HTTP Auth — WordPress Security Plugin
by Sami Ahmed Siddiqui · WordPress.org page · Website
HTTP Auth has 6,000+ active installs on WordPress.org and 75,895 downloads all time. We have tracked it since September 4, 2026; download trends appear after 30 days of data. The last update was on July 22, 2025, tested up to WordPress 6.8.8.
HTTP Auth at a glance
Is HTTP Auth well maintained?
Features
The feature list from the plugin's own readme on WordPress.org, trimmed to the essentials.
- Enhanced Admin Security: Shield your admin pages from brute-force attacks by adding a login barrier
- Controlled Crawling: Restrict crawlers from accessing your site during development, preventing unnecessary indexing
- Post-Launch Access Control: Maintain control over admin page access even after your website goes live
- Easy Activation/Deactivation: Conveniently enable or disable HTTP Auth without deactivating the plugin entirely
HTTP Auth reviews and ratings
6 reviews on WordPress.org, with the most recent ones as their authors posted them.
6 reviews
- 5★
-
4
- 4★
-
1
- 3★
-
0
- 2★
-
0
- 1★
-
1
-
Seems to be working very well to me
Thanks a lot for having made this nice and simple plugin!
nipter -
Not working for complete site
I checked the "complete site" radio button, but the auth only appeared on the wp-admin page. So the plugin is not working as advertised.
Fixdemonium -
Great Plugin, Great work
Great to see such a plugin available. Works like a charm and has more options than I thought. I appreciate that!
melissalee -
It Works For Me Perfect
It Works For Me Perfect.... ThaNks.
sahir -
Best Plugin and Easy to use!
I was use this plugin on my website. It work good on my website. I’m very much satisfied with this plugin.
chrintinecase -
It's simple and it works
Generating .htaccess and .htpasswd by hand is pain. This little plugin does that Admin UI is okay It's simple Source code is GPL2 and is short enough, I reviewed it and found no tricky things I'd better uninstall it when site goes live
motokun
HTTP Auth alternatives
Plugins that solve the same problem, ranked by how closely they overlap with HTTP Auth.
-
Restrict 2,000+ installs · 4.2 -
WP fail2ban 60,000+ installs · 4.2 -
IP Geo Block 8,000+ installs · 4.2 -
User Login History 10,000+ installs · 4.6
Details
Provides comprehensive security during development by protecting your entire site and your admin pages from brute-force attacks.
The full description, screenshots and every review live on the WordPress.org page.
Rankings HTTP Auth competes in
Tags
- brute attack
- Brute Force
- http auth
- prevent-crawl
- restrict site
More from Sami Ahmed Siddiqui
-
Custom Permalinks 100,000+ installs -
Prevent XSS Vulnerability 6,000+ installs -
Make Paths Relative 2,000+ installs -
SCHEMA for Article 200+ installs
- Version
- 1.0.1
- Last updated
- Jul 22, 2025
- First published
- Feb 18, 2016
- Requires WordPress
- 3.5
- Tested up to
- 6.8.8
- Requires PHP
- 5.6
- Pricing
- Free on WordPress.org
HTTP Auth FAQ
What does HTTP Auth do?
According to its WordPress.org readme, HTTP Auth offers Enhanced Admin Security: Shield your admin pages from brute-force attacks by adding a login barrier, Controlled Crawling: Restrict crawlers from accessing your site during development, preventing unnecessary indexing, Post-Launch Access Control: Maintain control over admin page access even after your website goes live and Easy Activation/Deactivation: Conveniently enable or disable HTTP Auth without deactivating the plugin entirely.
How many active installs does HTTP Auth have?
WordPress.org reports 6,000+ active installs for HTTP Auth as of September 7, 2026.
Is HTTP Auth still maintained?
The last release was on July 22, 2025, more than a year ago. WordPress.org shows a warning on plugins that go this long without an update.
Is HTTP Auth free?
HTTP Auth is free to install from WordPress.org. Many plugins also sell a paid version or add-ons.