Lockdown WP Admin
Lockdown WP Admin conceals the administration and login screen from intruders. It can hide WordPress Admin (/wp-admin/) and and login (/wp-login.
The facts
- Rating
- 3.9★ from 54
- Active installs
- 10k+
- Price
- Free
- Last updated
- 28 Nov 2017
- Added
- Jan 2011
- Requires WP
- 3.6
- Tested up to
- WP 4.3.34
- Downloads
- 341,939
Our analysis
AI-assistedLockdown WP Admin is a WordPress plugin designed to enhance the security of your site's admin area. It hides the WordPress Admin section from users who are not logged in, returning a 404 error for direct access attempts. Additionally, it allows you to rename the login URL and add HTTP authentication for extra security.
This plugin is suitable for WordPress site administrators looking to restrict access to the admin area and enhance their site's security without modifying core files or .htaccess settings.
Best for: WordPress site administrators seeking to improve admin area security.
What it does well
- ✓Hides WordPress Admin from non-logged-in users
- ✓Returns a 404 error for direct access attempts
- ✓Allows renaming of the login URL
- ✓Supports adding HTTP authentication
- ✓Does not modify core files or .htaccess
Where it falls short
- •Last updated in November 2017
- •Tested only up to WordPress 4.3.34
- •Limited user feedback with a moderate rating
Verdict
Lockdown WP Admin provides basic security features for the WordPress admin area, but its age and limited compatibility may be a concern for some users.
From the developer
Sean Fisher's own description of Lockdown WP Admin, lightly tidied.
This plugin will hide WordPress Admin (/wp-admin/) when a user isn’t logged in. If a user isn’t logged in and they attempt to access WP Admin directly, they will be unable to and it will return a 404. It can also rename the login URL.
Also, you can add HTTP authentication directly from WP Admin and add custom username/password combinations for the HTTP auth or use the WordPress credentials.
This doesn’t touch any .htaccess files or change the WordPress core files. All the CSS/Images under /wp-admin/ are still accessible, just not the .php ones.
If you enable HTTP authentication, it will add HTTP authentication to the PHP files in /wp-admin/.
To contribute to the development, check out the GitHub Repository.