Does WP Ghost Work Without Custom Permalinks?

Yes, WP Ghost works with any permalink structure, including the “Plain” (default) setting that uses post IDs like ?p=123. However, for both SEO and security, we recommend switching to the “Post Name” permalink structure. Here’s why it matters and how to change it.

Does WP Ghost Work with Plain Permalinks?

Yes. WP Ghost’s core features work regardless of your permalink setting. Custom login paths, brute force protection, the 7G/8G firewall, two-factor authentication, security headers, and all hardening features function normally with any permalink structure. The plugin doesn’t depend on pretty permalinks to operate.

That said, WP Ghost’s path-hiding features (changing wp-content, wp-includes, plugins, themes paths) work best when your server supports URL rewriting, which is the same capability that powers custom permalinks. If your server supports pretty permalinks, it supports WP Ghost’s full feature set.

Why Should I Switch to Post Name Permalinks?

The “Plain” permalink structure (?p=123) is the WordPress default, but it’s the weakest option for both SEO and security.

SEO impact: Search engines prefer descriptive URLs. A URL like yourdomain.com/wordpress-security-guide/ tells Google what the page is about before it even reads the content. A URL like yourdomain.com/?p=247 tells Google nothing. Descriptive URLs also get more clicks in search results because users can see what they’re clicking on.

Security impact: Plain permalinks use query strings (?p=), which bypass URL rewrite rules entirely. This means WP Ghost’s server-level path changes are less effective because the server processes query-string URLs differently than path-based URLs. With “Post Name” permalinks, every URL goes through the rewrite engine, giving WP Ghost full control over path security.

How Do I Change My Permalink Structure?

Go to Settings > Permalinks in your WordPress dashboard. Select “Post Name” (the option that shows /%postname%/). Click Save Changes. WordPress generates the necessary rewrite rules automatically.

Important: If your site already has indexed pages with the old ?p= URLs, WordPress handles the redirects automatically. Old URLs will redirect to the new pretty URLs. If you have an established site with external links pointing to the old format, consider setting up a redirect plugin to ensure all old URLs resolve correctly.

After changing your permalink structure, go to WP Ghost > Change Paths and click Save to regenerate WP Ghost’s rewrite rules for the new URL structure. Then clear any cache you’re running.

Frequently Asked Questions

Will changing my permalink structure break existing links?

WordPress handles 301 redirects from old plain URLs to new pretty URLs automatically. If you have an established site, verify the redirects are working by testing a few old URLs in a private browser. For extra safety, install a redirect monitoring plugin before making the switch.

My hosting doesn’t support pretty permalinks. Can I still use WP Ghost?

Yes. WP Ghost’s security features (custom login, brute force, firewall, 2FA, security headers) work without pretty permalinks. Path-hiding features require URL rewrite support, but most modern hosting (Apache with mod_rewrite, LiteSpeed, Nginx) supports it. If your hosting doesn’t, contact your provider to ask about enabling it.

Does WP Ghost modify WordPress core files?

No. WP Ghost uses server rewrite rules and WordPress filters. No core files are modified. Deactivating WP Ghost restores all defaults instantly, regardless of your permalink setting.