Allow Only Administrators to Log In
Temporarily blocks logins for everyone except administrators, for example during a migration or a security incident.
Snippet Library
WordPress code snippets, ready to use
3,040 free snippets from the WPIDE team and the community. Copy the code, or add any snippet to your site in one click with WPIDE.
Allow Only Images and PDFs for Non-Administrators
Limits the file types authors, editors and other non-admin users can upload to common images and PDF documents.
Allow SVG Uploads for Administrators
Lets administrators upload SVG files to the Media Library. Files containing scripts, event handlers or javascript: links are rejected.
Allow the Administrator Role Only for Company Email Addresses
Refuses to give the administrator role to accounts whose email address is not on one of your approved domains, whether set from the profile screen, the Add User screen or a bulk role change.
Application Passwords for Administrators Only
Keeps Application Passwords available for administrators (for integrations and apps) but removes them for every other user.
Approve New Users Before They Can Log In
New sign-ups wait for an administrator to approve them on the Users screen before they can log in, and get an email once approved.
Ask for the Password Again Before Sensitive Admin Screens
Requires administrators to log in again before opening plugin, theme, user and update screens when their login is older than 30 minutes, so a hijacked session cannot quietly install code or add users.
Attached Media Count Column
Adds a Media column to the Posts and Pages lists with the number of files uploaded to each item, linking to them in the Media Library, to spot heavy or image-less content.
Auto-Hide the Admin Bar on the Front End
Slides the admin bar out of view on the front end and brings it back when you move the mouse to the top edge of the screen.
Ban IPs That Try Common Attack Usernames
Blocks an IP address from logging in for a day as soon as it tries a username like "admin" or "test" that does not exist on your site.
Block Password Resets for Administrators
Disables the "Lost your password?" flow for administrator accounts, which closes off reset-email based takeovers of the most powerful accounts.
Block Reserved Usernames
Prevents anyone from registering or being created with usernames like admin, support or root that look official or invite attacks.
Bookmark Admin Screens in the Admin Bar
Adds a star menu to the admin bar where each user can bookmark the admin screen they are on, such as a plugin's settings or a filtered list, and jump back to it from anywhere.
Bring Back Appearance > Customize on Block Themes
Restores the Customize link under Appearance and in the admin bar on block themes, for quick access to Customizer settings such as Site Identity and Homepage Settings.
BuddyPress: Email the Admin When a Member Activates
Emails the site admin when a new member activates their BuddyPress account, with a link to their profile.
BuddyPress: Hide Administrators From the Members Directory
Keeps site administrators (and any other roles you list) out of the BuddyPress members directory and member counts on the directory page.
BuddyPress: Hide Administrators' Activity From the Stream
Keeps activity created by administrators (such as testing posts and profile edits) out of the public activity streams.
Bulk Action to Move Posts Back to Draft
Adds "Move to draft" to the Bulk actions menu for posts and pages, to unpublish several items at once.
Cache Site-Wide Comment Counts
Stores the comment totals that WordPress shows in the admin menu, toolbar and dashboard for 10 minutes, avoiding a slow counting query on every admin page view on sites with many comments.
Capability Audit for Risky Permissions
Adds Users > Capability Audit, listing every role other than Administrator and every user outside the administrator role that holds powerful permissions such as unfiltered HTML, plugin installation or user management.
Change a Post's Type From the Editor
Adds a "Post type" box to the editor sidebar for administrators that converts an item into another post type, such as turning a post into a page, keeping its content and URL slug.
Change the Menu Icon and Position of Any Post Type
Gives a post type registered by a plugin or theme a different Dashicon and moves it up or down the admin menu.
Check the SMTP Connection Without Sending
Adds Tools > SMTP Check, which connects and logs in to your configured SMTP server and reports success or the exact error, without sending an email to anyone.
Collapse the Admin Menu by Default
Starts everyone with the narrow, icon-only admin menu for more working space. Users who expand it keep their choice.