描述
Password for WP locks your whole website behind one password. Visitors see a clean, full-screen login screen until they enter the correct password, while your WordPress admin area (wp-admin) stays fully accessible.
It is perfect for sites in development, staging environments, private launches, client previews, or a simple maintenance mode. Setup takes less than a minute and the plugin is completely free.
Key features
- Protect the entire front-end of the site with one password.
- Modern, responsive login screen with a clean, flat design.
- Choose a background image from the WordPress Media Library and display it stretched as a full cover, with a live thumbnail preview in the settings.
- Set a custom background color used as a fallback behind the image.
- Add your own headings (H2 and H3) to greet or inform visitors.
- Cache support: keeps the protection working when a page cache plugin is active (LiteSpeed Cache, WP Super Cache, W3 Total Cache and more).
- Skip the password for logged-in users with a single switch.
- CSRF-protected settings and hardened output escaping.
- Available in English, Polish, German and French, and fully translation ready.
How it works
When protection is enabled, every front-end request is checked for a valid access cookie. Visitors without the cookie are shown the login screen. After entering the correct password, a secure cookie is set for 30 days so they are not asked again. The WordPress login and admin panel are never blocked by the plugin.
Upgrading
For manual upgrades via FTP, deactivate and reactivate the plugin to ensure it works correctly.
Translations
Password for WP ships with English, Polish, German and French translations. Additional languages can be added using the included .po and .mo files in the /languages folder.
屏幕截图
安装
- Upload the plugin folder to /wp-content/plugins/, or install it from your WordPress admin under Plugins > Add New.
- Activate the plugin through the Plugins menu in WordPress.
- Open the Password for WP menu in the admin sidebar.
- Set a password, turn protection ON, and save your changes.
- Optional: choose a background image, pick a background color, edit the on-screen texts, and configure cache and logged-in options.
常见问题
-
Does the password also protect the WordPress admin area?
-
No. The password only protects the public front-end of your site. The wp-admin area and the WordPress login page stay accessible so you can keep working normally.
-
How do I add a background image?
-
In the plugin settings, click Select image next to Background image, choose any image from your Media Library, and a thumbnail preview appears immediately. The image is shown stretched as a full-screen cover on the login screen. Use Remove to clear it.
-
I use a caching plugin. Will protection still work?
-
Yes. Enable the Cache support option. The plugin then tells your cache not to store the login screen, varies cached pages by the access cookie, and clears the cache when you save the settings so protected pages are never served from an old cache.
-
Can logged-in users skip the password?
-
Yes. Turn on Do not ask logged-in users for the password and any logged-in user will see the site without entering the password.
-
Is the plugin compatible with WordPress 7?
-
Yes. Password for WP is built and tested for WordPress 7 and remains backward compatible with WordPress 6.0 and above.
-
In which languages is the plugin available?
-
English, Polish, German and French are included, and the plugin is fully translation ready via the bundled .po and .mo files.
评价
此插件暂无评价。
贡献者及开发者
更新日志
1.8.1
- Fix CSS
1.8.0
- Added a background image picker using the WordPress Media Library, with a live thumbnail preview in the settings.
- The selected image is displayed stretched as a full-screen cover on the login screen.
- Confirmed compatibility with WordPress 7.
- Updated translations (EN, PL, DE, FR).
1.7.0
- Redesigned admin panel and login screen with a clean, flat, borderless design.
- Added cache support for page caching plugins (LiteSpeed, WP Super Cache, W3 Total Cache).
- Added an option to skip the password for logged-in users.
- Replaced the deprecated admin bar API with add_node().
- Hardened output escaping and switched to constant-time password comparison.
- Restricted admin assets to the plugin page only and added asset versioning.
- Tested on WordPress 6.9.
1.6.1
- Added Changelog.
- Improved CSS for colorpicker.
1.6
- Added CSRF protection.
- Tested on WordPress 6.7.
1.5
- Improved translations.
- Tested on WordPress 6.x.
1.4
- Added support for WordPress 6+.
1.3
- Plugin tested on WordPress 6.0 and above.
1.2
- Plugin tested on WordPress 5.7.
1.1
- Plugin tested on WordPress 5.5.
1.0
- Initial release to the WordPress repository.