MyNew Registration Lockdown
MyNew Registration Lockdown enforces one centralized user-creation policy across WordPress. Instead of relying only on the public registration setting or a visible form, it evaluates user creation at the shared wp_insert_user() insertion layer. The default policy blocks unauthorized account creation
MyNew Registration Lockdown enforces one centralized user-creation policy across WordPress. Instead of relying only on the public registration setting or a visible form, it evaluates user creation at the shared wp_insert_user() insertion layer.
The default policy blocks unauthorized account creation while allowing:
- Logged-in administrators with the create_users capability inside wp-admin.
- WP-CLI user creation by a server operator.
- Explicitly authorized integrations through the documented mnrl_is_user_creation_authorized filter.
The plugin also disables the default registration action, can disable multisite signups, records privacy-aware audit events, retains those events for a configurable period, and can send threshold-based email alerts.
No telemetry is collected. The plugin does not contact MyNew Technologies or any third-party service.
Documentation and support: https://mynewtechnologies.com/products/registration-firewall/
- 01Upload the mynew-registration-lockdown directory to /wp-content/plugins/ or install the ZIP through Plugins > Add New > Upload Plugin.
- 02Activate the plugin.
- 03Open Settings > Registration Lockdown.
- 04Review the default authorization policy before deploying to a site that intentionally creates users through custom integrations.
Frequently asked questions.
Does this merely hide the registration form?
No. It enforces policy at the user insertion layer used by WordPress core and most integrations.
