InstallLock

Close a Gap in WordPress Security

Strong passwords, two-factor authentication, and security plugins are important. But not every WordPress software change begins with someone signing into your dashboard.

Some services and integrations connected to WordPress can make changes remotely. If one of those connections is compromised, changes may be sent to your website without anyone ever using the normal WordPress login.

InstallLock Free closes that gap for WordPress core and themes.

InstallLock requires separate authorization from your authenticator app before WordPress core or theme changes can be made. A six-digit authenticator code is required to temporarily unlock those changes.

With protection enabled, InstallLock Free prevents unauthorized:

• WordPress core updates
• Theme installation
• Theme activation and switching
• Theme updates
• Theme deletion

This means that even if someone gains access through a WordPress administrator account or a connected service, WordPress core and theme changes remain locked until separately authorized.

When you need to make an authorized change, enter your authenticator code to temporarily unlock protection. InstallLock automatically restores protection when the unlock period ends.

External Services and Privacy

InstallLock uses Freemius for commercial upgrades, checkout, licensing, and subscription management. The upgrade purchase interface loads Freemius Checkout from https://checkout.freemius.com/js/v1/ . Freemius services may receive installation/site, license, purchaser, and transaction information as needed to provide these services.

• Freemius: https://freemius.com/
• Freemius Privacy Policy: https://freemius.com/privacy/
• Freemius Terms of Service: https://freemius.com/terms/
• Granite Point Software Terms of Use: https://granitepointsoftware.com/terms-of-use/

The authenticator QR code is generated locally and does not use an external QR-code service. Third-party copyright and license information is included in THIRD-PARTY-LICENSES.txt .