Hide My WP Ghost
Buy Now

Search: safe mode

180 results

How to Set Up WP Ghost in Safe Mode in 3 Minutes - Quick Start Guide

… ChangesNext Steps After Safe Mode SetupFrequently Asked QuestionsWhat is the difference between Safe Mode and Ghost Mode?Can I use a security preset instead of configuring manually?Does this work on Nginx servers?Does this work with WooCommerce?Does WP Ghost modify WordPress core files?

Set up WP Ghost in Safe Mode in under 3 minutes. Select Safe Mode, customize your login path, enable the firewall and security headers, run a Frontend Login Test, and save your login URL and Safe URL for emergency recovery.

Watch the Setup Video

This video walks through the complete Safe Mode setup on an …

June 17, 2024

Safe Mode vs Ghost Mode in WP Ghost - Which Security Level to Choose

… feature is presented in detail. View on new site

Quick summary: Safe Mode changes the most commonly targeted WordPress paths with zero risk of compatibility issues. Ghost Mode changes everything Safe Mode does, plus wp-admin and admin-ajax.php, and activates additional security features. Both are free. Start with Safe Mode, upgrade to Ghost Mode after testing.

What Are Security Levels

WP Ghost has three security levels: Default (no protection, all original paths accessible), Safe Mode (changes core paths while keeping wp-admin and admin-ajax.php unchanged for maximum compatibility), and Ghost Mode (changes all paths including wp …

May 21, 2019

WP Ghost Free vs Premium - Full Feature Comparison

… advanced hardening for high-security requirements.

Can I upgrade from free to Premium without losing settings?

Yes. Deactivate the free version, install Premium, enter your license token. All existing settings are preserved in the database.

Are both Safe Mode and Ghost Mode free?

Safe Mode is free. Ghost Mode is a Premium feature. Both use the same path-changing engine — Ghost Mode adds wp-admin and admin-ajax.php path changes plus auto-enabled firewall and security headers.

Why Has Elementor Stopped Working with WP Ghost Safe or Ghost Mode?

Moved

This tutorial has moved to the new WP Ghost Knowledge Base where each feature is presented in detail.

View on new site

Elementor relies on the REST API, admin-ajax.php, and the wp-admin path to load its editor. When WP Ghost changes these paths in Safe Mode or Ghost Mode, Elementor may lose access to them if your server configuration, cache, or other settings are not updated to match. Here is how to fix it step by step.

Check Your Server Type (Nginx Users)

If your server runs Nginx, path changes require a manual update to the …

8G Firewall Protection for WordPress - How to Enable in WP Ghost

… other without conflict.

WP Ghost automatically whitelists major search engine crawlers (Googlebot, Bingbot, Yandex, and others) when the 8G Firewall is active. Your SEO and indexing are unaffected.

How to Enable the 8G Firewall

Step 1: Activate a Security Level

Go to WP Ghost > Change Paths > Level of Security. Select Safe Mode or Ghost Mode and click Save.

Step 2: Enable the 8G Firewall

1. Go to WP Ghost > Firewall.

2. Switch on Firewall Against Script Injection.

3. Select 8G Firewall from the firewall level options.

4. On Apache servers: choose whether to place rules in .htaccess (fastest – blocks before …

April 16, 2024

Prevent 404 Errors After Deactivating WP Ghost - Redirect Rules for Apache and Nginx

Moved

This tutorial has moved to the new WP Ghost Knowledge Base where each feature is presented in detail.

View on new site

Table of ContentsWhy 404 Errors Happen After Deactivating WP GhostBefore You Deactivate – Consider This FirstFix for Apache and LiteSpeed ServersFix for Nginx ServersHow Long to Keep the Redirect RulesHow to Find Your Custom PathsFrequently Asked QuestionsWill deactivating WP Ghost automatically remove the custom paths?Do I need redirect rules if I only used Safe Mode?Can I just reactivate WP Ghost instead of adding redirect rules?Will this affect my SEO?What if I used custom plugin …

March 22, 2024

Fix PDFs and Iframes Not Loading in WordPress - X-Frame-Options Guide

… Google Maps send their own permissive X-Frame-Options headers. They explicitly allow other sites to embed their content. The issue only appears when the external service sends a restrictive header or when your own X-Frame-Options header blocks the embedding direction.

Does this problem only happen in Ghost Mode?

No. It happens whenever security headers are enabled, regardless of the security level. Ghost Mode enables security headers by default, which is why users notice it more in that mode. But if you manually enable headers in Safe Mode or any other level, the same rules apply.

Will changing …

January 15, 2024

How to Enable .htaccess in OpenLiteSpeed for WP Ghost Path Security

… installations, the path may be different. Check your OpenLiteSpeed installation directory if the command above does not work.

Step 4 – Configure WP Ghost and Verify

Now that OpenLiteSpeed reads .htaccess files, configure WP Ghost as you would on any Apache server.

8. Go to WP Ghost > Change Paths.

9. Select Safe Mode or Ghost Mode (Premium).

10. Customize your paths and click Save. WP Ghost writes the rewrite rules to .htaccess automatically.

11. Click the Frontend Login Test to verify your new login path works.

12. Open your site in an incognito browser and confirm the old paths return 404 …

January 15, 2024

Why Style & Buttons Are Not Working With Hide My WP?

… to regenerate its rewrite rules, which can resolve path-related issues.

Frequently Asked Questions

Will reverting WP Ghost to Safe Mode fix the styling issue immediately?

Yes. Switching to Safe Mode (the default security level) disables all custom path changes and returns your site to standard WordPress paths. If the styling issue disappears in Safe Mode, the problem is related to one of the path or mapping settings. You can then re-enable features one at a time to pinpoint the cause. If you’re locked out entirely, use the emergency disable method to regain access.

Do I need …

What Is the WP Ghost Security Plugin for WordPress?

… and priority support. For a full breakdown, see the Free vs Premium comparison.

Getting Started

Install WP Ghost from the WordPress plugin directory or upload it through Plugins > Add New in your dashboard. After activation, go to WP Ghost > Change Paths and load one of the four security presets: Minimal, Safe Mode + Compatibility, Safe Mode + Full Protection, or Ghost Mode + Full Protection. The Safe Mode + Compatibility preset is recommended for most sites. Customize your login path, clear your cache, and run the Security Check to verify everything works. The entire setup takes under five minutes. See the WP Ghost Tutorial …

How Do I Make My WordPress Site Invisible?

… your theme, and often your exact versions. From there, they look up known vulnerabilities and attack.

WP Ghost changes all of these paths so bots find nothing. Here’s how to set it up:

Step 1 – Activate a Security Level

Go to WP Ghost > Change Paths > Level of Security. Select Safe Mode for basic path changes, or Ghost Mode for maximum protection. Click Continue to load the predefined custom paths. Ghost Mode changes all core paths automatically and is the recommended choice for sites that want to be fully invisible to detectors.

Step 2 – Customize Paths (Optional)

WP Ghost fills …

How to Use WP Ghost on Nginx Hosting Without Editing Config Files

… that does not work, use the emergency disable guide or add the constant in wp-config.php to disable WP Ghost temporarily.

Want full path security on Nginx later

If you later get access to nginx.conf (for example, by upgrading to a VPS or dedicated server), you can enable Safe Mode or Ghost Mode for full path renaming. See the Setup WP Ghost on Nginx Server guide for complete Nginx rewrite rule instructions.

Frequently Asked Questions

Is WP Ghost still effective without path rewriting?

Yes. Custom login paths, brute force protection, the 7G/8G firewall, 2FA, security headers, and …

November 8, 2023

What Is the Best Plugin for Cloaking WordPress?

… that gets past the cloaking, like targeted manual attacks or zero-day exploits.

How to Set Up WordPress Cloaking with WP Ghost

Install WP Ghost from the WordPress plugin directory or upload it through Plugins > Add New. After activation, go to WP Ghost > Change Paths and select a security level. Safe Mode changes the most critical paths with tested compatibility settings. Ghost Mode changes all paths for maximum cloaking. Both options can be loaded as one-click presets that configure everything automatically. Customize your login path, clear your cache, and run the Security Check at WP Ghost > Security Check to …

How Do I Hide the Theme Name in WordPress?

… fingerprint that any scanner can read with a single request. Hiding the theme name means removing all of these signals from your site.

How to Hide the Theme Name with WP Ghost

WP Ghost offers six layers of theme protection. For complete theme hiding, enable them all. Start by activating Safe Mode or Ghost Mode at WP Ghost > Change Paths > Level of Security, then configure the theme-specific options.

Change the themes path. Go to WP Ghost > Change Paths > Themes Security. Enter a custom name in the Custom Themes Path field. This replaces the keyword in your URLs, so becomes …

How Do I Hide My WordPress Site from the Public?

… better approach.

Why Should I Install WP Ghost Before My Site Goes Live?

Bots start scanning new domains within hours of registration. Even if your site has no traffic and isn’t linked anywhere, automated scanners will find it and probe for default WordPress paths like , , and . If those paths respond, bots know you’re running WordPress and start looking for vulnerabilities.

Installing WP Ghost during development means your site is protected from day one. Go to WP Ghost > Change Paths > Level of Security and select Safe Mode or Ghost Mode. WP Ghost changes all default WordPress paths to custom

How to Set Up Plesk to Work as Apache for WP Ghost Path Security

… the Server Type option.

4. Select Apache from the dropdown.

5. Click Save.

WP Ghost now writes all its path security and firewall rules to the .htaccess file, which Apache reads for every incoming request.

Step 3 – Activate Path Security and Verify

1. Still in WP Ghost > Change Paths, select Safe Mode or Ghost Mode (Premium).

2. Customize your paths as needed and click Save.

3. Click the Frontend Login Test to verify your new login path loads correctly.

4. Open your site in an incognito browser and confirm the old paths (like /wp-admin/ and /wp-login.php) return …

June 30, 2023

How Do I Hide My WordPress Site from Hackers and Bots?

Moved

This tutorial has moved to the new WP Ghost Knowledge Base where each feature is presented in detail.

View on new site

To hide your WordPress site from bots, scanners, and theme detectors, you need to change the default paths, remove CMS fingerprints from the HTML source, and block access to common WordPress files. WP Ghost does all of this in a single plugin with 115+ free features. After configuration, tools like BuiltWith, Wappalyzer, and IsItWP cannot identify your site as WordPress.

What “Hiding WordPress” Actually Means

Hiding your WordPress site does not mean making it invisible to visitors …

Why Doesn't My Theme Layout Load After Using WP Ghost?

Moved

This tutorial has moved to the new WP Ghost Knowledge Base where each feature is presented in detail.

View on new site

If your theme layout breaks or CSS/JS files fail to load after activating Safe Mode or Ghost Mode in WP Ghost, the issue is almost always a server configuration problem or a stale cache. The new paths need to be recognized by your server before they can serve files correctly. Here is how to diagnose and fix it.

Step 1: Clear All Cache

This is the most common cause and the easiest fix. When WP Ghost …

Is My Website Loading Slower with WP Ghost?

… Ghost > Tweaks so that cached pages already contain the new paths.

Does WP Ghost Work Well with Caching Plugins?

Yes. WP Ghost is compatible with all major caching plugins, including WP Rocket, LiteSpeed Cache, W3 Total Cache, WP Super Cache, Breeze, Hummingbird, and Autoptimize. The path changes happen before the caching plugin stores the page, so cached versions already contain the new paths. Visitors receive the cached page with no additional processing from WP Ghost.

After saving any WP Ghost path changes, always clear your cache so the caching plugin regenerates pages with the new paths. For a detailed …

7G Firewall for WordPress - Server-Level Protection with WP Ghost

… millions of sites for years. Its ruleset is thoroughly vetted and extremely stable. If your priority is reliability over cutting-edge coverage, 7G delivers proven protection.

Feature 7G Firewall 8G Firewall (Recommended) SQL injection blocking Yes Yes, with updated patterns Script injection and XSS Yes Yes, with updated patterns Directory traversal Yes Yes File inclusion exploits Yes Yes Bad bot blocking Yes Yes, with expanded list False positive rate Low Lower (refined rules) Modern attack patterns Up to 2021 Updated for 2024-2026 Best for Fallback when 8G conflicts All sites (recommended)

How to Activate the 7G Firewall in …

March 3, 2023

Why Can't I Login to WordPress via wp-admin?

Moved

This tutorial has moved to the new WP Ghost Knowledge Base where each feature is presented in detail.

View on new site

If you can’t access your WordPress dashboard through the usual /wp-admin path, it’s almost certainly because WP Ghost is doing its job. The plugin hides the default wp-admin and wp-login.php paths so bots can’t find them. You need to use your custom login URL instead. This guide explains what happened, how to find your custom path, how to disable the hiding if you prefer, and what to do if you …

How Do I Disable XML-RPC in WordPress?

Moved

This tutorial has moved to the new WP Ghost Knowledge Base where each feature is presented in detail.

View on new site

Go to WP Ghost > Change Paths > API Security, switch on Disable XML-RPC Access, and click Save. That is it. The xmlrpc.php file will return a 404 error for all requests, blocking brute force amplification attacks, pingback DDoS abuse, and username enumeration through this endpoint.

Why You Should Disable XML-RPC

XML-RPC is WordPress’s legacy remote communication protocol. It was built before the REST API existed and is rarely needed on modern sites. The …

How to Protect Your WordPress Website from Hackers

… WordPress application running on it. WP Ghost works through three pillars of prevention. First, path security: it changes every default WordPress path so bots can’t identify your site as WordPress. Second, firewall filtering: the 8G firewall blocks SQL injection, script injection, and malicious payloads at the server edge. Third, login security: brute force protection with reCAPTCHA and two-factor authentication (including passkeys with Face ID, Touch ID, and Windows Hello) ensure stolen passwords aren’t enough.

WP Ghost includes 115+ free features covering path security, 7G/8G firewall, brute force protection, 2FA, security headers, and hardening options. On …

Does HMWG work with Elementor Custom Icons?

… config after any path change in WP Ghost. See the Nginx setup guide for details. Third, try uploading the same icon package on a site without WP Ghost. If the icons are still blank, the issue is the icon font generator or the Elementor upload process, not WP Ghost.

If you are using the Hide WordPress Common Paths feature in WP Ghost and have hidden specific file extensions, make sure you are not blocking font file extensions like .woff, .woff2, .ttf, .eot, and .svg. These are required for custom icon fonts to load.

Frequently Asked Questions

Does WP Ghost …

How to Set Up WP Ghost on Ploi.io Hosting - Nginx Setup Guide

… click Install then Activate. For the full installation guide, see Install WP Ghost.

2. Go to WP Ghost > Change Paths.

3. Select Safe Mode (recommended for first-time setup) or Ghost Mode (Premium).

4. Customize your paths as needed.

Step 2 – Create the hidemywp.conf File

5. Before saving WP Ghost settings, go to the Ploi.io panel and open the File Manager for your website.

6. Create an empty file named hidemywp.conf in the website root directory (the same folder that contains wp-config.php).

7. Go back to WP Ghost and click Save. WP Ghost detects …

February 7, 2022

How to Set Up WP Ghost on WPMUDEV Hosting - Nginx Setup Guide

… Select Safe Mode (recommended for WPMUDEV) or Ghost Mode (Premium).

3. Customize your paths as needed.

4. Click Save. WP Ghost generates the hidemywp.conf file with all the necessary Nginx rewrite rules.

Step 2 – Download the hidemywp.conf File

5. Go to your website’s root directory using your hosting File Manager or sFTP.

6. Download the hidemywp.conf file. This file is located in the same directory as wp-config.php.

Step 3 – Send the File to WPMUDEV Support

7. Open a support ticket with WPMUDEV support.

8. Attach the hidemywp.conf file and ask them to …

January 20, 2022

Is WP Ghost Compatible with Kinsta Hosting?

Moved

This tutorial has moved to the new WP Ghost Knowledge Base where each feature is presented in detail.

View on new site

Yes, WP Ghost is compatible with Kinsta hosting. Kinsta uses Nginx servers, so full path rewriting requires Kinsta’s support team to add a config file on your behalf. Many WP Ghost users run on Kinsta successfully. This guide explains the full setup process and also covers an alternative approach if you prefer not to contact support.

Why Does Kinsta Require Extra Setup for WP Ghost?

Kinsta is a managed WordPress hosting provider that runs on Nginx …

Can I Create Custom CMS Footprints in WP Ghost?

Moved

This tutorial has moved to the new WP Ghost Knowledge Base where each feature is presented in detail.

View on new site

WP Ghost’s CMS Simulator includes Drupal and Joomla as built-in options. You can also set a custom generator name using a WordPress filter, but for best results, the name should match a real CMS that detection tools already recognize. A completely invented name won’t fool scanners because they only identify CMS platforms that exist in their databases.

How CMS Detection Works (and Why Custom Names Have Limits)

CMS detectors like BuiltWith, Wappalyzer, and WhatCMS …