Founding offer 50% off all plans for the first 100 customers, and your renewal price is locked for life. 74 spots left Claim your spot
Turquoise abstract wavy W logo on a black background
Turquoise abstract wavy W logo on a black background
White WP PowerSuite logo on a black background
White WP PowerSuite logo on a black background

Summarize with AI:

On This Page
Last updated: 24/07/2026

Password Protection

Put your whole site behind one shared password—ideal for staging, client previews, or a soft launch before you go public.

Overview

A Pro Security module that puts the whole site behind one shared password (hashed)—ideal for staging, client previews, or soft launch. Inactive until a password is set. Custom form title/message/button/logo/background; session cookie; admins bypass; Temporary Login token requests bypass the gate; rate limit 5 fails → 15 min lockout; gates anonymous REST/XML-RPC until unlocked. Hard conflict with Coming Soon & Maintenance—enable only one. Shared password ≠ per-user auth. Requires a valid WP PowerSuite license. Cache/CDN must vary on the access cookie.

Solid black square
Solid black square
Who is this for?
  • Staging and client preview environments
  • Soft launches before public go-live
  • Not a membership/paywall substitute

Features

Whole-site shared password
One gate for visitors until you open the site.
Custom gate UI
Title, message, button, logo, and background.
Admin bypass
Logged-in admins keep working.
Temporary Login aware
Token access can bypass the gate for vendors.
Rate-limited attempts
Cool-off after repeated wrong passwords.
Anonymous API gated
REST/XML-RPC stay locked until the site is unlocked.

Use Cases

  • Client staging previews
    Share one password instead of creating accounts for every stakeholder.
  • Soft launch weekends
    Gate the site until Monday’s announce.
  • Agency QA environments
    Keep unfinished builds off the open web

Frequently Asked Questions

Related Modules

Slow down password-guessing bots by locking out repeated failed logins for increasing cool-off periods—simple protection for your sign-in form.
Disabled
Allow or block visitors by IP address—ideal for office-only dashboards or shutting out known troublemakers. Rules apply site-wide, including wp-admin and login.
Disabled
Remove the dashboard screens that let anyone edit theme or plugin code from the browser—one less disaster if an account is compromised.
Disabled
Stops old-style trackbacks and pingbacks that often bring spam or junk alerts.
Disabled
Keep a clear record of important dashboard activity—who logged in, what changed, and when—so you can investigate issues or stay audit-ready without...
Disabled
Bot protection with Cloudflare Turnstile on logins, forms, comments, and WooCommerce—low hassle for real people.
Disabled
Blocks risky default usernames during registration so bots have fewer easy targets.
Disabled
Always open your dashboard and login screen over a secure https:// link. Anyone using the old http:// address is sent to the...
Disabled
Automatically protects visible email addresses and mailto links from basic spam bots by safely encoding them while keeping them clickable for visitors.
Disabled
Turn off public "forgot password" self-service for everyone. Use only when you reset passwords another way (manual admin password, WP-CLI, or admin-sent...
Disabled
Founding Member Offer 74 of 100 spots left

Before you go, here's what you'd be leaving.

WP PowerSuite launched this month. The first 100 customers get 50% off and keep that renewal price permanently. When the offer closes on 31 August 2026, prices return to $79 / $239 / $399 and stay there.

  • 154 modules, all included on every plan
  • Renewal price locked for life
  • 14-day refund, one email, no questions
See founding pricing
26 founding members so far 22 days left