Ideal Hide My WP Ghost Settings – Best Practice 2026
November 16, 2021

Set up WP Ghost in under 4 minutes: load the Ghost Mode preset, then adjust each section in the order the video shows.
VIDEO OUTLINE
- Min. 0:13 – 0:44: Load Ghost Mode Preset (Instant Setup)
- Min. 0:45 – 1:16: Fine-Tune Change Paths
- Min. 1:17 – 1:40: Tweaks, Hide, and Disable Options
- Min. 1:41 – 2:13: Mapping (Hide from Theme Detectors)
- Min. 2:14 – 2:27: Firewall Settings (Firewall Strength: 2026 Ghost Firewall)
- Min. 2:28 – 2:44: Brute Force Protection
- Min. 2:45 – 3:07: Two-Factor Authentication (2FA)
- Min. 3:08 – 3:22: Events Log (Cloud Monitoring)
- Min. 3:23 – 3:44: Security Check
👉 Min. 0:13 – 0:44: Load Ghost Mode preset
Recommended Actions:
- Go to WP Ghost > Backup/Restore and click Backup Settings to save your current settings.
- In WP Ghost > Change Paths > Level of Security, under Preset Security, select the preset that starts with Ghost Mode and click Load Preset to apply the Ghost Mode settings in one step.
👉 Min. 0:45 – 1:16: Fine-tune Change Paths
Admin Security
- Custom Admin Path – Change to something unique (e.g., custom-admin).
- Hide wp-admin – Recommended: ON
Login Security
- Custom Login Path – Create a secure path (e.g., custom-login).
- Hide wp-login.php – Recommended: ON
👉 Min. 1:41 – 2:13: Mapping (path security)
Change the theme and plugin names that scanners read in your page source.
- Text Mapping: replace the CSS class names that theme detector bots match on.
- URL Mapping: change the file URLs in your source code.
- CDN Support: add your CDN domain so WP Ghost changes the paths in CDN URLs too.
👉 Min. 3:23 – 3:44: Security Check
Recommended Actions:
- Click Start Scan to run the WordPress security check.
- Review the Action Items and follow the instructions to reach a 100% optimization score.
Note
👋 How to Fix 403 Forbidden Error caused by mod_security
If your host uses ModSecurity rule #212340, it may prevent the Code Editor from working in Ghost Mode. If you encounter a 403 error, ask your host to whitelist Rule 212340 for your account.