Hide WP paths, wp-login, wp-admin and more. Security against Brute Force attacks, SQL/Script Injections. 7G &amp; 8G firewalls against most bot attacks.

Hide My WP Ghost – Security & Firewall

Level up your WordPress security with Hide My WP Ghost plugin!
Hide My WP Ghost is your ultimate WordPress security solution. With powerful, easy-to-use features, it boosts your site&#8217;s security without altering any directories or files.
Join over 100,000 secured websites with Hide My WP Ghost. The plugin has blocked over 9 million brute force attempts and stopped 140,000 monthly hacks.
Key features include powerful protection against Scripts and SQL Injections, Brute Force attacks, XML-RPC attacks, XSS, and more.
Hide My WP Ghost changes and hides WP common paths, admin &amp; login paths, plugin paths, and theme paths, protecting your site from hacker bots.
Note: No files or directories are physically altered. All changes are implemented through server rewrite rules, ensuring no impact on SEO or loading speed.
Protect your site today! Hide My WP Ghost hides all common paths from hackers, shielding all your plugins and themes effectively.
<iframe loading="lazy" class="youtube-player" width="750" height="422" src="https://www.youtube.com/embed/gwRKHQTNkh0?version=3&#038;rel=1&#038;showsearch=0&#038;showinfo=1&#038;iv_load_policy=1&#038;fs=1&#038;hl=en-US&#038;autohide=2&#038;wmode=transparent" allowfullscreen="true" style="border:0;" sandbox="allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox"></iframe> 
YouTube &#8211; Why You Must Have <a href="https://hidemywpghost.com/" rel="nofollow ugc">Hide My WP</a>
<blockquote>
Check the Demo Website source code: 
 <a href="https://demo.wpplugins.tips/" rel="nofollow ugc">https://demo.wpplugins.tips/</a> 
 (the elementor is changed in files and classes using the PRO version)
Check the Redirected URLs in Demo Website (all are redirected to Front Page): 
 <a href="https://demo.wpplugins.tips/wp-admin/" rel="nofollow ugc">https://demo.wpplugins.tips/wp-admin</a> 
 <a href="https://demo.wpplugins.tips/wp-login/" rel="nofollow ugc">https://demo.wpplugins.tips/wp-login</a>
Check the Hidden Common Paths in Demo Website (all show 404 Page Not Found): 
 <a href="https://demo.wpplugins.tips/wp-content/" rel="nofollow ugc">https://demo.wpplugins.tips/wp-content</a> 
 <a href="https://demo.wpplugins.tips/wp-content/plugins/" rel="nofollow ugc">https://demo.wpplugins.tips/wp-content/plugins</a> 
 <a href="https://demo.wpplugins.tips/wp-content/themes/" rel="nofollow ugc">https://demo.wpplugins.tips/wp-content/themes</a>
</blockquote>
The plugin works with other security plugins like Wordfence, iThemes Security, Sucuri and adds a layer of security to your WordPress website against hacker bots.
Hide My WP Ghost is compatible with all server types, hosting services, and also supports WP Multisite.
Over 90,000 hacking attacks per minute strike WordPress sites and WordPress hosting around the world, hitting not only large corporate websites packed with sensitive data, but also sites belonging to small businesses, independent entrepreneurs, and individuals running personal blogs.
Security of WordPress sites typically tops the list of concerns for new and experienced website owners alike.
For owners of WordPress sites, statistics like that one raises particular worries about the security not just of individual WordPress sites, but of WordPress itself.
Is your website secure? Check your website with <a href="https://wpplugins.tips/wordpress-vulnerability-detector/" rel="nofollow ugc">Free Website Security Check</a>
Protect your WordPress website by hiding the authentication paths like wp-admin, wp-login.php, and wp-login, and change the common WordPress paths like wp-content, wp-includes, uploads, and more.
Hide My WP Ghost is packed with awesome security features:
<blockquote>
Hide My WP Ghost (over 40 FREE Security Features):
<ul>
<li>Hide WordPress wp-admin, and show 404 error or a custom page</li>
<li>Hide WordPress wp-login.php, and show 404 error or a custom page</li>
<li>Change the wp-admin and wp-login URLs</li>
<li>Change lost password URL</li>
<li>Change register URL</li>
<li>Change logout URL</li>
<li>Change activation URL</li>
<li>Change admin-ajax URL</li>
<li>Change wp-content URL</li>
<li>Change wp-includes URL</li>
<li>Change uploads URL</li>
<li>Change comments URL</li>
<li>Change author URL</li>
<li>Change plugins URL</li>
<li>Change plugins name</li>
<li>Change themes URL</li>
<li>Change themes name</li>
<li>Custom themes style.css name</li>
<li>Change REST API wp-json URL</li>
<li>Change category URL</li>
<li>
Change tags URL
</li>
<li>
Custom login redirects based on user role
</li>
<li>
Custom logout redirects based on user role
</li>
<li>
Change URLs from Relative to Absolute
</li>
<li>Change URLs in Ajax calls</li>
<li>Change URLs for Logged Users</li>
<li>Change URLs in Cache Files</li>
<li>Change paths in Sitemap.xml</li>
<li>Change paths in Robots.txt</li>
</ul>
Hide Options:
<ul>
<li>Security Headers against XSS &amp; Code Injections</li>
<li>Security Header Strict-Transport-Security</li>
<li>Security Header Content-Security-Policy</li>
<li>Security Header X-XSS-Protection</li>
<li>Security Header X-Content-Type-Options</li>
<li>Security Header X-Frame-Options</li>
<li>Firewall against Script Injections and SQL Injection</li>
<li>7G Firewall Security Filter</li>
<li>8G Firewall Security Filter</li>
<li>Block by IP Addresses</li>
<li>Block by User Agents</li>
<li>Block by Referrers</li>
<li>Block by Hostnames</li>
</ul>
Hide Options:
<ul>
<li>Hide /wp-admin path</li>
<li>Hide /wp-login path</li>
<li>Hide /login path</li>
<li>Hide REST API wp-json path</li>
<li>Hide Admin Toolbar based on user role</li>
<li>Hide style IDs and META IDs</li>
<li>Hide WordPress HTML comments</li>
<li>Hide Version and WordPress Tags</li>
<li>Hide DNS Prefetch WordPress link</li>
<li>Hide WordPress Generator Meta</li>
<li>Hide RSD (Really Simple Directory) header</li>
<li>Hide Emoticons if you don&#8217;t use them</li>
</ul>
Disable Options:
<ul>
<li>Disable REST API access</li>
<li>Disable XML-RPC access</li>
<li>Disable Embed scripts</li>
<li>Disable DB-Debug in Frontend</li>
<li>Disable WLW Manifest scripts</li>
<li>Disable Select All &#8211; Ctrl+A (Windows and Linux), ⌘+A (macOS)</li>
<li>Disable Copy &#8211; Ctrl+C (Windows and Linux), ⌘+C (macOS)</li>
<li>Disable Cut &#8211; Ctrl+X (Windows and Linux), ⌘+X (macOS)</li>
<li>Disable Paste &#8211; Ctrl+V (Windows and Linux), ⌘+V (macOS)</li>
<li>Disable Save &#8211; Ctrl+S (Windows and Linux), ⌘+S (macOS)</li>
<li>Disable Inspect Element/Developer Tool &#8211; Ctrl+Shift+I (Windows and Linux), ⌘+⌥+I (macOS)</li>
<li>Disable View Source &#8211; Ctrl+U (Windows and Linux), ⌘+U (macOS)</li>
<li>Disable Right Click</li>
<li>Disable Drag-Drop</li>
<li>Disable Image Dragging by Mouse</li>
<li>Disable Text Selection</li>
<li>Disable Directory Browsing</li>
</ul>
Mapping Text and URLs: 
<ul>
<li>Change URLs using URL Mapping</li>
<li>Change classes using Text Mapping</li>
<li>Change CDN URLs using CDN Mapping</li>
<li>Change paths in the cache files</li>
<li>Change paths in the Feed link</li>
<li>Change paths in the Sitemap XML</li>
<li>Change paths in the Robots.txt</li>
</ul>
Brute Force Protection: 
<ul>
<li>Brute Force Protection with Math reCaptcha</li>
<li>Brute Force Protection with Google reCaptcha V2</li>
<li>Brute Force Protection with Google reCaptcha V3</li>
<li>Brute Force Protection on Password Lost</li>
<li>Brute Force Protection on Signup</li>
<li>Brute Force Protection on Woocommerce Login</li>
<li>Brute Force Protection shortcode [hmwp_bruteforce]</li>
<li>Custom attempts, timeout, message</li>
<li>Manage Blacklist and Whitelist IPs</li>
</ul>
Extra Features: 
<ul>
<li>Fix relative URLs</li>
<li>Backup and Restore settings</li>
<li>Change classes on source code using Text Mapping</li>
<li>Change URLs on source code using URL Mapping</li>
<li>Cache CSS, JS, and Images to optimize the loading speed</li>
<li>Weekly security checks and reports</li>
</ul>
Integrations:
<ul>
<li>Support for WP Multisite</li>
<li>Support for Nginx</li>
<li>Support for IIS</li>
<li>Support for LiteSpeed</li>
<li>Support for Apache</li>
<li>Support for Siteground</li>
<li>Support for WP Engine</li>
<li>Support for AWS Hosting</li>
<li>Support for Inmotion Hosting</li>
<li>Support for Hostgator Hosting</li>
<li>Support for Godaddy Hosting</li>
<li>Support for Host1plus</li>
<li>Support for Payperhost</li>
<li>Support for Fastcomet</li>
<li>Support for Dreamhost</li>
<li>Support for Bitnami Apache</li>
<li>Support for Bitnami Nginx</li>
<li>Support for Google Cloud Hosting</li>
<li>Support for Litespeed Hosting</li>
<li>Support for Flywheels Local</li>
<li>Support for Flywheels Hosting</li>
<li>Support for Ploi Hosting</li>
<li>Support for Namecheap Hosting</li>
<li>Support for RunCloud Hosting</li>
<li>Support for WPEngine Hosting</li>
<li>
Support for CloudPanel Hosting
</li>
<li>
Recommended by Wp Rocket
</li>
<li>Recommended by WPML</li>
</ul>
See All FREE Security Features (over 40): 
 <a href="https://hidemywp.co/security-features/" rel="nofollow ugc">Hide My WP Free Features</a>
See All Premium Security Features (over 70): 
 * All the Hide My WP Ghost Free Features 
 * Hide WordPress Common Paths by Extension 
 * Hide WordPress Files like wp-config.php, wp-config-sample.php, wp-load.php, wp-settings.php, wp-blog-header.php, readme.html, readme.txt, install.php, license.txt, php.ini, hidemywp.conf, bb-config.php, error_log, debug.log 
 * Cloud Events Monitoring 
 * Cloud Brute Force Monitoring 
 * Temporary Logins Without Password 
 * Magic Link Login Without Password 
 * Two-factor Authentication By Code (2FA) 
 * Two-factor Authentication By Email (2FA) 
 * Geo Security 
 * Country Blocking 
 * Security Fix 
 * and more 
 <a href="https://hidemywpghost.com/hide-my-wp-ghost-security-features/" rel="nofollow ugc">Hide My WP Premium Feature</a>
</blockquote>
Compatible with: WP Multisite, Apache, Litespeed, Nginx and IIS.
Plugins Compatibility updates: Woocommerce, WPML, WPMUDEV, W3 Total Cache, Gravity, WP Super Cache, WP Fastest Cache, Hummingbird Cache, Cachify Cache, Litespeed Cache, SiteGround Optimizer, 
Cache Enabler, CDN Enabler, WOT Cache, Autoptimize, Jetpack by WordPress, Contact Form 7, bbPress, Manage WP, 
All In One SEO, Rank Math, Yoast SEO, Squirrly SEO, WP-Rocket, Minify HTML, iThemes Security, Sucuri Security, Really Simple SSL, WordFence Security, WP Cerber Security, BBQ Firewall, Anti-Malware Security, 
Back-Up WordPress, Elementor Page Builder, Divi Builder, Weglot Translate, AddToAny Share Btn, Limit Login Attempts Reloaded, Loginizer, Shield Security, Asset CleanUp, WP Hide &amp; Security Enhancer, and more
Compatibility Plugins List: <a href="https://hidemywpghost.com/hide-my-wp-compatibility-plugins-list/" rel="nofollow ugc">Hide My WP Compatibility Plugins</a> 
Compatibility Theme List: <a href="https://hidemywpghost.com/hide-my-wp-ghost-compatibility-themes-list/" rel="nofollow ugc">Hide My WP Compatibility Themes</a>
Hosting Compatibility checked: WP Engine, Inmotion Hosting, Hostgator Hosting, Godaddy Hosting, Host1plus, Payperhost, Fastcomet, Dreamhost, Bitnami Apache, Bitnami Nginx, Google Cloud Hosting, Amazon AWS Lightsail, Litespeed Hosting, Flywheels Hosting, Kinsta Hosting, Ploi.io, CloudPanel, RunCloud
Being able to protect the common paths is critical because you get to keep hacker bots away from sensitive website data.
This is crucial, and it will provide you with a great experience and perfect results in the long term.
It will surely be worth it, not to mention that hiding the common paths will make hacking a lot harder as well.
If you don&#8217;t protect yourself, you will end up having a hacked website sooner or later.
This is a free version of the plugin, so you can use it for all your websites without any restrictions.
Secure your website in just minutes with the Hide My WP Ghost plugin. Protect your WordPress site against hacker bots and spammers!
Please support us and translate the plugin in your language: 
<a href="https://translate.wordpress.org/projects/wp-plugins/hide-my-wp" rel="nofollow ugc">https://translate.wordpress.org/projects/wp-plugins/hide-my-wp</a>
Thank you all for your trust, support, and positive reviews!
Important! This is not the Hide My WP Nulled version of the Hide My WP Codecanyon plugin.
Ready To Protect Your Website From Hackers With The Most USER-FRIENDLY WordPress Security Plugin?

Alternative Plugins for

Discover the Lists with Hide My WP Ghost – Security & Firewall

Fresh WordPress Install

WasGehtIn Essentials

Incubation

updated basic install

namaroopa before migrate

vol intsall

startup

Credit Platform

Favorites

exp