Password Protect WordPress Pro

The password closes the page, not the PDF it links to

You set up a training area, add a password and check that nobody gets in without it. Inside there is a PDF manual. Anyone who has entered once can copy the file's address and pass it on, and that address opens the document without asking anything.

Protecting a page and protecting what it contains are two different jobs. Password Protect WordPress Pro takes care of the first one: it controls who sees pages, posts, sections or the entire site without forcing anyone to create an account. Media files stay reachable through their direct URLs, and it is worth planning for that from the start.

Passwords you can work with

• No limit on passwords: random or written by you, managed from one place.
• Expiry: they lapse after a preset time or number of uses.
• Master passwords: they unlock all already protected content at once.
• Role passwords: they work only for the WordPress roles you authorize.
• Quick Access Links: they give way to the content without typing anything, using an automatically generated address and token.
• Customizable form: you adapt the look of the screen where the password is entered.

How much content you can close at once

Protection works at several scales. You can close a section within a page, a single post, several pages of any content type, categories, parent-child page hierarchies, custom fields or templates. It also covers custom post types, including WooCommerce products.

In sitewide mode you can create several passwords, exclude specific pages and redirect to a URL after a correct entry. It integrates with Elementor, Divi, Beaver Builder and WP Bakery.

That range covers uses such as training materials, online seminars, restricted events, sites under development or private extranets.

Watch out for files, cache and extensions

Files: uploaded images and documents stay outside the protection. To block their direct URLs it integrates with Prevent Direct Access Gold, a separate plugin.

Cache: a stored copy of a protected page can skip the password prompt. Review this before publishing. Avoid caching the protected site in full.

Extensions: group protection, access levels and usage statistics with user, IP, browser and time are Pro extensions. Do not assume they are in the base plugin.

Identity: a shared password identifies whoever knows it, and nothing more. If you need individual accounts, this does not replace a membership system.

How to get it running

Pro needs the free version to work, so both must stay installed.

1. Install and activate the Lite version and then Pro.
2. In the settings, set how long access lasts without retyping the password. The default is 7 days and the maximum is 365.
3. Protect a test page and create a password with an expiry.
4. Open it in a private window, enter the password and repeat from another browser to check that the cache does not skip it.
5. Copy the direct URL of an attached file and open it without a password, to learn what stays exposed.

When what you close is more specific

If you work by category, Password Protected Categories protects them by password, role or user. For a shop, WPC Advanced Password Protect focuses on WooCommerce and restricts the whole store, single products or groups such as categories, tags and brands.

Situations with visitors and passwords

Do visitors need an account?

Not for global passwords, which anyone who knows them can use. Role passwords do require the authorized role.

Does it protect PDFs and images?

Not on its own. Their direct URLs stay reachable, and the integration with Prevent Direct Access Gold exists to close them.

What happens if I unprotect a page?

In Pro it becomes public and keeps its passwords.

Can I protect only part of a page?

Yes, partial protection covers content sections.

How long does access last?

Whatever you set in the settings. The default is 7 days and the maximum is 365.

Can I delete the free version after activating Pro?

Do not delete it: Pro needs it to work properly.