional meta now supported in REST API responses<\/li>\n<li>Replaced wp_redirect with wp_safe_redirect for security<\/li>\n<\/ul>\n\n<h4>1.3.1<\/h4>\n\n<ul>\n<li>Fixed conditional meta compatibility with WooCommerce<\/li>\n<\/ul>\n\n<h4>1.2.0<\/h4>\n\n<ul>\n<li>Added login form display options<\/li>\n<li>Added 5 new styles for the password-protected form<\/li>\n<li>Added extensive customizer live preview options<\/li>\n<li>Added new options for text and style<\/li>\n<\/ul>\n\n<h4>1.0.0<\/h4>\n\n<ul>\n<li>Initial release<\/li>\n<\/ul>","raw_excerpt":"Best Login security, password protected content, block AI crawlers, limit login attempts &amp; login customizer with live preview. Total site protection!","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/bal.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin\/81055","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/bal.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin"}],"about":[{"href":"https:\/\/bal.wordpress.org\/plugins\/wp-json\/wp\/v2\/types\/plugin"}],"replies":[{"embeddable":true,"href":"https:\/\/bal.wordpress.org\/plugins\/wp-json\/wp\/v2\/comments?post=81055"}],"author":[{"embeddable":true,"href":"https:\/\/bal.wordpress.org\/plugins\/wp-json\/wporg\/v1\/users\/nalam-1"}],"wp:attachment":[{"href":"https:\/\/bal.wordpress.org\/plugins\/wp-json\/wp\/v2\/media?parent=81055"}],"wp:term":[{"taxonomy":"plugin_section","embeddable":true,"href":"https:\/\/bal.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_section?post=81055"},{"taxonomy":"plugin_tags","embeddable":true,"href":"https:\/\/bal.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_tags?post=81055"},{"taxonomy":"plugin_category","embeddable":true,"href":"https:\/\/bal.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_category?post=81055"},{"taxonomy":"plugin_contributors","embeddable":true,"href":"https:\/\/bal.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_contributors?post=81055"},{"taxonomy":"plugin_business_model","embeddable":true,"href":"https:\/\/bal.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_business_model?post=81055"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}