Security

Protect your WordPress site with security hardening modules. Login protection, version hiding, XML-RPC controls, and more.

23 modules

These modules help you lock down your WordPress installation by hiding sensitive information, controlling access, and adding protection against common attacks. Each module works independently — enable only what you need.

2FA

Add an extra security layer with TOTP apps, email codes, and backup recovery codes

Activity Log

Track user actions and changes across your WordPress site

Cloudflare Turnstile

Privacy-focused CAPTCHA protection for login, registration, comments, and forms

Disable All Updates

Completely disable WordPress core, plugin, and theme updates

Disable Application Passwords

Remove the Application Passwords feature from WordPress

Disable Author Archives

Disable author archive pages to prevent username discovery

Disable File Editing

Remove the theme and plugin editor from WordPress admin

Disable REST API

Block REST API access for non-logged-in users

Disable XML-RPC

Turn off XML-RPC to prevent brute force and DDoS attacks

Email/SMS Verification (OTP)

Simple one-time password verification via email or SMS after password entry

Force SSL Admin

Force HTTPS for all admin and login pages

Google reCAPTCHA

Protect forms from spam and bots with Google reCAPTCHA v2 or v3

Hide My Login

Hide your WordPress login page by creating a custom login URL with advanced security features

Hide WP Version

Remove WordPress version from public view

IP Whitelist/Blacklist

Control site access by IP address

Limit Login Attempts

Protect against brute force attacks by limiting failed logins

Login ID Type Restriction

Control whether users log in with username, email, or both

Magic Login

Passwordless login via secure email links or 6-digit codes with QR code support

Obfuscate Author Slugs

Hide usernames in author URLs with random hashes

Password Protection

Password-protect your entire site from public view

Security Headers

Add HTTP security headers to protect against common attacks

Simple CAPTCHA

Self-hosted CAPTCHA with math problems, text questions, and image challenges

Username Blacklist

Block common and dangerous usernames from registration

PRO

Get access to all 166 modules with a single license

Upgrade to Pro