Hide My WP — WordPress Security Plugin
Hide My WP Ghost – Security & Firewall
by John Darrel · WordPress.org page · Website
Hide My WP has 100,000+ active installs on WordPress.org and 2,900,609 downloads all time. It was downloaded 79,071 times in the last 30 days. The last update was on October 20, 2026, tested up to WordPress 7.1.3.
Hide My WP at a glance
Is Hide My WP well maintained?
Features
The feature list from the plugin's own readme on WordPress.org, trimmed to the essentials.
- AI Security Explanations: Your findings explained for your own website and re-ranked by what actually exposes you, with a monthly allowance of AI checks…
- Ghost Mode: Maximum security preset, changes all paths, hides all file extensions, and enables all hiding options in one click
- IP Block Automation: Automatically block IP addresses that trigger repeated security threats
- AI Copyright Protection: Block 30+ AI training crawlers (GPTBot, ClaudeBot, PerplexityBot, and others) at the firewall level. List auto-updated with each…
- Full Security Threats Log: Unlimited entries with filters by threat type, status, country, and time range, full-text search, pagination, and CSV export
- Full User Events Log: Unlimited entries with filters, search, pagination, and CSV export
- Cloud Event Storage: 30-day cloud retention for audits and incident reports
- Real-time Email Alerts: Get notified instantly of brute-force attempts or suspicious activity
- Geo-Security (Country Blocking): Block entire countries or specific paths by country
- Advanced File Hardening: Hide file extensions (PHP, CSS, JS, JSON), secure wp-config.php, php.ini, and debug.log
- Database & Server Hardening: Fix file permissions, change database prefix, regenerate SALT keys
- Priority Support: Direct access to our security experts and founder-led assistance
Hide My WP reviews and ratings
373 reviews on WordPress.org, with the most recent ones as their authors posted them.
373 reviews
- 5★
-
317
- 4★
-
5
- 3★
-
8
- 2★
-
9
- 1★
-
34
-
WP Ghost has saved my ass MANY times
Hosting over a hundred WordPress sites is not for the timid. WP Ghost has made this responsibility much less of a stressor. Even when exploits are being actively compromised in the wild, WP Ghost helps to at least slow down any hacks hitting my sites. So far this year... zero hacks on any of the sites where I have WP Ghost installed. That it worth its weight in gold for sure!
mphaynes -
A very, very great addition
A truly fantastic addition! And the technical support team is incredibly helpful. Every day we see new and improved updates that, with God's grace, help the website achieve complete protection. Thank you, wpghost team!
tguhany -
Muito bom, funcional e prático!
O Hide My WP Ghost é fácil de usar e possui praticamente todos os recursos para proteger seu site WordPress. Continuem assim, vocês estão fazendo um ótimo trabalho! Hide My WP Ghost is easy to use with great, has almost ever feature to protect your WordPress website. Keep moving guys you are doing great.
Ivison Ramos -
WP Ghost has realy good support
WP Ghost is a really good plugin. I used Lite mode on most of my websites but now use a paid Pro Version of my main four websites that was getting attacked by rogue bots. The pro verson allows me to see a log and what the bots are with an IP Address. I noticed the rogues are using Cloudflare so it can be difficult to tell at first. Support is really good because I was help with a compatiblity problem with Windows Internet Information services and the URL Rewrite duplicating lines of code in the web.config file causing a 500 internal error. I do reccomend this plugin if you want to protect your websites against rogue bots.
Adrian McMaster -
A must have
Once you set up a WordPress site, you'll begin attracting visitors, not to buy, but to your login page and access like XML-RPC from automated servers worldwide, all aiming to access your WordPress dashboard. You may not even notice if they succeed, but your paid campaigns could inadvertently redirect your clients elsewhere. This tool helps ghost your WordPress site, changing you loging page, even making it more challenging for competitors to discover and replicate your strategies, or make it more professional like changing wp-content path to content o anything you like like files, so make your site looks is custom made. The support team is excellent; I recently raised an issue regarding compatibility between aaPanel, multi-server Nginx + LiteSpeed, and they promptly provided a solution along with compatibility details. Their support is excellent, you fell like talking to people no those support that just blame others.
sebastian -
WP Ghost is a plugin you won't regret using.
I've been using WP Ghost for over three years. I've used other paid plugins, but they've caused various issues, including speed issues, on my site. However, WP Ghost, along with the caching and SEO plugins, has always worked flawlessly. The customer service is also excellent.
uknew
Download and install history
115,540 downloads over the last 48 days. Snapshots taken daily from WordPress.org.
Where Hide My WP ranks on WordPress.org
The rankings we track that Hide My WP appears in, and how its position changed over 30 days.
| Ranking | WordPress.org placement | Position | 30 days |
|---|---|---|---|
| Best Security Plugins | #31 by tag, #23 in search | #17 | ▲4 |
| Best Login Plugins | #8 by tag, not in search | #45 | ▼1 |
Hide My WP alternatives
Plugins that solve the same problem, ranked by how closely they overlap with Hide My WP.
-
WP fail2ban 60,000+ installs · 4.2 -
Security Plugin, Firewall & Malware Scanner with Auto Removal 40,000+ installs · 4.8 -
Security Optimizer 1 million+ installs · 4.5 -
WP Hide & Security Enhancer 50,000+ installs · 4.3 -
Login Security Captcha 10,000+ installs · 4.9
Details
Hide My WP Ghost is a WordPress security plugin that hides WP paths and protects your site with Path Security, Firewall, Brute Force Protection, 2FA
The full description, screenshots and every review live on the WordPress.org page.
Rankings Hide My WP competes in
Tags
- Brute Force
- firewall
- hide my wp
- login
- security
More from John Darrel
-
Website Security Check 100+ installs
- Version
- 7.0.14
- Last updated
- Oct 20, 2026
- First published
- Jul 1, 2016
- Requires WordPress
- 5.8
- Tested up to
- 7.1.3
- Requires PHP
- 7.4
- Pricing
- Free on WordPress.org
Hide My WP FAQ
What does Hide My WP do?
According to its WordPress.org readme, Hide My WP offers AI Security Explanations: Your findings explained for your own website and re-ranked by what actually exposes you, with a monthly allowance of AI checks, Ghost Mode: Maximum security preset, changes all paths, hides all file extensions, and enables all hiding options in one click, IP Block Automation: Automatically block IP addresses that trigger repeated security threats, AI Copyright Protection: Block 30+ AI training crawlers (GPTBot, ClaudeBot, PerplexityBot, and others) at the firewall level. List auto-updated with each and Full Security Threats Log: Unlimited entries with filters by threat type, status, country, and time range, full-text search, pagination, and CSV export.
How many active installs does Hide My WP have?
WordPress.org reports 100,000+ active installs for Hide My WP as of October 22, 2026.
Is Hide My WP still maintained?
Yes. The last release was on October 20, 2026 and it is tested up to WordPress 7.1.3.
Does Hide My WP have good support?
On the WordPress.org forum, 2 of 3 recent support threads for Hide My WP are marked resolved. That is the developer's free support; a paid version usually comes with its own channel.
Is Hide My WP free?
Hide My WP is free to install from WordPress.org. Many plugins also sell a paid version or add-ons.
Where does Hide My WP rank among Security Plugins?
Hide My WP is #17 in the WordPress.org Security Plugins ranking.