Hooks, assets, and Pro-ready support added. Update for smoother performance and future compatibility.<\/p>\n\n
Admin Safety Guard<\/a><\/strong> is a lightweight, high-performance WordPress security firewall dedicated to locking down your most vulnerable entry points: the login screen and the administrative dashboard. Designed with a clean UI and intelligent default settings, it instantly neutralizes brute-force attacks, credential stuffing, and bot traffic without slowing down your site's load times.<\/p>\n\n It actively patches common vulnerabilities\u2014such as disabling XML-RPC to prevent DDoS attacks\u2014while giving you precise control over who accesses your site and how. From generating a custom, hidden login URL to evade automated scanners, to enforcing Two-Factor Authentication (2FA), blacklisting malicious IPs, and applying custom branding to your login page, Admin Safety Guard provides an uncompromising frontline defense that is incredibly easy to configure.<\/p>\n\n [youtube https:\/\/www.youtube.com\/watch?v=KFNUmTHtODE]<\/p>\n\n Admin Safety Guard Pro<\/a><\/strong> elevates your site\u2019s defense into a comprehensive, automated security operations center. Built for power users, agencies, and e-commerce sites requiring strict access control, the Pro tier unlocks enterprise-grade site hardening and deep white-label customization.<\/p>\n\n It moves beyond basic login protection by introducing proactive defense mechanisms, including Smart 404 Blocking to catch hackers during reconnaissance, comprehensive File and Database Security to protect core assets, and automated Malware Scanning to detect hidden threats. Additionally, Pro grants you granular, role-based control over user sessions, advanced CAPTCHA integrations for ultimate spam prevention, and a suite of flexible design tools to deliver a fully branded, highly secure, and seamless login experience for your clients and team members.<\/p>\n\n Because the default WordPress leaves your front door wide open. With automated bots, brute-force attacks, and credential stuffing on the rise, simply having a strong password is no longer enough.<\/p>\n\n Admin Safety Guard is engineered to bridge the gap between enterprise-level security and everyday usability, providing a fortified shield around your website without the bloated code that slows down your server.<\/p>\n\n Here is why site owners, agencies, and developers choose Admin Safety Guard:<\/p>\n\n Admin Safety Guard<\/strong> is perfect for users who need more control, security, and customization in their WordPress admin area:<\/p>\n\n \ud83d\udc69\u200d\ud83d\udcbb Freelancers & Developers:<\/strong> Add backend security and branding to client sites\u2014no heavy coding. \ud83d\udc64 Hide Admin Bar (With Conditions):<\/strong> Hide the admin bar selectively for specific users or roles. \ud83d\udd11 Passwordless Login:<\/strong> Secure email-based login with one-time magic links\u2014no password required. Explore Pro Features<\/strong>: Admin Safety Guard Pro<\/a><\/p>\n<\/blockquote>\n\n\n\n For any issues, questions, or feature requests, please reach out via Support<\/a>.<\/p>\n\n\n\n This plugin uses the following third-party and external services:<\/p>\n\n 1) Google reCAPTCHA (Google LLC)<\/p>\n\n Purpose:\nUsed to protect forms from spam and automated abuse.<\/p>\n\n When it is used:\n- When reCAPTCHA is enabled in plugin settings\n- On login forms and support forms protected by reCAPTCHA<\/p>\n\n What data is sent:\n- User IP address\n- reCAPTCHA response token generated by Google\n- Browser information as required by Google reCAPTCHA<\/p>\n\n Service provider:\nGoogle LLC<\/p>\n\n Terms of Service:\nhttps:\/\/policies.google.com\/terms<\/p>\n\n Privacy Policy:\nhttps:\/\/policies.google.com\/privacy<\/p>\n\n 2) ThemePaste API (Plugin Author Service)<\/p>\n\n Purpose:\nUsed for:\n- Collecting optional admin email addresses for plugin updates and notifications\n- Sending support requests from the plugin support form\n- Collecting optional feedback when a user attempts to deactivate the plugin\n- Managing plugin-related notifications (only if the user provides contact details)<\/p>\n\n When it is used:\n- When a user submits the built-in support form\n- When a user opts to send diagnostic information\n- Submitting the optional deactivation feedback form<\/p>\n\n What data is sent:\n- Name\n- Email address\n- Phone number (if provided)\n- Message content\n- Site URL\n- Plugin name\n- Feedback text (if provided)\n- Support message content\n- Deactivation reason (if provided)<\/p>\n\n No data is sent without user action.<\/p>\n\n Service provider:\nThemePaste.com<\/p>\n\n Terms of Service:\nhttps:\/\/themepaste.com\/terms-condition<\/p>\n\n Privacy Policy:\nhttps:\/\/themepaste.com\/privacy-policy<\/p>\n\n This plugin includes compiled JavaScript bundles in:\n- assets\/admin\/build\/*.bundle.js<\/p>\n\n The original (human-readable) source files are included in this plugin under:\n- spa\/admin\/<\/p>\n\n Build Tools\n- Node.js (LTS recommended)\n- npm\n- Webpack + Babel<\/p>\n\n Source Entry Points\nThe admin SPA bundles are built from the following entry points:<\/p>\n\n Install Dependencies\nFrom the plugin root directory (or the directory where package.json exists):<\/p>\n\n 1) Install dependencies:\n npm install<\/p>\n\n Build (Production)\nTo generate the production bundles:<\/p>\n\n npm run build<\/p>\n\n Output Location\nWebpack outputs the compiled bundles to:<\/p>\n\n Important Notes\n- Do not edit files in assets\/admin\/build\/ directly. They are generated files.\n- Edit the source files under spa\/admin\/ and re-run the build command.\n- For WordPress.org distribution, production builds should be used (mode=production).<\/p>\n\n Website<\/a>\ud83c\udf1f Admin Safety Guard Pro<\/h3>\n\n
Why Use an Admin Safety Guard?<\/h3>\n\n
\n
\ud83d\udc65 Who Should Use Admin Safety Guard?<\/h3>\n\n
\n\ud83c\udfe2 Agencies & Teams:<\/strong> Secure multiple websites with a single workflow and consistent branding.
\n\ud83d\udd12 Site Owners:<\/strong> Protect dashboards from brute-force attacks and unauthorized logins.
\n\ud83e\udde9 Plugin\/Theme Authors:<\/strong> Add layered protection in demo or test environments.
\n\ud83d\udcc8 Online Businesses:<\/strong> Secure customer data with 2FA, CAPTCHA, and password protection.
\n\ud83c\udf93 Educators & Bloggers:<\/strong> Maintain a professional look while increasing security.<\/p>\n\n\n\nFree Feature Details<\/h3>\n\n
\n\ud83d\udcca Dashboard Overview:<\/strong> Visualize user activity and security stats in one glance.
\n\ud83d\udd17 Change Login URL:<\/strong> Customize the default wp-login.php<\/code> to block automated bots.
\n\ud83d\udd01 Redirect After Login\/Logout:<\/strong> Redirect users to any page after login\/logout.
\n\ud83d\udccb Limit Login Attempts:<\/strong> Block repeated failed logins to prevent brute-force attacks.
\n\ud83e\udd16 CAPTCHA Protection:<\/strong> Stop bots with reCAPTCHA or similar human verifications.
\n\ud83d\udd75\ufe0f\u200d\u2642\ufe0f Login Logs & Activity Tracking:<\/strong> Track user login times and backend actions.
\n\u26d4 IP Blocking:<\/strong> Block access by IP address to prevent hostile logins.
\n\ud83d\udd10 Two-Factor Authentication (2FA):<\/strong> Add extra verification layers to secure logins.
\n\ud83d\udec2 Password Protection:<\/strong> Protect private pages or areas with a password.
\n\u2699\ufe0f Disable XML-RPC:<\/strong> Disable vulnerable XML-RPC endpoints to stop exploits.
\n\ud83d\uddbc\ufe0f Custom Logo on Login Form:<\/strong> Replace WordPress logo with your brand.
\n\ud83c\udff7\ufe0f Custom Branding:<\/strong> Apply your own design across login and admin pages.<\/p>\n\n\n\n\ud83d\udd10 Pro Feature Details<\/h4>\n\n
\n\ud83d\udcf1 2FA via Mobile App:<\/strong> Add app-based Two-Factor Authentication (Google Authenticator \/ Authy).
\n\ud83e\udde9 CSRF Protection:<\/strong> Prevent Cross-Site Request Forgery attacks with token verification.
\n\ud83d\uddc3\ufe0f Database Table Prefix Check:<\/strong> Detects and helps change the insecure wp_<\/code> prefix.
\n\ud83c\udf10 Whitelist IP Addresses:<\/strong> Restrict admin access to trusted IPs only.
\n\ud83e\uddd1\u200d\ud83d\udcbb Hide Admin Bar (Conditional):<\/strong> Show or hide admin bar for specific roles or users.
\n\ud83d\uddc2\ufe0f WP Directory File Permissions Check:<\/strong> Scans and verifies file and directory permissions.
\n\ud83c\udf0d Social Login:<\/strong> Allow users to log in with Google, Facebook, or Twitter accounts.
\n\ud83d\udeab Disallow Unauthorized REST Requests:<\/strong> Restrict REST API access conditionally.
\n\ud83d\udcaa Password Strength Tool:<\/strong> Enforce strong password rules for better protection.
\n\ud83c\udfa8 Provide Login Template:<\/strong> Instantly apply stylish, ready-to-use login templates.
\n\ud83e\uddf0 Customize Design Pro:<\/strong> Fully customize admin and login design with a simple UI.
\n\ud83d\udce7 Email Notification:<\/strong> Receive and customize security alerts directly to your inbox.<\/p>\n\n\n
Support<\/h3>\n\n
External Services<\/h3>\n\n
Development \/ Source Code<\/h3>\n\n
\n
\n
Links<\/h3>\n\n
\nDocumentation<\/a>
\nPro Version<\/a>
\nFacebook<\/a>
\nPinterest<\/a>
\nLinkedIn<\/a>
\nInstagram<\/a><\/p>\n\n\n