WP Manifestindependent plugin directory
manifest / security / wp-page-protector

WP Page Protector

Protect specific WordPress pages with a password. Includes cookie-based unlock persistence and admin settings page.

by Han Htet San · github.com/drhanhtetsan/wp-page-protector

0stars
0forks

Install

No release zip yet. The repository archive installs, but the folder name will carry the branch suffix and updates will not flow:

wp plugin install https://github.com/drhanhtetsan/wp-page-protector/archive/refs/heads/main.zip

A WordPress plugin for password-protecting specific pages with advanced security features.

Features

  • 🔐 Selective Protection: Choose exactly which pages to protect
  • 🍪 Secure Cookies: HMAC-signed cookies prevent tampering
  • 🔄 Remember Me: Optional persistent authentication
  • 🛡️ Security First: Hashed passwords, nonce protection, cache prevention
  • Session Compatible: Works with WordPress session management
  • 🔄 Version Control: Password versioning for cookie invalidation

Quick Start

  1. Install: Upload to /wp-content/plugins/ and activate
  2. Configure: Go to Settings > Page Protector
  3. Protect: Set password and select pages to protect
  4. Done: Users will see a clean login form on protected pages

Documentation

Requirements

  • WordPress 5.0+
  • PHP 7.4+

Screenshots

Admin Panel User Form Logout
Admin Form Logout

Security

This plugin implements enterprise-level security:

  • Password hashing using WordPress standards
  • HMAC-signed cookies prevent session hijacking
  • Cache prevention protects sensitive content
  • CSRF protection with WordPress nonces

License

GPL-2.0-or-later - see LICENSE

Author

Han Htet San
GitHub: @ubagyan