Does WP Ghost Work on WordPress Multisite?

Moved

This tutorial has moved to the new WP Ghost Knowledge Base where each feature is presented in detail.

View on new site

Yes. WP Ghost fully supports WordPress Multisite. It works with both subdomain and subdirectory configurations. You install and configure WP Ghost once at the network level through Network > Plugins, and the security settings apply across all subsites. A Multisite network counts as one site for licensing purposes.

How Does WP Ghost Work on Multisite?

WP Ghost is network-activated through Network > Plugins. Once activated, you configure it from the Network Admin dashboard. All security settings (path changes, firewall, brute force, 2FA, security headers) apply across every subsite in the network. You don’t need to configure each subsite individually.

Path changes apply network-wide. When you change /wp-admin/ to a custom path, that custom path works on every subsite. The same applies to login paths, wp-content, plugins, themes, and all other configurable paths. This is especially valuable on Multisite networks because every subsite shares the same WordPress installation files, so one configuration protects the entire network.

Which Multisite Structures Are Supported?

WP Ghost works with both WordPress Multisite structures:

Subdirectory Multisite (yourdomain.com/site1/, yourdomain.com/site2/): All subsites share the same domain with different paths. WP Ghost’s rewrite rules handle the path prefixes correctly.

Subdomain Multisite (site1.yourdomain.com, site2.yourdomain.com): Each subsite has its own subdomain. WP Ghost’s rewrite rules apply at the server level and cover all subdomains.

Both structures work on Apache, LiteSpeed, Nginx, and IIS servers.

What About Licensing on Multisite?

A Multisite network counts as one site for WP Ghost licensing, regardless of how many subsites it contains. Since WP Ghost is activated and configured at the network level (not per-subsite), you only need one license for the entire network.

Frequently Asked Questions

Can individual subsite admins change WP Ghost settings?

No. WP Ghost settings are managed at the Network Admin level by Super Admins only. Individual subsite administrators don’t see WP Ghost in their dashboard. This prevents subsite admins from accidentally disabling security for the entire network.

Does the activation path change apply to all subsites?

Yes. When you change the wp-activate.php path, the new path applies network-wide. All subsites use the custom activation URL for new user registrations. Existing pending activation links continue working through internal redirects.

Does WP Ghost work with domain mapping on Multisite?

Yes. WP Ghost is compatible with WordPress MU Domain Mapping and other domain mapping plugins. Custom domains mapped to subsites use the same WP Ghost security settings as the rest of the network.

Does WP Ghost modify WordPress core files?

No. WP Ghost uses server rewrite rules and WordPress filters. No core files are modified on any subsite or at the network level. Deactivating WP Ghost from Network > Plugins restores all default paths across every subsite instantly.