Is There a Way to Hide My WordPress Site?
WP Ghost hides WordPress from bots and scanners by changing paths, removing fingerprints, and blocking detectors. One-click setup in under 3 minutes. Free features.
WP Ghost hides WordPress from bots and scanners by changing paths, removing fingerprints, and blocking detectors. One-click setup in under 3 minutes. Free features.
WP Ghost changes 30+ WordPress paths, removes CMS fingerprints, and simulates a different CMS. No coding needed. Activate Ghost Mode and your WordPress identity is hidden.
Hide your WordPress site during development with noindex settings and maintenance mode. Install WP Ghost before launch for day-one security. Pre-launch checklist inside.
WP Ghost changes the plugins directory path and randomizes individual plugin names in the page source. Detectors like BuiltWith and Wappalyzer cannot identify your plugins.
Go to WP Ghost > Change Paths > Ajax Security and set a custom path. The default admin-ajax.php returns 404 for bots. All AJAX features keep working.
Change the wp-content path with WP Ghost (no file changes) or manually via FTP. WP Ghost is safer, reversible, and adds security. Both methods explained inside.
Change your WordPress login URL with WP Ghost in one step. Enter a custom name, save, and the old wp-login.php returns 404. Free feature. Full setup guide inside.
Yes. WP Ghost changes wp-admin to a custom path using rewrite rules. No files are modified. Bots get 404 for the default path. Free feature with full guide.
WP Ghost hides wp-admin on Nginx with one config include and a reload. No shell access? Use the Minimal preset for login, firewall, 2FA without config changes.
Run the built-in Security Check, inspect your page source, and test with WhatCMS.org or BuiltWith. If WordPress is still detected, here is how to fix it.
Yes. WP Ghost hides wp-admin from bots and non-logged-in visitors. Logged-in administrators keep access as a safety net. You can restrict it to admins only.
XML-RPC enables brute force amplification (1,999 attempts per request) and DDoS attacks. WP Ghost disables it with one toggle. Most modern sites don’t need it.
No. WP Ghost does not change your FTP directory structure. All files stay in their original locations. Only HTTP paths are changed through virtual rewrite rules.
WP Ghost never moves or renames files. Your FTP directory structure stays standard. Path changes happen at the URL level through rewrite rules. Fully reversible.
For most sites, yes. XML-RPC enables brute force amplification and DDoS attacks. WP Ghost disables it with one toggle. Keep it for Jetpack with IP restrictions.
WP Ghost is tested with 25+ cache plugins including WP Rocket, LiteSpeed Cache, and W3 Total Cache. Enable Change Paths in Cached Files and clear cache. Full setup guide.
Expected behavior. WP Ghost hides the admin path from non-logged-in visitors. Log in through your custom login URL first, then the admin path works normally.
WP Ghost fully supports hiding wp-admin on Nginx. Add one include line to your server block and reload. No shell access? Use the Minimal preset. Setup guide inside.
No. WP Ghost writes rewrite rules to .htaccess automatically. Manual editing is only needed if the file is not writable. Here is how to handle both situations.
WP Ghost works with any permalink structure, including Plain. But Post Name permalinks give better SEO and full path security. How to switch and why it matters.
Check your WP Ghost Dashboard for the saved URL. Or use the Safe URL parameter, disable via FTP, or add HMWP_DISABLE to wp-config.php. Four recovery methods.
WP Ghost fully supports Multisite with subdomain and subdirectory structures. Network-activated, configured once, applies to all subsites. Counts as one license.