WPEPP – Essential Security, Password Protect & Login Page Customizer

• Authenticator App Support — works with Google Authenticator, Authy, Microsoft Authenticator, and any TOTP app
• QR Code Setup — users scan a QR code to set up 2FA in seconds
• Recovery Codes — 8 one-time backup codes in case a user loses their authenticator device
• Role-Based Enforcement — enable 2FA for specific user roles (administrators, editors, etc.)
• RFC 6238 Compliant — industry-standard time-based one-time password implementation

🤖 Google reCAPTCHA Integration (Pro)

Add Google reCAPTCHA to your login and registration forms to stop bots before they even try.

• Login Form reCAPTCHA — prevent automated login attempts with CAPTCHA verification
• Registration Form reCAPTCHA — block bot signups on the WordPress registration page
• Easy Setup — just enter your Site Key and Secret Key to activate

📊 Login Activity Log (Pro)

Monitor every login attempt on your WordPress site with a detailed activity log.

• Complete Logging — records every successful, failed, and locked-out login attempt
• IP Address Tracking — see which IPs are attempting to access your site
• User-Agent Detection — identify the browser or bot behind each login attempt
• Status Filtering — filter the log by success, failure, or lockout status
• Timestamp Records — exact date and time of every login event

🛑 Block AI Crawlers & Bots

Prevent AI companies from crawling and training on your website content. Block GPTBot, CCBot, Google-Extended, and more.

• One-Click AI Blocker — toggle known AI crawlers on or off from a simple checklist
• robots.txt Rules — automatically generates and injects bot-blocking rules into your robots.txt
• User-Agent Blocking — returns 403 Forbidden to blocked AI crawlers at the server level
• Rule Preview — see exactly what rules will be added before saving

🔒 Lock Entire Site — Site Access Control

Need to lock your entire WordPress site? WPEPP gives you two powerful ways to do it — no plugins or code required.

Admin Only Mode — restricts the entire site to logged-in users only. Anyone who is not signed in is automatically redirected to the login page or shown a login popup. Perfect for intranet sites, staging environments, or member communities.

Site Password Protection — lock the whole site behind a single shared password. Visitors must enter the password before they can view any page. Logged-in administrators always bypass it automatically. Set a cookie duration so returning visitors are not asked again.

• Admin-Only Mode — lock the entire front end so only logged-in users can view it
• Site Password — require a single password for all visitors to access the site
• Configurable Cookie Duration — set how many days the access cookie lasts before asking again
• Bypass for Admins — logged-in administrators always skip the password gate automatically
• Custom Access Message — show a branded message above the password form
• Login Popup Option — show a blurred login overlay instead of a redirect (Pro)
• Page Whitelist — keep login, register, and selected pages accessible while the rest is locked

🔐 Password Protect Pages & Content Lock (Pro)

Lock any WordPress post, page, or custom post type so only authorized users can see the content.

• Per-Post Toggle — lock individual posts from the Gutenberg editor sidebar or Classic Editor meta box
• Multiple Lock Actions — choose from login link, inline password form, full-page popup with blur, or redirect
• Role-Based Locking — restrict content to specific user roles (subscribers, members, etc.)
• Auto-Expiry Unlock — automatically unlock content at a scheduled date and time
• Excerpt on Archives — optionally show a teaser excerpt on blog listing pages
• Works Everywhere — compatible with posts, pages, and all registered custom post types

📋 Conditional Content Display

Show or hide any post or page based on smart conditions — without shortcodes.

• User Status — show content only to logged-in or logged-out users (Free)
• User Role — target administrators, editors, subscribers, or any custom role (Pro)
• Device Type — show different content on desktop, tablet, or mobile (Pro)
• Time & Date — schedule visibility by time range, date range, day of week, or recurring schedule (Pro)
• Browser Detection — target Chrome, Firefox, Safari, Edge, or Opera users (Pro)
• URL Parameters — show content based on query string values like ?ref=email (Pro)
• Referrer Source — display content based on where the visitor came from (Pro)
• REST API Compatible — hidden content is stripped from API responses for headless WordPress setups
• 12 Conditions Total — the most flexible conditional visibility system available

👥 Member-Only Pages

Create pages visible only to logged-in members — no membership plugin required.

• Dedicated Page Template — assign the “Member Only” template to any WordPress page
• Built-In Login Form — visitors see a login form; authenticated users see the real content
• Zero Configuration — works out of the box, no setup needed

🎨 Login Page Customizer with Live Preview

Customize the default WordPress login page ( wp-login.php ) with a visual editor and real-time preview.

• Background Options — solid color, CSS gradient, background image, or background video with overlay
• Custom Logo — upload your own logo image, set its size, or use a text-based logo with custom font
• Form Styling — customize background, border, width, padding, and box shadow of the login form
• Field Styling — change input background, text color, border, padding, height, and focus state
• Button Styling — customize background, text color, font size, border radius, and hover state
• Heading & Links — style the form heading text and “Lost your password?” link
• Error Messages — customize the color, font, background, and padding of login error messages
• Register & Lost Password Pages (Pro) — same visual editor for wp-login.php?action=register and ?action=lostpassword
• Live Preview — every change is visible in real time before you save

🎯 Password-Protected Form Styling

Replace the plain WordPress password form with beautiful, branded designs using a real-time visual editor.

• 4 Unique Form Styles — 2 free styles, 2 additional styles with Pro
• Custom Text — add header and description text above or below the password form
• Button & Label Text — change the submit button label, input placeholder, and error messages
• Social Media Icons — add links to Facebook, X (Twitter), YouTube, Instagram, LinkedIn, Pinterest, and Tumblr
• Icon Controls — set position (top, middle, bottom), alignment, and visual style
• 10+ One-Click Templates — import pre-built designs like Minimal, Modern Dark, Corporate, Nature, Gradient Wave, and more

🛡️ Security Hardening

Reduce your WordPress attack surface with built-in hardening tools.

• Disable XML-RPC — shut down the xmlrpc.php endpoint used by bots for brute force and DDoS attacks
• Hide WordPress Version — remove the generator meta tag and version query strings from your source code
• Disable REST API User Enumeration — block the /wp/v2/users endpoint to prevent username discovery
• IP Blocklist & Allowlist (Pro) — manually block or allow specific IP addresses
• Disposable Email Blocker (Pro) — prevent registrations with temporary email addresses
• Email Domain Whitelist/Blacklist (Pro) — restrict or allow signups by email domain
• Admin Approval for Registrations (Pro) — require manual admin approval before new users can log in

📈 CPU Monitor & Site Health Dashboard

Keep your WordPress site fast and healthy with a built-in performance monitoring dashboard.

• Real-Time CPU Usage — see current CPU percentage, core count, and 1/5/15-minute load averages
• Memory Overview — monitor PHP memory usage, peak usage, and configured limits
• System Health Score — instant green/yellow/red health badge based on CPU, memory, and cron status
• Slow Query Logger — automatically log database queries that exceed a configurable time threshold
• SAVEQUERIES Toggle — enable or disable WordPress query logging directly from the dashboard
• Cron Jobs Manager —