SIMPLE SITE PRIVACY FOR WORDPRESS

Keep staging and preview sites out of public view.

VisionRed Suite Password Protect replaces basic WordPress search with fast Site-wide password gate, relevance-based ranking, flexible content controls, search analytics, SEO tools and optional Pro file indexing — all managed inside WordPress.

  • Protect the WordPress frontend with one shared password
  • Let logged-in users, approved IPs and selected paths bypass the gate
  • Remember approved visitors for 12 hours or optionally 30 days
  • See protection status and toggle it quickly from the WordPress toolbar
Explore Features →
View pricing
VisionRed Suite Password Protect autocomplete results

Site-wide password gate

Place a shared-password gate in front of WordPress frontend requests without creating visitor accounts.

Remembered access

Grant successful visitors access for 12 hours by default, with an optional 30-day Remember Me period.

Bypass controls

Allow logged-in users, approved IP addresses, CIDR ranges and exact paths to bypass the password gate.

Clear admin status

See whether protection is effectively on or off and toggle it quickly from the WordPress admin toolbar.

BUILT FOR STAGING & CLIENT PREVIEWS

Make temporary privacy simple for teams and clients.

Password Protect is designed for development, staging, client review and pre-launch websites where you need a lightweight WordPress-level privacy gate without setting up separate user accounts.

Shared-password access

Protect the frontend with one shared password stored using WordPress password hashing rather than plaintext.

Logged-in user bypass

Authenticated WordPress users bypass the gate automatically so administrators, editors and other signed-in users can continue working normally.

IP and CIDR whitelisting

Allow individual IPv4 or IPv6 addresses and network ranges to bypass protection, with a shortcut for adding the administrator’s detected IP.

Allowed paths

Keep selected webhook or public endpoints available by allowing exact paths to bypass the gate while the rest of the frontend remains protected.

Custom login-path support

Keep the standard WordPress login accessible or configure a custom login slug when the site uses a renamed login URL.

Purpose-built gate UI

Use a responsive, accessible password form with autofocus, clear errors and no dependency on the active theme or page builder.

ONE SIMPLE PRIVACY WORKFLOW

Protect it. Share it. Open it.

Turn site protection on when a project needs privacy, share one password with approved reviewers and disable it when the site is ready to go public.

Administrators Protect

Site-wide password gate starts returning relevant content as soon as the minimum character threshold is reached.

Visitors Enter

Unauthorized frontend visitors see the dedicated password screen and return to the URL they originally requested after successful entry.

Access Persists

Clear admin status reveals successful searches, zero-result opportunities and the content visitors choose.

ACCESS CONTROL & OPERATIONAL BYPASSES

Keep the site gated without getting in the way of normal WordPress operations.

Opt-in Clear admin status tracks search behavior without storing raw IP addresses or browser user agents, helping site owners understand demand while keeping consent controls explicit.

REST protection

Unauthorized REST API requests receive a JSON 401 response while the site is protected.

Operational bypasses

WordPress admin, AJAX, cron, WP-CLI and logged-in requests bypass the frontend gate to reduce interference with normal site operations.

Webhook-friendly paths

Keep required endpoints available through exact path allowances, including the suite’s expected Stripe billing webhook path by default.

Automatic access invalidation

The access cookie depends on the stored password hash and WordPress auth salt, so changing either invalidates previously granted access.

VisionRed Suite Password Protect Insights dashboard

VISIBILITY, STATUS & SAFETY CONTROLS

Make protected status obvious to administrators and less visible to search engines.

Password Protect combines a frontend access gate with administrative status indicators, safe toggles and search-engine discouragement for staging and preview workflows.

Toolbar status + quick toggle

A lock or unlock indicator in the admin toolbar makes the current site state easy to spot, and administrators can toggle protection without returning to the settings page.

Search-engine discouragement

Protected responses add noindex and nofollow directives and the plugin generates a site-wide robots.txt disallow rule to discourage cooperative crawlers from indexing staging content.

WordPress security controls

Settings and actions require administrator capability, state-changing requests use WordPress nonces, configured values are sanitized and password-page responses send no-cache headers.

SIMPLE ANNUAL PRICING

Choose the licence that fits your website.

Use VisionRed Suite Password Protect on one WordPress website or across the sites covered by your licence.

Single Site

For one WordPress website.

CAD $PASSWORD_PROTECT_SINGLE_SITE_PRICE

/ year

  • Site-wide password gate and relevance ranking
  • 12-hour and 30-day remembered access
  • IP, CIDR and exact-path bypasses
  • REST API protection
  • Core Clear admin status
  • Plugin updates and email support
Choose Single Site

FOR CONNECTED SITES

Multi-site

For WordPress Multisite networks.

CAD $PASSWORD_PROTECT_MULTISITE_PRICE

/ year

  • Everything in Single Site
  • WordPress Multisite support
  • Shared network deployment
  • Site-level protection configuration
  • Clear admin status across supported sites
  • Plugin updates and email support
Choose Multi-site

Built to stay lightweight. The plugin is implemented as a compact WordPress runtime with no external dependencies, making it straightforward to deploy on development, staging and client-preview sites.

COMPARE

More than a maintenance-mode screen.

VisionRed Suite Password Protect combines front-end search, result curation, SEO controls, structured data and privacy-aware analytics instead of treating each as a separate workflow.

FeatureVisionRed Suite Password ProtectBasic WordPress Search
Site-wide password gate✓×
Shared-password access✓Limited
Logged-in user bypass✓Varies
IP and CIDR whitelisting✓×
Exact allowed-path bypasses✓Limited
REST API protection✓×
Admin toolbar protection status✓Limited
Quick protection toggle✓Limited
Search-engine discouragement✓Limited
Server-level static-file protection××

FREQUENTLY ASKED QUESTIONS

What organizations usually want to know.

It is designed for staging sites, development environments, client previews and temporarily restricted launches where a lightweight shared-password gate is more convenient than creating accounts for every reviewer.

Successful visitors receive access for 12 hours by default. If they select Remember Me, access can persist for 30 days.

Yes. Logged-in WordPress users bypass the gate automatically, and administrators can whitelist individual IP addresses, IPv4 or IPv6 CIDR ranges and exact URL paths.

When enabled with consent, Clear admin status records search terms, result counts, result types, clicks, source pages and approximate repeat searchers. Raw IP addresses and browser user agents are not stored, one-way hashes are used and records are automatically removed after 90 days.

Not completely. The gate protects WordPress frontend and REST requests that pass through WordPress, but direct upload URLs, static assets, CDN copies and some cached pages may bypass WordPress entirely. Confidential content should use server-level authentication, VPN access or an identity-aware proxy.

Not individually in the reviewed version. Access remains valid until the cookie expires. Changing the shared password invalidates access for everyone because the cookie is derived from the current password hash.

Ready to keep your staging or preview site private?

Give approved reviewers simple password access while keeping ordinary visitors behind a lightweight WordPress privacy gate.

✉ sales@invisionweb.ca

View Pricing →