WPHH SECURE – AIO WordPress Security With File Locking & WP Hide Login

Secure your WordPress site with one-click file locking, login path hiding, role-based access, and smart dashboard visibility. Built for speed, security, and control.

Full Description

WPHH SECURE by WP Hacked Help is a comprehensive WordPress security plugin that integrates advanced file protection and login URL obfuscation. It blocks brute-force attacks, unauthorized access, and file tampering by allowing you to easily lock or unlock your WordPress files and folders with a single click.

The plugin comes with a user-friendly interface and real-time feedback, ensuring secure operations without any technical knowledge required. WPHH SECURE is built to work seamlessly with the native WordPress functions, ensuring compatibility and safety for all sites, including blogs, business sites, and WooCommerce stores.

With automatic exclusions for sensitive folders and the ability to manage folder exceptions, WPHH SECURE ensures that critical areas like uploads, cache, and backups are not locked accidentally. It also features login URL hiding to prevent unauthorized access to your site’s backend.

Key Features:

✅ One-Click Lock/Unlock – Lock or unlock all WordPress files and folders with a single click.
✅ Smart Dashboard – Access real-time status updates and track lock activities in the dashboard.
✅ Role-Based Access – Configure permissions to restrict access to the lock/unlock feature based on user roles.
✅ Login URL Hiding – Prevent brute-force login attempts by hiding or changing your default WordPress login URL.
✅ Safe File Handling – Built on WP_Filesystem for secure file handling using AJAX for smooth background execution.
✅ Auto Exclusions – Automatically exclude high-priority folders (e.g., uploads, cache, backups) from being locked.
✅ Visual Progress Feedback – Watch real-time updates with progress bars and completion messages.
✅ Folder Exclusion Manager – Easily add or remove folders from the exclusion list to keep them safe.

There are three ways to install the WPHH SECURE plugin:

1. WordPress Admin Method
   A. Go to your WordPress dashboard.
   B. Navigate to Plugins > Add New.
   C. Search for WPHH SECURE.
   D. Click Install and then Activate.

2. Manual Installation (via .zip file)
   A. Download the plugin ZIP file from WordPress.org.
   B. In your WordPress dashboard, go to Plugins > Add New.
   C. Click Upload Plugin and select the ZIP file.
   D. Click Install Now, then Activate.

3. FTP Method
   A. Download and extract the plugin ZIP on your computer.
   B. Upload the extracted WPHH SECURE folder to /wp-content/plugins/ using FTP.
   C. Go to Plugins > Installed Plugins in WordPress and click Activate.

1. 

   Dashboard page showing services and quick status.

2. 

   Full-page UI to lock or unlock the website with a single click.

3. 

   Permission settings to control who can lock/unlock the website.

4. 

   Processing message after clicking the lock/unlock button.

5. 

   Locking process status with progress and confirmation.

6. 

   Excluded folders settings to manage folder exclusions (view, add, or remove).

7. 

   WP Hide URL settings page to change login URL and other hide options.

Q: Will this affect website speed?
A: No, the plugin is lightweight and uses background processing methods native to WordPress, so there’s no noticeable impact on speed.

Q: Can I restore the original login URL later?
A: Yes, you can revert to the default settings at any time via the plugin settings.

Q: Are my media or backup folders safe?
A: Yes, these folders are auto-excluded by default from the locking process to ensure they remain accessible.

Q: Is WPHH SECURE compatible with cache and backup plugins?
A: Yes, the plugin works perfectly with cache and backup plugins without interfering with their processes.

Q: Can I exclude specific folders or files from being locked?
A: Yes, you can easily add folders or files to the exclusion list from the plugin’s settings page.

1.1.8

• Added automatic cleanup of log files older than 24 hours.
• Improved logging performance and file handling.

1.1.5

• Added support to reset file and folder values when deactivating the plugin.
• Improved handling for fetching wp-config.php if it’s located outside of the public_html directory.

1.1.4

• Added additional cache and backup folder locations by default.
• Fixed issue with WordPress redirecting after logout when using the “Hide WP Login URL” feature.
• Disabled the default login URL and replaced it with a custom path stored in the database.
• Implemented minor UI fixes for better user experience.

1.1.3

• Enhanced AJAX functionality for real-time status updates during lock/unlock operations.
• Introduced “Hide WP Login URL” feature to block access to the default WordPress login page.
• Made improvements to the user interface for better functionality and usability.

1.1.2

• Added AJAX-based background task handling to improve performance.
• Introduced feature to hide the default WordPress login URL for added security.
• Minor UI improvements and bug fixes.

1.1.1

• Ensured compliance with WordPress.org plugin repository standards.
• Fixed minor bugs for better stability.

1.1.0

• Major improvements to security and performance.
• Enhanced compatibility with the latest version of WordPress.