Choose which pages require sign-in

WPEPP Pro is the paid edition of WPEPP - Essential Security, Password Protect & Login Page Customizer. Its access, login, and form settings are managed in the WordPress dashboard. Site access control can require visitors to log in before they view the site. For selected content, Pro can lock individual posts or pages from the editor, restrict access by visitor role, and set an automatic expiry date. You can choose how a locked page responds, such as showing a login link or password form, opening a popup, or redirecting the visitor.

A Member Only page template shows a login form to logged-out visitors and the page content after they log in. Conditional Display controls whether blocks appear according to login status, user role, device type, and other available conditions. Hidden content is also stripped from REST API responses for headless WordPress setups.

Change the login route and add verification

Choose a custom URL slug to replace the standard wp-login.php address. When the custom URL is enabled, the default address returns a 404 error. You can choose a destination page after successful login and generate secure, one-time auto-login links for specific customers.

Two-factor authentication uses TOTP. Users scan a QR code with Google Authenticator, Authy, Microsoft Authenticator, or another TOTP app to set it up. It follows RFC 6238, includes eight one-time recovery codes, and can be required for selected user roles.

Google reCAPTCHA can be added to login and registration forms; setup requires a Site Key and Secret Key. WPEPP also includes login and registration honeypots, configurable login attempt limits, IP-based tracking, and IP lockouts after repeated failed attempts. Registration rate limiting helps control mass signups. The Pro login activity log entries successful, failed, and locked-out attempts, with IP addresses, user agents, status, and timestamps.

Style login and password forms

The visual editor lets you set the login page background to a color, gradient, picture, or video, upload a logo, and style the form, fields, buttons, links, and error messages. Changes appear in a live preview before saving. Pro also adds styling controls for registration and lost-password pages.

Password-protected content can use branded forms with custom header and description text, button and label text, input placeholders, error messages, and social media icons. The extension provides four password form styles overall; Pro adds two styles to the two available in the free edition. The template gallery includes 10+ one-click designs.

Configure security and crawler rules

The AI crawler blocker has a checklist of known bots, including GPTBot, CCBot, and Google-Extended. Preview selected rules before adding them to the site's robots.txt file.

After installing and activating WPEPP Pro, open WPEPP in the WordPress dashboard. Use the Security area for the custom login URL, login limiter, two-factor authentication, or reCAPTCHA. Open Form Style to edit forms, and use the relevant access or editor settings to restrict content. Review visual changes in the live preview before saving.