# Hide My WP Ghost > Hide My WP Ghost protects 250,000+ WordPress sites from hackers. Hide your WordPress, block brute force, prevent SQL injection. Rated 4.8★. This file is the curated index of hidemywpghost.com. For the complete content of every page in one file, see the companion `llms-full.txt`. Sections below group entry-point pages by intent; the `## Optional` section at the end contains specific reference material that can be skipped for shorter context. ## Start Here - [Hide My WP Ghost Pricing - WordPress Security From $29.99/yr](https://hidemywpghost.com/hide-my-wp-pricing/): Protect 1 to unlimited WordPress sites from $29.99/yr. Trusted by 250,000+ sites. 4.8★ on G2 & Capterra. 30-day money-back guarantee. Choose your plan. - [Affiliate - Hide My WP Ghost](https://hidemywpghost.com/hide-my-wp-affiliate/): Get ready to partner with one of the best WordPress security plugins. - [Hide My WP Ghost - WordPress Security Solution](https://hidemywpghost.com/): Hide My WP Ghost protects 250,000+ WordPress sites from hackers. Hide your WordPress, block brute force, prevent SQL injection. Rated 4.8★. - [Hide My WP Ghost - Knowledge Base](https://hidemywpghost.com/knowledge-base/): This knowledge base has moved to wpghost.com/kb with updated tutorials, step-by-step guides, and developer documentation. - [How to Hide wp-admin and wp-login.php from WordPress Source Code](https://hidemywpghost.com/hide-wpadmin-and-wplogin-php-from-source-code/): Remove wp-admin and wp-login.php from your WordPress source code using WP Ghost Admin Security and Login Security settings. - [How to Set .htaccess to Read-Only in WordPress for Better Security](https://hidemywpghost.com/how-to-change-htaccess-permission-to-read-only/): Learn how to set your .htaccess file to read-only (permission 444) on Linux and Windows servers to prevent malicious scripts from modifying your WordPress… - [Use WP Ghost with Zapier - XML-RPC Whitelist Configuration](https://hidemywpghost.com/hide-my-wp-ghost-and-zapier/): Configure WP Ghost to work with Zapier by whitelisting Zapier's User Agent while keeping XML-RPC disabled for the public. - [Move WordPress from HTTP to HTTPS and Strengthen with WP Ghost HSTS](https://hidemywpghost.com/how-to-move-wordpress-from-http-to-https/): Move your WordPress site to HTTPS with SSL, set up redirects, fix mixed content, then strengthen the connection with WP Ghost HSTS and security headers. - [Remove WordPress Generator META Tags and Version Numbers with WP Ghost](https://hidemywpghost.com/how-to-remove-generator-meta-wordpress/): Remove WordPress generator META, WPML META, Slider Revolution META, version parameters from CSS/JS, and DNS prefetch with one toggle in WP Ghost. - [WP Ghost vs WP Hide & Security Enhancer - Feature Comparison and Migration](https://hidemywpghost.com/hide-my-wp-ghost-vs-wp-hide-security-enhancer/): WP Ghost and WP Hide overlap on path security. WP Ghost covers everything WP Hide offers plus firewall, 2FA, brute force protection, and country blocking. - [Hide or Redirect Old WordPress Image Paths with WP Ghost](https://hidemywpghost.com/hide-the-old-image-paths-with-hide-my-wp-ghost/): Block access to old WordPress image URLs with 404 or redirect them to new paths. Includes the HMW_HIDE_OLD_IMAGES constant, IMAGE vs MEDIA file options, SEO… - [Hide All WordPress Common Paths and Files with WP Ghost](https://hidemywpghost.com/how-to-hide-all-the-wordpress-files-with-hide-my-wp/): WP Ghost changes and hides every common WordPress path in one plugin. Complete reference table of every path WP Ghost can change with links to individual… - [- Hide My WP Ghost](https://hidemywpghost.com/faqs/): Disable WP Ghost automatic update checks by adding WP_AUTO_UPDATE_HMWP to wp-config.php. Keep full control over when you update the plugin. - [Affiliate Terms - Hide My WP Ghost](https://hidemywpghost.com/affiliate-terms/): This agreement contains the complete terms of service and conditions that apply to your participation as a member of the Hide My WP Ghost Affiliate Program. - [Terms Of Use - Hide My WP Ghost](https://hidemywpghost.com/terms-of-use/): Table of Contents1. About WP Ghost2. Eligibility3. Accounts and Membership4. Licensing and Use of Products5. ## Getting Started - [How to Install and Set Up WP Ghost - Getting Started Tutorial](https://hidemywpghost.com/kb/hide-my-wp-ghost-tutorial/): Learn how to install WP Ghost on WordPress, activate Safe Mode or Ghost Mode, and customize your security paths to protect your site from hacker bots and… - [Is Hide My WP Ghost Easy to Use? (Setup in Under 3 Minutes)](https://hidemywpghost.com/faqs/is-hide-my-wp-ghost-easy-to-use/): Yes. WP Ghost goes from install to protected in under 3 minutes. One-click presets, no coding needed, safety nets for recovery. Full walkthrough inside. - [How Do I Set Up Two-Factor Authentication in WordPress?](https://hidemywpghost.com/faqs/how-do-i-set-up-two-factor-authentication-in-wordpress/): Set up 2FA in WordPress with WP Ghost using authenticator apps, email codes, or passkeys (Face ID, Touch ID). All three methods are free. Step-by-step guide. - [How Do I Install Security Plugins in WordPress? (Guide)](https://hidemywpghost.com/faqs/how-do-i-install-security-plugins-in-wordpress/): Learn how to install and configure a WordPress security plugin step by step. Covers plugin search, activation, settings, and hack prevention tips with WP Ghost. - [Why Has Elementor Stopped Working with WP Ghost Safe or Ghost Mode?](https://hidemywpghost.com/faqs/why-has-elementor-stopped-working-when-activating-safe-mode-or-ghost-mode/): Elementor editor broken after activating WP Ghost Safe Mode or Ghost Mode? Fix it by checking Nginx config, REST API, AJAX path, cache, and logged user… - [Set Up WP Ghost on Windows IIS Server - web.config Rewrite Rules](https://hidemywpghost.com/setup-hide-my-wp-on-windows-iis-server/): Configure WP Ghost on Windows IIS by adding rewrite rules to web.config. Requires IIS URL Rewrite module. - [How to Activate WordPress Debugging - Enable WP_DEBUG and Debug Log](https://hidemywpghost.com/how-to-activate-wordpress-debugging/): Enable WordPress debugging to log PHP errors to debug.log. Add WP_DEBUG, WP_DEBUG_LOG, and WP_DEBUG_DISPLAY to wp-config.php for troubleshooting, then disable… - [Grant a User Access to WP Ghost Settings (hmwp_manage_settings Capability)](https://hidemywpghost.com/how-to-setup-a-user-to-configure-hide-my-wp/): Give a specific WordPress user access to WP Ghost settings without full admin access. Use the hmwp_manage_settings capability via User Role Editor. - [Set Up WP Ghost on RunCloud - NGINX Hybrid and Native NGINX](https://hidemywpghost.com/setup-hide-my-wp-on-runcloud/): Configure WP Ghost on RunCloud with NGINX + Apache2 Hybrid (automatic) or Native NGINX (add hidemywp.conf include). - [How to Set Up Content Security Policy (CSP) in WordPress with WP Ghost](https://hidemywpghost.com/kb/content-security-policy-csp/): Add a Content Security Policy to WordPress with WP Ghost to block XSS attacks and data injection. Includes CSP examples for WordPress, directive reference… - [Install WP Ghost Premium - Download, Activate License, and Set Up Ghost Mode](https://hidemywpghost.com/hide-my-wp-how-to-install-the-plugin/): Install WP Ghost Premium from your account dashboard. Activate your license token, enable Ghost Mode for maximum path security, and run your first security… - [Lesson 2 - How to Activate Brute Force Protection in WP Ghost](https://hidemywpghost.com/how-to-activate-brute-force-protection/): Configure WP Ghost brute force protection with Math reCAPTCHA, Google V2, or V3. Set failed attempt limits, ban duration, lockout messages, and IP… - [WP Ghost with WP Rocket - File Combination, Cache Path Hiding, and CDN Setup](https://hidemywpghost.com/how-to-use-wp-rocket-with-hide-my-wp-ghost/): Configure WP Ghost with WP Rocket. Combine CSS/JS files, enable Change Paths in Cached Files, map the WP Rocket cache directory, and integrate with WP Rocket… - [How to Configure WP Ghost with Advanced Access Manager (AAM)](https://hidemywpghost.com/how-to-setup-hide-my-wp-ghost-with-advanced-access-manager/): WP Ghost works with Advanced Access Manager with one .htaccess adjustment. Update AAM media protection rewrite rules to match your WP Ghost custom uploads… - [How to Set Up WP Ghost in Safe Mode in 3 Minutes - Quick Start Guide](https://hidemywpghost.com/how-to-set-up-hide-my-wp-ghost-in-safe-mode-in-3-minutes/): Set up WP Ghost Safe Mode in under 3 minutes with recommended settings for path security, firewall, and security headers. - [Connect a New Website or Move Your WP Ghost Premium License](https://hidemywpghost.com/activate-a-new-website-with-hide-my-wp-ghost/): Connect new websites to your WP Ghost Premium license or move a license to a different site. Manage connected websites from your WP Ghost Dashboard. - [Cloud Panel Server - WP Ghost Setup Guide (Nginx Vhost Configuration)](https://hidemywpghost.com/setup-hide-my-wp-ghost-on-cloud-panel-server/): Step-by-step guide to configure WP Ghost on a Cloud Panel Nginx server. Set the server type, generate rewrite rules, and add the hidemywp.conf include to your… - [How to Set Up WP Ghost on Ploi.io Hosting - Nginx Setup Guide](https://hidemywpghost.com/setup-hide-my-wp-on-ploi-io/): Configure WP Ghost path security on Ploi.io hosting. Create the hidemywp.conf file, add the include directive in Ploi's Nginx editor, and verify your WordPress… - [Install WP Ghost Free Plugin - Setup Guide for WordPress](https://hidemywpghost.com/how-to-install-hide-my-wp-ghost-lite/): Install and set up WP Ghost free from WordPress.org. 115+ security features including path changes, 8G firewall, 2FA, and brute force protection. - [Set Up WordPress 2FA with Mobile Authenticator Apps - WP Ghost Guide](https://hidemywpghost.com/kb/setting-up-two-factor-authentication-2fa-for-wordpress-using-mobile-apps/): Connect WP Ghost 2FA to Google Authenticator, Authy, Microsoft Authenticator, or LastPass. Scan QR code, enter verification code, protect your WordPress login. ## Features - [WordPress Security Statistics 2025-2026: Vulnerabilities, Attacks, and Prevention Data](https://hidemywpghost.com/wordpress-security-statistics-2025-2026-vulnerabilities-attacks-and-prevention-data/): 11,334 WordPress vulnerabilities in 2025, 13,000 sites hacked daily, 5-hour exploitation window. Verified statistics on WordPress threats with Q1 2026 data… - [Features - Hide My WP Ghost](https://hidemywpghost.com/features/): WordPress security plugin with 7G/8G firewall, brute force protection, 2FA & passkeys. 150+ features, zero core file changes. - [Security Tweaks - Hide My WP Ghost](https://hidemywpghost.com/security-tweaks/): WordPress Security Tweaks Discover how Hide My WP Ghost helps you have a secure website! Features included in this section Hide WordPress for Logged Users Hide… - [Website Activity Log - Hide My WP Ghost](https://hidemywpghost.com/website-activity-log/): Monitor everything that happens on your WordPress site. - [Website Security Check - Hide My WP Ghost](https://hidemywpghost.com/website-security-check/): Discover how the Hide My WP Ghost plugin helps you verify your website’s security level! - [Brute Force Attack Protection in WP Ghost - Complete Setup Guide](https://hidemywpghost.com/kb/brute-force-attack-protection/): Learn how to protect your WordPress site from brute force attacks using WP Ghost. Set up Math reCAPTCHA, Google reCAPTCHA V2, V3, and Enterprise, protect… - [WP Ghost vs Wordfence vs Sucuri vs Solid Security (2026)](https://hidemywpghost.com/wp-ghost-vs-wordfence-vs-sucuri-vs-solid-security/): Honest comparison of WP Ghost, Wordfence, Sucuri, and Solid Security across 25 features. Which plugin for which job, plus recommended stacks. - [WP Ghost 9.0: Security Threats Log, Login Designer & GEO Map](https://hidemywpghost.com/hide-my-wp-ghost-9-0/): WP Ghost 9.0 is here: live Security Score, Security Threats Log, Login Page Designer, AI crawler blocking, GEO threat map, CSV log export, and dark mode. - [WordPress Security Statistics 2025–2026: 43 Verified Data Points - Hide My WP Ghost](https://hidemywpghost.com/wordpress-security-statistics-2025-2026-43-verified-data-points/): In 2025, 11,334 new WordPress vulnerabilities were recorded , a 42% increase year-on-year. - [WordPress Hack Prevention: The Complete 2026 Guide](https://hidemywpghost.com/wordpress-hack-prevention-the-complete-2026-guide/): How to prevent WordPress hacks in 2026. The three-layer prevention framework, attack types behind 90% of breaches, and how to reduce your attack surface. - [WordPress Hacked? 10-Step Recovery Guide (2026)](https://hidemywpghost.com/wordpress-hacked-10-step-recovery-guide-2026/): Your WordPress site is hacked. Here's the exact 10-step recovery process: isolate, clean, harden, and prevent reinfection. Works for any WordPress hack. - [WP Ghost Firewall and Geo Security - Complete Setup Guide](https://hidemywpghost.com/kb/firewall-geo-security/): Configure the WP Ghost firewall to block SQL injection, script injection, and exploit attacks. Set up the 8G Firewall, automate IP blocking, add security… - [Add Brute Force Protection to Elementor Login Forms with WP Ghost](https://hidemywpghost.com/integrating-brute-force-protection-in-elementor-login-forms/): Protect custom Elementor login forms from brute force attacks using the WP Ghost [hmwp_bruteforce] shortcode. - [How to Add Security Headers to WordPress with WP Ghost](https://hidemywpghost.com/how-to-implementing-website-security-headers/): Add seven security headers to WordPress with one click in WP Ghost. Protect against XSS, clickjacking, MIME sniffing, and protocol downgrades with HSTS, CSP,… - [How to Protect Your WordPress Website from Hackers - Complete Guide](https://hidemywpghost.com/how-to-protect-my-wordpress-website/): Learn how to protect your WordPress website using WP Ghost path security, 8G Firewall, brute force protection, 2FA, secure hosting, and a complete security… - [WordPress Hack Prevention: How to Stop Attacks Before They Start](https://hidemywpghost.com/wordpress-hack-prevention/): Learn how WordPress hacks actually happen and how to prevent them through Attack Surface Reduction. - [Advanced Text Mapping in WP Ghost - {blank} and {rand} Patterns](https://hidemywpghost.com/how-to-hide-my-wp-advanced-text-mapping/): Use WP Ghost {blank} to remove WordPress class names entirely or {rand} to replace them with random strings. - [How to Hide WooCommerce and Elementor Class Names in WordPress](https://hidemywpghost.com/hiding-plugins-like-woocommerce-and-elementor/): Replace WooCommerce and Elementor class names in HTML, CSS, and JS using WP Ghost Text Mapping so theme detectors can not identify your plugins. - [Safe Mode vs Ghost Mode in WP Ghost - Which Security Level to Choose](https://hidemywpghost.com/difference-between-safe-mode-and-ghost-mode-in-hide-my-wp/): Compare WP Ghost Safe Mode and Ghost Mode. Safe Mode changes core paths with zero compatibility risk. - [Lesson 4 - WP Ghost Events Log and Email Alerts](https://hidemywpghost.com/how-to-use-website-events-log/): Monitor user activity with WP Ghost's cloud-based Events Log. Track logins, settings changes, and plugin actions. Configure email alerts for security events. - [8G Firewall Protection for WordPress - How to Enable in WP Ghost](https://hidemywpghost.com/the-new-8g-firewall-protection-is-here/): Enable the 8G Firewall in WP Ghost to block SQL injection, script injection, XSS, and directory traversal at the server level before WordPress loads. - [WP Ghost with BBQ Firewall - Firewall Overlap and Configuration Options](https://hidemywpghost.com/hide-my-wp-ghost-with-bbq-firewall/): WP Ghost and BBQ Firewall both use nG-series rules to block SQL injection and XSS. WP Ghost's built-in 7G/8G firewall makes BBQ redundant. - [How to Verify Your WordPress Site Is Protected from Hackers and Theme Detectors](https://hidemywpghost.com/how-do-i-know-if-my-website-is-hidden-from-detectors-hackers/): Learn how to verify your WP Ghost configuration is working. Run the built-in Security Check, test with third-party scanners, and confirm your site is invisible… - [How to Protect Your WordPress Site from Hacker Bots and Theme Detectors](https://hidemywpghost.com/hide-wordpress-website-from-theme-detectors-or-against-hackers/): Learn why WordPress sites are targeted by hacker bots, how path security prevents attacks before they happen, and how WP Ghost protects your plugins, themes,… - [7G Firewall for WordPress - Server-Level Protection with WP Ghost](https://hidemywpghost.com/7g-firewall-for-wordpress/): Activate the 7G Firewall in WP Ghost to block SQL injection, script injection, XSS, and malicious bots at the server level before WordPress loads. - [Most Popular WordPress Theme Detectors and How to Hide from Them](https://hidemywpghost.com/most-popular-wordpress-theme-detectors/): Discover the most popular WordPress theme detectors, how they work, which ones to trust for testing, and how WP Ghost makes your site invisible to all of them… - [Prevent Hack Attacks on WordPress - Hide My WP Ghost](https://hidemywpghost.com/want-to-prevent-hack-attacks-on-wordpress/): Moved This tutorial has moved to the new WP Ghost Knowledge Base where each feature is presented in detail. - [How to Block Countries in WordPress with WP Ghost Geo Security](https://hidemywpghost.com/geo-security-country-blocking/): Block access to your entire WordPress site or specific paths like login and checkout from selected countries. - [How to Use URL Mapping in WP Ghost to Change Asset URLs](https://hidemywpghost.com/how-to-use-url-mapping-in-hide-my-wp/): Use WP Ghost URL Mapping to change specific CSS, JS, and asset URLs that standard path changes don't cover. - [Brute Force Protection - Hide My WP Ghost](https://hidemywpghost.com/brute-force-protection/): WordPress Brute Force Attack Protection Discover how Hide My WordPress Ghost helps you have a secure website! ## Compatibility - [Is WP Ghost Compatible with Kinsta Hosting? (Setup Guide)](https://hidemywpghost.com/faqs/is-hide-my-wp-ghost-compatible-with-kinsta-hosting/): Yes, WP Ghost works on Kinsta. Full path hiding requires Kinsta support to add one config file. Or use the no-config preset for instant protection without… - [WP Ghost with Really Simple SSL - htaccess Rule Order and Compatibility](https://hidemywpghost.com/hide-my-wp-and-really-simple-ssl/): WP Ghost is fully compatible with Really Simple SSL. Save Really Simple SSL first, then re-save WP Ghost to ensure correct .htaccess rule order. - [How to Set Up Plesk to Work as Apache for WP Ghost Path Security](https://hidemywpghost.com/how-to-setup-plesk-to-work-as-apache/): Configure Plesk to route all requests through Apache so WP Ghost can write .htaccess rules for path security and firewall protection. - [WP Ghost Hosting Exceptions - WordPress.com and Shared Nginx Limitations](https://hidemywpghost.com/hide-my-wp-ghost-exceptions/): WP Ghost works on all major servers and hosts with two exceptions. WordPress.com blocks login path changes. - [How to Set Up WP Ghost on Bitnami Servers (Apache and Nginx)](https://hidemywpghost.com/how-to-set-hide-my-wp-for-bitnami-servers/): Configure WP Ghost path security on Amazon Bitnami servers. Add rewrite rules to Bitnami's VirtualHost config (Apache) or server block (Nginx) for AWS, Google… - [WP Ghost Compatible Plugins List - 1,000+ Tested WordPress Plugins](https://hidemywpghost.com/hide-my-wp-compatibility-plugins-list/): Complete list of WordPress plugins tested and compatible with WP Ghost, including cache plugins, security plugins, WooCommerce, SEO, page builders, and more. - [How to Set Up WP Ghost on Nginx Server - Step-by-Step Guide](https://hidemywpghost.com/how-to-setup-hide-my-wp-on-nginx-server/): Configure WP Ghost path security on Nginx by including the generated hidemywp.conf file in your server block. - [Set AllowOverride All on Apache for WP Ghost (Ubuntu and CentOS)](https://hidemywpghost.com/how-to-set-allowoverride-all/): Enable AllowOverride All in Apache so WP Ghost .htaccess rewrite rules work. Step-by-step for Ubuntu/Debian and CentOS/RHEL with configtest safety check,… - [WP Ghost with LiteSpeed Cache - Configuration, QUIC.cloud CDN, and Path Rewriting](https://hidemywpghost.com/use-hide-my-wp-ghost-with-litespeed/): Configure WP Ghost with LiteSpeed Cache. Enable Change Paths in Cached Files for minified CSS/JS. Whitelist QUIC.cloud IPs for CDN connectivity in Ghost Mode. - [Set Up WP Ghost on Kinsta Hosting - Nginx Configuration via Support](https://hidemywpghost.com/kinsta-server-hide-my-wp-ghost-setup/): Configure WP Ghost on Kinsta by sending the hidemywp.conf file to Kinsta support. One-time setup with step-by-step instructions for backup, handoff to support,… - [WP Ghost with Wordfence Security - Compatible Configuration and Feature Comparison](https://hidemywpghost.com/hide-my-wp-and-wordfence/): WP Ghost and Wordfence are fully compatible. WP Ghost prevents attacks by changing paths and blocking bots. - [WP Ghost with Solid Security (iThemes) - Compatible Configuration](https://hidemywpghost.com/hide-my-wp-and-ithemes/): WP Ghost and Solid Security complement each other. WP Ghost handles path security and firewall prevention. - [WP Ghost with ManageWP - Must Use Plugin Loading Configuration](https://hidemywpghost.com/hide-my-wp-ghost-works-with-manage-wp/): Configure WP Ghost to work with ManageWP by setting Plugin Loading Hook to Must Use Plugin. Ensures WP Ghost does not block ManageWP worker communication. - [How to Set Up WP Ghost on WP Engine Hosting - Step-by-Step Guide](https://hidemywpghost.com/hide-my-wp-pro-compatible-with-wp-engine/): WP Ghost is fully compatible with WP Engine. Learn how to configure path security, add redirect rules in WP Engine's portal, clear cache, and verify your… - [WP Ghost on InMotion Hosting - Cache Manager Force Passthru Configuration](https://hidemywpghost.com/hide-my-wp-pro-compatible-with-inmotion-wordpress-hosting/): Configure WP Ghost on InMotion Hosting by setting the Force Passthru Path in the Nginx Cache Manager. - [How to Set Up WP Ghost on Flywheel Hosting - Step-by-Step Guide](https://hidemywpghost.com/how-to-setup-hide-my-wp-on-flywheel-server/): Learn how to configure WP Ghost path security on Flywheel hosting. Activate Safe Mode or Ghost Mode, add redirect rules to Flywheel's Redirect tool, clear… - [Set Up WP Ghost on Amazon AWS Lightsail (Bitnami WordPress)](https://hidemywpghost.com/how-to-setup-hide-my-wp-on-amazon-aws-lightsail/): Configure WP Ghost on AWS Lightsail Bitnami WordPress by enabling AllowOverride All or adding rewrite rules to httpd-app.conf. - [Set Up WP Ghost on Nginx Server - Include hidemywp.conf Configuration](https://hidemywpghost.com/how-to-configure-hide-my-wp-on-nginx-web-server-with-virtual-private-server/): Configure WP Ghost on Nginx by adding one include line to your server block. One-time setup with hidemywp.conf rewrite rules. - [Set Up WP Ghost on Local by Flywheel - Nginx Configuration Guide](https://hidemywpghost.com/how-to-setup-hide-my-wp-on-local-flywheel/): Configure WP Ghost on Local by Flywheel with Nginx. Select Local by Flywheel server type, add the include line to conf/nginx/site.conf.hbs, restart, and… - [How to Enable .htaccess in OpenLiteSpeed for WP Ghost Path Security](https://hidemywpghost.com/config-htaccess-in-openlitespeed-a-step-by-step-guide/): Enable .htaccess support in OpenLiteSpeed so WP Ghost can write path security and firewall rewrite rules. - [How to Use WP Ghost on Nginx Hosting Without Editing Config Files](https://hidemywpghost.com/how-to-use-hide-my-wp-ghost-with-nginx-hosting-without-editing-config-files/): Set up WP Ghost security on Nginx managed hosting without editing nginx.conf. Get custom login paths, firewall, brute force protection, 2FA, and security… - [How to Set Up WP Ghost on WPMUDEV Hosting - Nginx Setup Guide](https://hidemywpghost.com/wpmudev-server-hide-my-wp-ghost-setup/): Learn how to configure WP Ghost path security on WPMUDEV hosting. Generate the hidemywp.conf file, send it to WPMUDEV support for Nginx inclusion, and verify… - [WP Ghost Compatible Themes List - Tested WordPress Themes for 2026](https://hidemywpghost.com/hide-my-wp-ghost-compatibility-themes-list/): Complete list of WordPress themes tested and compatible with WP Ghost, including Astra, Avada, Divi, Flatsome, Woodmart, and more. ## Developer Reference - [How to Add Files to Hide WordPress Common Files in WP Ghost](https://hidemywpghost.com/how-to-add-files-to-hide-wordpress-common-files/): Add custom files like wp-cron.php, wp-trackback.php, or composer.json to WP Ghost's hidden files list using the hmwp_hide_commonfiles_files filter. - [How to Add a Custom Config File for WP Ghost on Nginx Servers](https://hidemywpghost.com/how-to-add-a-custom-config-file-for-nginx-servers/): If your Nginx server root is not writable, use WP Ghost's hmwp_config_file filter to store rewrite rules in a custom location. - [How to Disable WP Ghost for Specific User Roles in WordPress](https://hidemywpghost.com/disable-hide-my-wp-ghost-for-user-roles/): Disable WP Ghost path security for administrators, editors, or any WordPress user role using a simple code snippet. - [Customize WordPress Uploads Directory with WP Ghost (Virtual Path Method)](https://hidemywpghost.com/how-to-customize-wordpress-uploads-directory/): Change the WordPress uploads directory URL with WP Ghost using virtual rewrite rules. No file moving, no wp-config.php editing. - [Customize WP Ghost Cookie Name (HMWP_LOGGED_IN_COOKIE) in wp-config.php](https://hidemywpghost.com/how-to-customize-hmwp_logged_in_admin-hmwp_logged_in_login/): Change the default hmwp_logged_in cookie prefix in WP Ghost by adding the HMWP_LOGGED_IN_COOKIE constant to wp-config.php. - [How to Allow Right Click on Specific WordPress Pages with WP Ghost](https://hidemywpghost.com/how-to-customize-right-click-disable-for-specific-pages/): Customize WP Ghost's Disable Right Click feature to allow right-clicking on specific pages using the hmwp_option_hmwp_disable_click filter. - [How to Remove DNS Prefetch from WordPress for Better Security](https://hidemywpghost.com/how-to-remove-dns-prefetch-wordpress/): Remove the WordPress DNS prefetch link (s.w.org) from your site header to eliminate a CMS fingerprint. - [How to Redirect Logged-in Users to WordPress Admin Dashboard with WP Ghost](https://hidemywpghost.com/redirect-logged-users-to-admin-path-with-hide-my-wp-ghost/): Automatically redirect logged-in WordPress users to the admin dashboard when they visit the custom login page. - [How to Change or Remove the WordPress Login Logo Link](https://hidemywpghost.com/how-to-change-or-remove-login-logo-link/): Change the WordPress login page logo link to your homepage or remove it entirely using login_headerurl and login_headertext filters. - [How to Force Login and Redirect Visitors to WordPress Login Page](https://hidemywpghost.com/how-to-redirect-visitors-to-login-force-login-page-2/): Redirect all visitors to the WordPress login page to create a private, login-only website. Use WP Ghost built-in redirects, a template_redirect hook, or block… - [How to Change the wp-content Directory in WordPress for Better Security](https://hidemywpghost.com/how-to-customize-wp-content-directory-in-wordpress/): Change the default /wp-content/ path to a custom name using WP Ghost (virtual, safe) or wp-config.php (physical rename). - [WP Ghost Admin Mapping - Customize WordPress Admin URL Parameters and Text](https://hidemywpghost.com/hide-my-wp-admin-mapping/): Customize WordPress admin dashboard URL parameters, values, and text with the free WP Ghost Admin Mapping add-on. - [How to Disable WP Ghost on Specific Pages in WordPress](https://hidemywpghost.com/how-to-disable-hide-my-wp-ghost-on-specific-pages/): Exclude specific pages from WP Ghost path rewriting using Whitelist Paths or the hmwp_process_init filter. ## Account & Agency Tools - [Hide My WP Ghost Advanced Pack - Hide My WP Ghost](https://hidemywpghost.com/hide-my-wp-ghost-advanced-pack/): Advanced Pack takes the basic security provided by the free version and enhances it with cutting-edge features like Two-Factor Authentication (2FA), Temporary… - [WP Ghost Dashboard Widget - Security Score and Threat Monitoring](https://hidemywpghost.com/how-to-use-hide-my-wp-in-dashboard/): WP Ghost adds a security monitoring widget to your WordPress Dashboard showing your security score (0-100), 7-day threats chart, brute force IPs blocked, and… - [How to White Label WP Ghost for Your Agency - Complete Setup Guide](https://hidemywpghost.com/hide-my-wp-white-label/): White label WP Ghost under your own brand name, logo, and menu icon. Configure once in the Cloud dashboard, download the customized ZIP, and install on… ## Troubleshooting - [Why Do I Get a 404 Error on My Custom Admin URL?](https://hidemywpghost.com/faqs/404-error-when-accessing-admin-url/): Expected behavior. WP Ghost hides the admin path from non-logged-in visitors. Log in through your custom login URL first, then the admin path works normally. - [Can I Remotely Disable WP Ghost on a Client's Website?](https://hidemywpghost.com/faqs/is-there-a-way-to-remotely-disable-the-plugin/): Yes. Block any client site from the WP Ghost Dashboard without logging into their WordPress. Revokes the license, frees the slot, and keeps their site intact. - [Fix PDFs and Iframes Not Loading in WordPress - X-Frame-Options Guide](https://hidemywpghost.com/pdfs-and-iframes-not-loading-in-frontend/): PDFs or iframes not loading after enabling WP Ghost? Learn how X-Frame-Options blocks cross-origin content and three ways to fix it without disabling security. - [Fix Frontend Theme Not Loading After Activating WP Ghost](https://hidemywpghost.com/frontend-is-not-loading-in-hide-my-wp-ninja-mode/): Fix broken theme, CSS not loading, or layout issues after activating WP Ghost. Step-by-step troubleshooting for Apache, Nginx, and LiteSpeed servers. - [WP Ghost on GoDaddy Managed WordPress - Disable CDN and Activate](https://hidemywpghost.com/how-to-use-hide-my-wp-with-godaddy/): Set up WP Ghost on GoDaddy Managed WordPress by disabling GoDaddy's built-in CDN. Use an external CDN like Cloudflare or BunnyCDN instead. - [Fix upgrade.php Not Working After WordPress Auto-Upgrade with WP Ghost](https://hidemywpghost.com/upgrade-php-not-working-after-wordpress-upgrade/): WordPress stuck after auto-upgrade? WP Ghost's Hide Common Files feature may be blocking upgrade.php. - [How to Disable WP Ghost and Regain Access to WordPress in an Emergency](https://hidemywpghost.com/hide-my-wp-how-to-disable-the-login-in-case-of-error/): Locked out of WordPress after configuring WP Ghost? Use the Safe URL, add HMWP_DISABLE to wp-config.php, or rename the plugin folder to restore access… - [How to Change File Permissions in WordPress - Fix 755 644 444 Settings](https://hidemywpghost.com/how-to-change-file-permissions-in-wordpress/): Fix WordPress file permissions with WP Ghost one-click Security Check or manually via FTP and cPanel. Directories 0755, files 0644, wp-config.php 0444. - [WP Ghost Security Check Report - Every Issue Explained with Fixes](https://hidemywpghost.com/wpplugins-security-check-report/): Understand every security issue WP Ghost's Security Check detects. Login path brute force, XML-RPC exploit, common paths visible, readme accessible, old paths… - [How to Change the WordPress Database Prefix for Better Security](https://hidemywpghost.com/how-to-change-database-prefix-in-wordpress/): Change the default wp_ database prefix to a random one with WP Ghost's one-click Security Check tool. - [Fix Theme Not Loading or Slow Website After Activating WP Ghost](https://hidemywpghost.com/theme-not-loading-correctly-website-loads-slower/): If your theme breaks or site loads slowly after activating WP Ghost, the server is not reading the rewrite rules. - [WP Ghost and WP Hide & Security Enhancer - Compatibility, Conflicts, and Migration](https://hidemywpghost.com/wp-hide-security-enhancer-hide-my-wp/): WP Ghost and WP Hide overlap on path security and cause .htaccess conflicts when both are active. WP Ghost covers all WP Hide features plus firewall, 2FA, and… - [Prevent 404 Errors After Deactivating WP Ghost - Redirect Rules for Apache and Nginx](https://hidemywpghost.com/preventing-404-errors-after-deactivating-hide-my-wp-ghost-plugin/): After deactivating WP Ghost, custom paths return 404 errors. Add redirect rules to .htaccess (Apache) or nginx.conf (Nginx) to map custom paths back to… ## Articles - [Refund Policy - Hide My WP Ghost](https://hidemywpghost.com/refund-rules/): At WP Ghost, we stand behind our product and are committed to your satisfaction. This Refund Policy explains your rights and our obligations regarding refunds… - [How to Hide Gutenberg Block Classes in WordPress with WP Ghost](https://hidemywpghost.com/how-to-hide-gutenberg-classes-with-hide-my-wp-ghost/): Hide WordPress Gutenberg wp-block class names from source code using WP Ghost Text Mapping. Remove the strongest WordPress fingerprint that CMS detectors look… - [Hide WordPress Paths in Cached and Minified CSS Files with WP Ghost](https://hidemywpghost.com/how-to-hide-wordpress-paths-in-css-files/): Fix WordPress paths leaking through cached and minified CSS files. Enable WP Ghost Change Paths in Cached Files to rewrite paths in WP Rocket, LiteSpeed Cache,… - [Lesson 3 - How to Hide WordPress from Theme Detectors and Hacker Bots](https://hidemywpghost.com/how-to-hide-from-wordpress-theme-detectors/): Fully hide your WordPress site from theme detectors and bots. Hide old paths, block detectors, enable security tweaks, use Text Mapping for CSS classes, clean… - [WP Ghost - WordPress Hack Prevention Plugin (Hide My WP Alternative)](https://hidemywpghost.com/hide-my-wp-codecanyon-alternative/): WP Ghost is a WordPress hack prevention plugin on WordPress.org with 115+ free security features. Path changes, 8G firewall, 2FA, brute force protection,… - [Lesson 1 - Hide WordPress Paths with WP Ghost in 4 Steps](https://hidemywpghost.com/how-to-hide-wordpress-website/): Set up WP Ghost in 4 steps: select a security level, customize paths, save and verify with Frontend Test, run a Security Check. - [How to Use Autoptimize with WP Ghost for Speed and Security](https://hidemywpghost.com/how-to-use-autoptimize-with-hide-my-wp-ghost/): WP Ghost and Autoptimize are fully compatible. Learn how to configure both plugins together for optimal WordPress performance and hack prevention, including… - [WP Ghost with Breeze Cache Plugin - Configuration and Path Rewriting](https://hidemywpghost.com/breeze-cache-plugin-for-wordpress-the-perfect-match-for-hide-my-wp-ghost/): Configure WP Ghost with Breeze cache plugin. Enable Change Paths in Cached Files so minified CSS/JS use custom paths. - [WP Ghost with Hummingbird Cache Plugin - Configuration and Path Rewriting](https://hidemywpghost.com/hummingbird-cache-and-hide-my-wp-plugin/): Configure WP Ghost with Hummingbird cache and performance plugin. Enable Change Paths in Cached Files for minified CSS/JS. - [WP Ghost with Shield Security - Compatible Configuration and Feature Comparison](https://hidemywpghost.com/hide-my-wp-and-shield-security/): WP Ghost and Shield Security complement each other. WP Ghost handles path security and firewall. Shield handles automated bot detection, spam filtering, and… - [WP Ghost with Sucuri Security - Compatible with No Feature Overlap](https://hidemywpghost.com/hide-my-wp-ghost-with-sucuri-security/): WP Ghost and Sucuri Security are fully compatible with almost no overlap. WP Ghost handles server-level path security and firewall. - [WP Ghost with WP Cerber Security - Compatible Configuration and Feature Comparison](https://hidemywpghost.com/hide-my-wp-ghost-with-wp-cerber-security/): WP Ghost and WP Cerber Security complement each other. WP Ghost handles path security and firewall. - [WP Ghost with Limit Login Attempts Reloaded - Login Security Overlap and Configuration](https://hidemywpghost.com/hide-my-wp-ghost-with-limit-login-attempts-reloaded/): WP Ghost and Limit Login Attempts Reloaded overlap on login protection. WP Ghost includes all LLAR features plus path security, firewall, 2FA, and headers. - [WP Ghost with Loginizer - Login Security Overlap and Configuration](https://hidemywpghost.com/hide-my-wp-ghost-and-loginizer/): WP Ghost and Loginizer overlap heavily on login security. WP Ghost includes all Loginizer features (brute force, reCAPTCHA, IP blocking, 2FA) plus path… - [WP Ghost with SiteGround Security - Compatible Features and Configuration](https://hidemywpghost.com/hide-my-wp-ghost-with-siteground-security/): WP Ghost and SiteGround Security are fully compatible and complement each other. WP Ghost handles path security and firewall. - [WP Ghost with Anti-Malware Security (GOTMLS) - Compatible with No Overlap](https://hidemywpghost.com/hide-my-wp-ghost-with-anti-malware-security/): WP Ghost and Anti-Malware Security are fully compatible. WP Ghost prevents attacks through path security and firewall. - [How to Set WordPress Database Permissions in phpMyAdmin for Better Security](https://hidemywpghost.com/how-to-grant-and-revoke-permissions-to-database-using-phpmyadmin/): Restrict your WordPress database user to only the 8 required permissions using phpMyAdmin. Reduce the impact of SQL injection attacks by removing unnecessary… - [Hide WordPress from BuiltWith with WP Ghost - Cache Removal and Configuration](https://hidemywpghost.com/hide-wordpress-from-builtwith/): Hide your WordPress site from BuiltWith using WP Ghost. BuiltWith caches detection results for weeks. - [Hide Theme Style Paths and Comments in WordPress with WP Ghost](https://hidemywpghost.com/how-to-load-theme-style-dynamically-and-hide-paths/): Hide WordPress theme style paths and comment headers using WP Ghost. Two methods: dynamic Text Mapping in CSS/JS files or combining CSS with a cache plugin. - [Hide Image Paths in Elementor, Divi, and Page Builders with WP Ghost](https://hidemywpghost.com/how-to-hide-the-image-paths-for-elementor-divi-thrive-and-other-builders/): Fix WordPress image paths leaking through Elementor, Divi, Thrive, and other page builder CSS cache files. - [Does WordPress Have Built-in Security? - Hide My WP Ghost](https://hidemywpghost.com/does-wordpress-have-built-in-security/): Hello everyone, and welcome to this video where we’ll be discussing WordPress’s built-in security features. - [Is WordPress Website Easily Hacked? - Hide My WP Ghost](https://hidemywpghost.com/is-wordpress-website-easily-hacked/): Hey everyone, welcome back to our channel. In this video, we'll be discussing a topic that's been on the minds of many website owners. - [Why is website security important? - Hide My WP Ghost](https://hidemywpghost.com/why-is-website-security-important/): I'm here to guide you through website security issues and provide solutions to resolve them. In today's digital age, having a secure website has become a… - [How to Check If .htaccess Is Working with AllowOverride All for WordPress](https://hidemywpghost.com/make-sure-htaccess-is-working-with-allowoverride-all/): Learn how to test if .htaccess and mod_rewrite are working on your Apache server, and how to enable AllowOverride All so WP Ghost path security and firewall… - [How to Enable AllowOverride on Google Cloud Platform for WP Ghost](https://hidemywpghost.com/how-to-enable-allowoverwrite-on-google-cloud-platform/): Enable mod_rewrite and AllowOverride All on Google Cloud Platform Apache so WP Ghost can write .htaccess rewrite rules. - [What WP Ghost Does and Does Not Do - Limitations and Scope](https://hidemywpghost.com/what-hide-my-wp-ghost-cant-do/): WP Ghost is a hack prevention plugin, not a malware scanner. Understand what it does (path security, firewall, 2FA, brute force protection) and what it does… - [How to Hide WP Ghost from the WordPress Admin Menu for Specific Users](https://hidemywpghost.com/how-to-hide-and-show-hide-my-wp-in-the-wordpress-menu/): Control who can see and manage WP Ghost in the WordPress dashboard using the hmwp_manage_settings capability. - [How to Set a Specific Language in WP Ghost - Plugin Translation Guide](https://hidemywpghost.com/set-a-specific-language-in-hide-my-wp-ghost/): isplay WP Ghost in English, French, German, or any language using the built-in Plugin Translations toggle or a plugin_locale filter in wp-config.php. - [How to Remove the Sitemap Author and Style in WordPress with WP Ghost](https://hidemywpghost.com/how-to-remove-the-sitemap-author-in-wordpress/): Strip SEO plugin author names and XSL stylesheet branding from your WordPress sitemap.xml using WP Ghost. - [WP Ghost with WP Security Ninja - Compatible Configuration and Feature Comparison](https://hidemywpghost.com/hide-my-wp-ghost-and-wp-security-ninja/): WP Ghost and WP Security Ninja complement each other. WP Ghost handles path security and firewall. - [Redirect WordPress Images from Old Paths to New Paths with WP Ghost](https://hidemywpghost.com/redirect-images-from-the-old-paths-to-the-new-paths/): Prevent duplicate image URLs after changing your WordPress uploads path. Redirect old /wp-content/uploads/ image paths to your custom path in two steps with WP… - [Hide WordPress from Wappalyzer, BuiltWith, and CMS Detectors with WP Ghost](https://hidemywpghost.com/hide-wordpress-from-wappalyzer/): Hide your WordPress site from Wappalyzer, BuiltWith, WhatCMS, and theme detectors using WP Ghost. Covers configuration, correct testing methods, browser… - [Limit Login Attempts - Hide My WP Ghost](https://hidemywpghost.com/how-to-limit-login-attempts/): How to Limit Login Attempts on Your WordPress PageDiscover how Hide My WordPress Ghost helps you have a secure website! - [WP Ghost Preset Security Options - One-Click WordPress Security Configuration](https://hidemywpghost.com/kb/preset-security-options/): Load a tested security configuration in one click with WP Ghost's four security presets. Choose from Minimal, Safe Mode + Compatibility, Safe Mode + Full… - [Ideal Hide My WP Ghost Settings - Best Practice 2026 - Hide My WP Ghost](https://hidemywpghost.com/hide-my-wp-ghost-settings-best-practice/): Learn how to set up Hide My WP Ghost in Ghost Mode and activate all security features you need for a stronger and safer website in just 6 minutes. - [WP Ghost - Why You Need This Hack Prevention Plugin for WordPress](https://hidemywpghost.com/hide-my-wp-why-you-must-have-it/): WP Ghost protects WordPress sites by securing default paths, blocking hacker bots with the 8G Firewall, adding 2FA with passkeys, and providing brute force… - [Privacy Policy - Hide My WP Ghost](https://hidemywpghost.com/privacy-policy/): This Privacy Policy explains how MINBO QRE SRL (Company No. 37814865), its wholly owned subsidiaries, and the WP Ghost websites (“WP Ghost”, “we”, “our”, or… - [About WP Ghost 10 Years of WordPress Hack Prevention](https://hidemywpghost.com/about-us/): WP Ghost has protected WordPress sites since 2016. Founded by MINBO QRE, now used on 250k+ websites. - [WP Ghost with CDN Enabler - Late Loading Configuration](https://hidemywpghost.com/hide-my-wp-and-cdn-enabler/): Configure WP Ghost to work with CDN Enabler by setting the Plugin Loading Hook to Late Loading. WP Ghost auto-detects the CDN domain. - [Change Wp-Admin URL - Hide My WP Ghost](https://hidemywpghost.com/change-wp-admin-urls/): How To Change WP-Admin URLsDiscover how Hide My WordPress Ghost helps you have a secure website! - [Contact - Hide My WP Ghost](https://hidemywpghost.com/contact/): Premium Support (click here) If you have the Hide My WP Ghost plugin installed on your website and have an account with us. ## Optional Specific configuration guides, less-common scenarios, and reference material. URLs in this section can be skipped if a shorter context is needed. - [Can I Recycle Sites on a Limited WP Ghost Plan? (Yes)](https://hidemywpghost.com/faqs/can-i-recycle-the-sites/): WP Ghost plans count active installs, not total. Remove a site from your account and the slot opens for a new one. No swap limits. Full explanation inside. - [WP Ghost Two-Factor Authentication - Code, Email, and Passkey 2FA](https://hidemywpghost.com/kb/two-factor-authentication/): Add two-factor authentication to WordPress with WP Ghost using authenticator app codes, email codes, or passkeys (Face ID, Touch ID, Windows Hello). - [How to Change and Hide the WordPress Login Path with WP Ghost](https://hidemywpghost.com/kb/change-wordpress-login-path-with-hide-my-wp-ghost-plugin/): Change and hide the default WordPress wp-login.php path with WP Ghost to block brute force attacks. - [WP Ghost Magic Link Login - Passwordless WordPress Authentication](https://hidemywpghost.com/kb/magic-link-login/): Enable passwordless login for WordPress and WooCommerce with WP Ghost's Magic Link Login. Users enter their email, receive a one-time link, click it, and they… - [Does WP Ghost Work on WordPress Multisite? (Yes)](https://hidemywpghost.com/faqs/is-this-plugin-working-on-wp-multisite/): WP Ghost fully supports Multisite with subdomain and subdirectory structures. Network-activated, configured once, applies to all subsites. - [Does WP Ghost Work Without Custom Permalinks? (Yes)](https://hidemywpghost.com/faqs/is-this-plugin-working-if-i-dont-have-custom-permalinks-on-my-site/): WP Ghost works with any permalink structure, including Plain. But Post Name permalinks give better SEO and full path security. How to switch and why it matters. - [I Forgot My Custom Login URL in WP Ghost. How Do I Recover?](https://hidemywpghost.com/faqs/i-forgot-the-custom-login-and-admin-urls-what-should-i-do/): Check your WP Ghost Dashboard for the saved URL. Or use the Safe URL parameter, disable via FTP, or add HMWP_DISABLE to wp-config.php. Four recovery methods. - [Can WP Ghost Hide wp-admin on Nginx? (Yes - Full Support)](https://hidemywpghost.com/faqs/is-hide-my-wp-hiding-the-wp-admin-on-nginx-servers/): WP Ghost fully supports hiding wp-admin on Nginx. Add one include line to your server block and reload. No shell access? Use the Minimal preset. - [Do I Have to Write Code in .htaccess for WP Ghost?](https://hidemywpghost.com/faqs/do-i-have-to-write-some-code-in-htaccess/): No. WP Ghost writes rewrite rules to .htaccess automatically. Manual editing is only needed if the file is not writable. Here is how to handle both situations. - [Does WP Ghost Work with All Cache Plugins? (Yes)](https://hidemywpghost.com/faqs/does-hide-my-wp-pro-work-with-all-cache-plugins/): WP Ghost is tested with 25+ cache plugins including WP Rocket, LiteSpeed Cache, and W3 Total Cache. Enable Change Paths in Cached Files and clear cache. - [Should You Disable XML-RPC on WordPress?](https://hidemywpghost.com/faqs/should-you-disable-xml-rpc-on-wordpress-2/): For most sites, yes. XML-RPC enables brute force amplification and DDoS attacks. WP Ghost disables it with one toggle. Keep it for Jetpack with IP restrictions. - [Does WP Ghost Make My Website Invisible on FTP? (No)](https://hidemywpghost.com/faqs/does-hide-my-wp-going-to-make-my-website-invisible-on-ftp/): WP Ghost never moves or renames files. Your FTP directory structure stays standard. Path changes happen at the URL level through rewrite rules. - [Should You Disable XML-RPC on WordPress? (Yes - Here's How)](https://hidemywpghost.com/faqs/should-you-disable-xml-rpc-on-wordpress/): XML-RPC enables brute force amplification (1,999 attempts per request) and DDoS attacks. WP Ghost disables it with one toggle. Most modern sites don't need it. - [Does WP Ghost Make My Website Invisible on FTP?](https://hidemywpghost.com/faqs/does-hide-my-wp-going-to-make-my-website-invisible-on-ftp-2/): No. WP Ghost does not change your FTP directory structure. All files stay in their original locations. - [How Do I Know If My WordPress Site Is Hidden With WP Ghost?](https://hidemywpghost.com/faqs/how-do-i-know-if-my-website-is-hidden-with-hide-my-wp-ghost/): Run the built-in Security Check, inspect your page source, and test with WhatCMS.org or BuiltWith. If WordPress is still detected, here is how to fix it. - [Is It Safe That I Can Access wp-admin While Logged In?](https://hidemywpghost.com/faqs/if-im-logged-in-my-website-i-can-access-the-wp-admin-is-that-safe/): Yes. WP Ghost hides wp-admin from bots and non-logged-in visitors. Logged-in administrators keep access as a safety net. You can restrict it to admins only. - [Can I Change WP-Admin to Something Else in WordPress?](https://hidemywpghost.com/faqs/can-i-change-wp-admin-to-something-else/): Yes. WP Ghost changes wp-admin to a custom path using rewrite rules. No files are modified. Bots get 404 for the default path. Free feature with full guide. - [Does WP Ghost Hide wp-admin on Nginx Servers? (Yes)](https://hidemywpghost.com/faqs/is-hide-my-wp-hiding-the-wp-admin-on-nginx-servers-2/): WP Ghost hides wp-admin on Nginx with one config include and a reload. No shell access? Use the Minimal preset for login, firewall, 2FA without config changes. - [How Do I Rename the wp-content Folder in WordPress?](https://hidemywpghost.com/faqs/how-do-i-rename-a-wp-content-folder/): Change the wp-content path with WP Ghost (no file changes) or manually via FTP. WP Ghost is safer, reversible, and adds security. Both methods explained inside. - [How Do I Change the Default Login Page in WordPress?](https://hidemywpghost.com/faqs/how-do-i-change-the-default-login-page-in-wordpress/): Change your WordPress login URL with WP Ghost in one step. Enter a custom name, save, and the old wp-login.php returns 404. Free feature. - [How Can I Hide Plugins From WordPress Detectors?](https://hidemywpghost.com/faqs/how-can-we-hide-plugins-from-wordpress-detectors/): WP Ghost changes the plugins directory path and randomizes individual plugin names in the page source. - [How Do I Change admin-ajax.php in WordPress?](https://hidemywpghost.com/faqs/how-do-i-change-admin-ajax-in-wordpress/): Go to WP Ghost > Change Paths > Ajax Security and set a custom path. The default admin-ajax.php returns 404 for bots. All AJAX features keep working. - [Can I Hide My WordPress Site Until It's Ready? (Yes)](https://hidemywpghost.com/faqs/can-i-hide-my-wordpress-site-until-it-is-ready/): Hide your WordPress site during development with noindex settings and maintenance mode. Install WP Ghost before launch for day-one security. - [How Do I Hide My WordPress Site From Bots and Detectors?](https://hidemywpghost.com/faqs/how-to-hide-the-wordpress-site/): WP Ghost changes 30+ WordPress paths, removes CMS fingerprints, and simulates a different CMS. No coding needed. - [Does Hiding the WordPress Login Page Make My Site More Secure?](https://hidemywpghost.com/faqs/is-hide-my-wp-login-plugin-making-my-site-more-secure/): Yes, but it is only one layer. Hiding wp-login blocks automated brute force bots. WP Ghost adds firewall, reCAPTCHA, and 2FA for complete login protection. - [Is There a Way to Hide My WordPress Site? (Yes - Guide)](https://hidemywpghost.com/faqs/is-there-a-way-to-hide-my-wordpress-site/): WP Ghost hides WordPress from bots and scanners by changing paths, removing fingerprints, and blocking detectors. One-click setup in under 3 minutes. - [Do I Need to Hide WordPress From Detectors or Hackers?](https://hidemywpghost.com/faqs/do-i-need-to-hide-wordpress-from-detectors-or-hackers/): Both, for different reasons. Hiding from bots prevents automated attacks. Hiding from detectors protects branding. - [Does Hiding WordPress with a Plugin Affect SEO? (No)](https://hidemywpghost.com/faqs/does-using-a-hide-my-wp-plugin-effect-seo/): Hiding your CMS doesn't affect SEO. Google doesn't rank by CMS type. Page URLs, schemas, and meta tags stay unchanged. Image paths transition cleanly. - [How Can I Deactivate All WordPress Plugins at Once? (FTP)](https://hidemywpghost.com/faqs/how-can-i-deactivate-all-plugins-at-once/): Rename /wp-content/plugins to plugins_temp via FTP to deactivate all plugins instantly. Test single plugins by copying them back one at a time. - [Do I Need WP Ghost If I Already Use a Security Plugin?](https://hidemywpghost.com/faqs/do-i-need-hide-my-wp-ghost-if-using-a-security-tool-or-plugin/): Yes. Your current plugin detects threats. WP Ghost prevents bots from discovering what to attack. Different layers, no conflict. - [Can I Reverse All WP Ghost Settings to Restore My Site?](https://hidemywpghost.com/faqs/can-i-reverse-all-settings/): Yes. Every WP Ghost setting is fully reversible. Revert individual settings, rollback to defaults, or deactivate to restore your site to its exact… - [Can I See All User Edits and Changes with WP Ghost Logs?](https://hidemywpghost.com/faqs/will-i-be-able-to-see-all-edits-and-settings-changes-made-by-users/): Yes. WP Ghost's Events Log tracks logins, post deletions, plugin changes, and settings modifications by user, IP, and timestamp. - [Can WP Ghost Be Used as a Standalone Security Plugin?](https://hidemywpghost.com/faqs/can-hide-my-wp-ghost-be-used-as-a-stand-alone-security-plugin/): Yes. WP Ghost includes 115+ free features for hack prevention. Sufficient standalone on managed hosting. Add a malware scanner if your host lacks one. - [Do I Need WP Ghost If I Have Server-Side Protection? (Yes)](https://hidemywpghost.com/faqs/do-i-still-need-hide-my-wp-ghost-if-i-already-have-server-side-protection/): Server firewalls handle network attacks. WP Ghost handles WordPress application attacks. They protect different layers. Both are needed for complete security. - [Will WP Ghost Impact My SEO Rankings? (No - Here's Why)](https://hidemywpghost.com/faqs/will-using-hide-my-wp-ghost-impact-my-seo-rankings/): WP Ghost doesn't change page URLs, schemas, meta tags, or any SEO elements. It only changes internal infrastructure paths. Images stay accessible. - [Can WP Ghost Prevent Spam Messages and Comment Spam?](https://hidemywpghost.com/faqs/can-hide-my-wp-ghost-prevent-spam-messages/): WP Ghost blocks automated comment spam bots and reduces CMS-targeted spam. It does not filter contact form submissions. - [Is WP Ghost GDPR Compliant? (Yes - Full Breakdown)](https://hidemywpghost.com/faqs/is-hide-my-wp-ghost-gdpr-compliant/): WP Ghost's core features collect no personal data. Brute force and Events Log are optional. Cloud data auto-deletes after 30 days. Full GDPR breakdown inside. - [Does WP Ghost Affect Existing Indexed Assets Like Images and PDFs?](https://hidemywpghost.com/faqs/does-hmwp-ghost-affect-existing-assets/): No. WP Ghost does not break existing indexed media. Images, PDFs, and documents remain accessible through original URLs. SEO and caching are preserved. - [Will WP Ghost Replace My SEO Plugin's Sitemap? (No)](https://hidemywpghost.com/faqs/will-hide-my-wp-ghost-replace-the-sitemap-created-by-seo-plugins/): WP Ghost doesn't create or replace sitemaps. It filters sitemap output to replace WordPress paths and remove plugin branding. - [Can I Use WP Ghost with Cloudflare?](https://hidemywpghost.com/faqs/can-i-use-hide-my-wp-ghost-with-cloudflare/): Yes. WP Ghost works with Cloudflare. Purge the Cloudflare cache after path changes. CDN URL Mapping ensures custom paths work across CDN-served files. - [Will My Clients Be Asked to Add a Token for WP Ghost?](https://hidemywpghost.com/faqs/will-clients-be-asked-to-add-a-token/): No, if you use Whitelabel. WP Ghost connects automatically to your account on client sites. No token prompt, no branding shown. - [Can WP Ghost Replace Solid Security (iThemes)? (No - Guide)](https://hidemywpghost.com/faqs/can-hide-my-wp-ghost-replace-ithemes-security/): WP Ghost and Solid Security serve different purposes. WP Ghost prevents attacks. Solid Security hardens WordPress and scans for malware. - [Can I Use WP Ghost with iThemes Security (Solid Security)?](https://hidemywpghost.com/faqs/can-i-use-hide-my-wp-ghost-with-ithemes-security/): Yes. WP Ghost and Solid Security (formerly iThemes Security) are fully compatible. WP Ghost handles path security, Solid Security handles hardening. - [How Can WP Ghost Increase Site Speed? (3 Ways Explained)](https://hidemywpghost.com/faqs/how-can-using-hide-my-wp-ghost-increase-site-speed/): WP Ghost improves speed by removing render-blocking scripts (emojis, embeds), blocking bot traffic at the server level, and reducing unnecessary requests. - [Why Use WP Ghost If I Already Have a 2FA Plugin?](https://hidemywpghost.com/faqs/why-should-i-use-the-plugin-if-i-have-an-2fa-plugin/): 2FA only protects the login form. WP Ghost protects 30+ WordPress paths, blocks injection attacks, and stops bot reconnaissance. - [Is a CDN Server Included with WP Ghost? (No - Here's Why)](https://hidemywpghost.com/faqs/is-the-cdn-server-included/): WP Ghost doesn't include a CDN. Its CDN Mapping feature extends custom path changes to your existing CDN domain. Auto-detects WP Rocket, BunnyCDN, and more. - [Does WP Ghost Slow Down WordPress?](https://hidemywpghost.com/faqs/does-hide-my-wp-ghost-slow-down-wordpress/): No. WP Ghost uses lightweight rewrite rules with zero file scanning. It can reduce server load by blocking bot traffic. No measurable impact on page speed. - [How Customizable Is WP Ghost? Can I Control Every Setting?](https://hidemywpghost.com/faqs/how-customizable-is-hide-my-wp-ghost/): Fully customizable. Every WP Ghost feature toggles on or off individually. Load presets for quick setup, then fine-tune paths, firewall, 2FA, and 65+ options. - [Will WP Ghost Protect Against Spam Signups? (Yes - Guide)](https://hidemywpghost.com/faqs/will-it-protect-my-site-against-spam-signups/): WP Ghost blocks spam registrations by changing the signup path, adding reCAPTCHA, and limiting attempts. Reduces spam signups by up to 95%. Free feature. - [How Extensive Is WP Ghost's Monitoring of Hacking Attempts?](https://hidemywpghost.com/faqs/how-extensive-is-the-monitoring-of-hacking-attempts/): WP Ghost monitors external attacks (Security Threats Log), internal user activity (Events Log), and sends real-time email alerts. - [How Does WP Ghost Compare to Wordfence? Can They Work Together?](https://hidemywpghost.com/faqs/how-does-hide-my-wp-ghost-compare-to-wordfence/): WP Ghost and Wordfence are compatible. Wordfence detects threats and scans malware. WP Ghost prevents discovery by hiding WordPress paths. - [What Security Plugin Should I Use Alongside WP Ghost?](https://hidemywpghost.com/faqs/what-other-security-plugin-do-you-recommend/): Pair WP Ghost with a malware scanner like Wordfence, Sucuri, or WP Cerber for full coverage. WP Ghost prevents attacks. Scanning plugins detect and clean up. - [Does WP Ghost Complement or Replace Wordfence, Sucuri, VirusDie?](https://hidemywpghost.com/faqs/does-it-complement-overlap-or-replace-other-security-tools/): WP Ghost complements other security tools by adding hack prevention, a layer they don't provide. It can also work standalone. - [How Does WP Ghost Compare to Clearfy?](https://hidemywpghost.com/faqs/how-does-hide-my-wp-ghost-compare-to-clearfy/): WP Ghost is a dedicated hack-prevention plugin. Clearfy is a WordPress optimization tool. They overlap slightly but serve different purposes. - [How Does WP Ghost Compare to CloudFilt? (Differences)](https://hidemywpghost.com/faqs/how-does-hide-my-wp-ghost-compare-to-cloudfilt/): CloudFilt is a cloud WAF that filters network traffic. WP Ghost prevents hacks at the WordPress level with path security, firewall, 2FA, and more. - [What Value Does WP Ghost Add to My WordPress Security Stack?](https://hidemywpghost.com/faqs/what-value-does-hide-my-wp-ghost-add-to-my-security-stack/): WP Ghost adds hack prevention, the missing layer in most security stacks. It hides WordPress paths so bots cannot discover what to attack. - [How Does WP Ghost Compare to WP Hide Security Enhancer?](https://hidemywpghost.com/faqs/how-does-hide-my-wp-ghost-compare-to-wp-hide/): WP Ghost includes everything WP Hide offers plus firewall, 2FA, brute force protection, security headers, and country blocking. - [WP Ghost vs Hide My WP (CodeCanyon) - What's the Difference?](https://hidemywpghost.com/faqs/whats-the-difference-between-hide-my-wp-ghost-and-hide-my-wp/): WP Ghost and the CodeCanyon Hide My WP are separate plugins. WP Ghost offers 150+ features, broader compatibility, and a free version on WordPress.org. - [Do I Still Need WP Ghost If I Already Have Sucuri?](https://hidemywpghost.com/faqs/do-i-still-need-this-if-i-have-sucuri/): Yes. Sucuri detects malware and cleans up after breaches. WP Ghost prevents attacks by hiding WordPress paths. - [Can I Contact WP Ghost Support About Plugin Compatibility Issues?](https://hidemywpghost.com/faqs/can-i-reach-out-to-support-regarding-compatibility-issues/): Yes. Report any plugin or theme conflict to WP Ghost support. The team investigates and releases compatibility fixes. Tested with 1,000+ plugins and themes. - [Will WP Ghost Affect WordPress Migration Plugins? (No)](https://hidemywpghost.com/faqs/will-it-affect-wordpress-migration-plugins/): WP Ghost doesn't change physical files, so migration plugins work normally. For full migrations, deactivate first and restore after. - [Does WP Ghost Rewrite PDF and Upload Links on the Frontend?](https://hidemywpghost.com/faqs/does-hmwp-ghost-rewrite-links-on-the-front-end/): Yes. WP Ghost automatically rewrites all PDF, document, and media links when you change the uploads path. No manual updates needed. - [Can I Disable Inspect Element in WordPress with WP Ghost?](https://hidemywpghost.com/faqs/can-i-disable-inspect-element-viewing/): Yes. WP Ghost disables Inspect Element, right-click, View Source, copy/paste, and image drag. Free feature. - [Where is the data from the Events Log Reports being stored?](https://hidemywpghost.com/faqs/where-is-the-data-from-the-events-log-reports-stored/): Moved This tutorial has moved to the new WP Ghost Knowledge Base where each feature is presented in detail. - [Does WP Ghost Have 7G Firewall Protection? (Yes + 8G Too)](https://hidemywpghost.com/faqs/does-hide-my-wp-ghost-have-7g-firewall-protection/): Yes. WP Ghost includes both the 7G and 8G Firewalls by Jeff Starr. Server-level protection against SQL injection, script injection, and bots. Free feature. - [What Can I Do If I Can't Login After Using WP Ghost?](https://hidemywpghost.com/faqs/what-can-i-do-if-i-cant-login/): Locked out after WP Ghost path changes? Use the Safe URL, Pause 5 Minutes, rollback settings, or FTP emergency disable. Four recovery methods explained. - [Does WP Ghost Make Changes to the .htaccess File? (Yes)](https://hidemywpghost.com/faqs/does-hide-my-wp-ghost-make-changes-to-the-htaccess-file/): WP Ghost writes rewrite rules and firewall filters to .htaccess on Apache/LiteSpeed. No PHP files changed. Rules removed cleanly on deactivation. - [Will WP Ghost Help My Site Against All Bots?](https://hidemywpghost.com/faqs/will-hide-my-wp-ghost-help-my-site-against-all-bots/): Yes. WP Ghost reduces bot traffic by hiding WordPress paths, blocking malicious requests with 7G/8G firewall, and stopping brute force and spam bots… - [Is WP Ghost Available in Other Languages? (16 Languages)](https://hidemywpghost.com/faqs/is-hide-my-wp-ghost-available-in-other-languages/): Yes. WP Ghost is translated into 16 languages including French, German, Spanish, Italian, Japanese, and more. Learn how to set or force a specific language. - [Is WP Ghost Compatible with the AppMySite Plugin?](https://hidemywpghost.com/faqs/is-hide-my-wp-ghost-compatible-with-appmysite/): Yes. WP Ghost works with AppMySite. Keep the REST API path at default and do not disable REST API access. All other security features work normally. - [Does WP Ghost Work on Shared Hosting Plans? (Yes - Guide)](https://hidemywpghost.com/faqs/does-hide-my-wp-ghost-work-in-shared-hosting-plans/): WP Ghost works on shared hosting. Apache and LiteSpeed need no extra setup. Nginx shared hosting needs one config include or use the no-config preset. - [Does WP Ghost Work on SiteGround Hosted Websites?](https://hidemywpghost.com/faqs/does-hide-my-wp-ghost-work-for-siteground-hosted-websites/): Yes. WP Ghost is fully compatible with SiteGround. It auto-detects the server setup and writes .htaccess rules automatically. No Nginx config editing needed. - [Does WP Ghost Write Code into PHP Files? (No - Here's Why)](https://hidemywpghost.com/faqs/does-hide-my-wp-ghost-write-codes-into-php-files/): WP Ghost never modifies PHP files. It uses .htaccess rewrite rules and WordPress filters. Deactivating restores everything instantly. - [Does WP Ghost Protect Against Clickjacking?](https://hidemywpghost.com/faqs/does-hide-my-wp-ghost-protect-you-from-clickjaking/): Yes. WP Ghost adds X-Frame-Options and CSP frame-ancestors headers to prevent clickjacking. Enable security headers in one click. Free feature. - [Can I Create Custom CMS Footprints in WP Ghost?](https://hidemywpghost.com/faqs/is-it-possible-to-have-custom-footprints/): WP Ghost simulates Drupal and Joomla by default. You can add a custom generator name using the hmwp_emulate_cms filter, but use a real CMS name for best… - [Will There Be Issues If I Stop Using WP Ghost?](https://hidemywpghost.com/faqs/will-there-be-any-issues-with-my-site-if-i-stop-using-hide-my-wp-ghost/): No. All WP Ghost settings are fully reversible. Deactivating the plugin instantly restores all WordPress defaults. Deleting removes all traces. Zero risk. - [Does WP Ghost Come With a License Transfer System?](https://hidemywpghost.com/faqs/does-it-come-with-a-license-transfer-system/): WP Ghost has no formal license transfer. You can change the account email to a new owner or remove the site and let them purchase their own license. - [Does WP Ghost Support Cover All Connected Websites?](https://hidemywpghost.com/faqs/does-support-cover-all-the-websites/): Yes. WP Ghost Premium support covers all websites on your account with an active subscription. No per-site limit. - [Does WP Ghost Work With BuddyBoss?](https://hidemywpghost.com/faqs/does-hide-my-wp-ghost-work-with-buddyboss/): Yes. WP Ghost is compatible with BuddyBoss platform and theme. Keep the REST API path unchanged if you use the BuddyBoss App. Full setup guide. - [What Are WP Ghost's Support Terms for Agency Client Sites?](https://hidemywpghost.com/faqs/what-are-your-terms-for-providing-support/): WP Ghost supports the account holder, not end clients. Learn how agency support works, how to help your clients, and how whitelabeling fits in. - [How to Remove WP Ghost Rewrite Rules from WordPress .htaccess?](https://hidemywpghost.com/faqs/how-to-remove-the-hmw-rewrite-rules-from-wp-definition-in-htaccess/): Remove WP Ghost rewrite rules from the WordPress .htaccess block. Switch off Add Rewrites in WordPress Rules Section or use the HMW_RULES_IN_WP_RULES constant. - [Why Is My Custom Admin Path Redirecting to the Front Page?](https://hidemywpghost.com/faqs/why-the-new-admin-path-is-redirected-to-front-page/): Custom admin path redirects to the front page? Switch off "Hide the New Admin Path" in WP Ghost > Change Paths > Admin Security. - [How Do I Hide Old WordPress Image Paths? (WP Ghost Guide)](https://hidemywpghost.com/faqs/how-can-i-hide-the-old-images-paths/): Hide or redirect old WordPress image paths after changing your uploads directory. Covers the HMW_HIDE_OLD_IMAGES constant, MEDIA file redirects, and server… - [How Do I Change WordPress Paths in the Admin Dashboard?](https://hidemywpghost.com/faqs/how-can-i-change-the-wp-paths-in-admin-dashboard/): Enable WP Ghost path changes in the admin backend by adding one line to wp-config.php. Step-by-step guide with warnings and rollback instructions. - [Does WP Ghost Work with Elementor Custom Icons?](https://hidemywpghost.com/faqs/does-hmwg-work-with-elementor-custom-icons/): Yes. WP Ghost is fully compatible with Elementor Pro custom icons. Icon fonts upload and display correctly with all WP Ghost security options active. - [Does WP Ghost Work With WP Umbrella?](https://hidemywpghost.com/faqs/does-hide-my-wp-work-with-wp-umbrella/): Yes. Configure WP Ghost for WP Umbrella by keeping the /login path accessible and matching the REST API path in both plugins. Step-by-step setup guide. - [How Do I Change or Hide META Text in WordPress with WP Ghost?](https://hidemywpghost.com/faqs/how-can-i-change-hide-the-meta-text/): Replace WordPress and plugin names in META tags using the free WP Ghost Meta Mapping extension. Covers installation, rule setup, and admin dashboard mapping. - [How to Protect Your WordPress Website from Hackers (Guide)](https://hidemywpghost.com/faqs/how-to-protect-your-website-from-hackers/): Protect your WordPress site with four security layers: secure hosting, hack prevention with WP Ghost, updates, and backups. - [How Do I Disable XML-RPC in WordPress?](https://hidemywpghost.com/faqs/how-to-disable-xml-rpc/): Disable XML-RPC in WordPress with one toggle in WP Ghost. Block brute force amplification, DDoS pingback abuse, and username enumeration through xmlrpc.php. - [Why Can't I Login to WordPress via wp-admin? (WP Ghost Fix)](https://hidemywpghost.com/faqs/why-cant-i-login-to-wordpress-anymore-via-wp-admin/): Can't access /wp-admin after activating WP Ghost? Your admin path is hidden for security. Learn how to use your custom login URL, disable hiding, or recover… - [Is My Website Loading Slower with WP Ghost? (Answered)](https://hidemywpghost.com/faqs/is-my-website-loading-slower-with-hide-my-wp/): No. WP Ghost adds about 0.05s to page generation and zero with caching. If your site slowed down, check your server config. Full performance guide inside. - [Can I Remove the Language Switcher from WordPress Login?](https://hidemywpghost.com/faqs/is-it-possible-to-remove-the-language-switcher-from-the-login-screen/): Yes. WP Ghost removes the WordPress login language switcher with one toggle. Go to Change Paths > Login Security and enable Hide Language Switcher. - [Can WP Ghost Hide the Plugins and Theme You're Using?](https://hidemywpghost.com/faqs/can-we-use-this-to-hide-the-plugins-and-theme-we-are-using/): Yes. WP Ghost hides plugin names, theme names, directory paths, and style.css from scanners. Learn how to set up full plugin and theme hiding step by step. - [Why Doesn't My Theme Layout Load After Using WP Ghost?](https://hidemywpghost.com/faqs/why-doesnt-theme-layout-load-correctly/): Theme layout broken after WP Ghost path changes? Fix it by clearing cache, updating Nginx or Apache config, checking Text Mapping, and resolving plugin… - [Why Do Detectors Like IsItWP Still Show WordPress CMS?](https://hidemywpghost.com/faqs/why-detectors-like-isitwp-are-showing-wp-cms/): IsItWP and BuiltWith cache CMS results for weeks. Learn which detectors give real-time results and how to correctly test your WP Ghost configuration. - [How Do I Hide My WordPress Site from Hackers and Bots?](https://hidemywpghost.com/faqs/how-do-i-hide-my-wordpress-site/): Hide your WordPress site with WP Ghost by changing all default paths, removing CMS fingerprints, and blocking theme detectors. Complete step-by-step guide. - [How Do I Hide My WordPress Site from the Public? (Guide)](https://hidemywpghost.com/faqs/how-do-i-hide-my-wordpress-site-from-the-public/): Hide your WordPress site from visitors during development with maintenance mode, noindex, IP whitelisting, and WP Ghost hack prevention. - [How Do I Hide the Theme Name in WordPress?](https://hidemywpghost.com/faqs/how-do-i-hide-the-theme-name-in-wordpress/): Hide your WordPress theme name with WP Ghost. Change the themes path, replace directory names with random codes, rename style.css, and block theme detectors. - [How Do I Hide the WordPress Version? (WP Ghost Guide)](https://hidemywpghost.com/faqs/how-do-i-hide-the-wordpress-version/): Remove WordPress version numbers from CSS, JS, images, and the generator meta tag with WP Ghost. Two toggles strip all version fingerprints from your source… - [What Is the Best Plugin for Cloaking WordPress?](https://hidemywpghost.com/faqs/what-is-the-plugin-for-cloaking-wordpress/): WP Ghost cloaks WordPress by changing all default paths, removing CMS fingerprints, and simulating Drupal or Joomla. - [How Do I Make My WordPress Site Invisible?](https://hidemywpghost.com/faqs/how-do-i-make-my-wordpress-site-invisible/): Hide your WordPress site during development with maintenance mode and noindex, then make it invisible to bots and scanners with WP Ghost path security. - [How Do I Block WP Content in WordPress? (WP Ghost Guide)](https://hidemywpghost.com/faqs/how-do-i-block-wp-content/): Block direct access to wp-content by changing the path and hiding it with WP Ghost. Step-by-step guide to protect themes, plugins, and uploads from bots. - [What Is the WP Ghost Security Plugin for WordPress?](https://hidemywpghost.com/faqs/what-is-the-hide-my-wp-security-plugin-for-wordpress/): WP Ghost is a hack-prevention WordPress plugin that hides default paths, adds 7G/8G firewall rules, 2FA with passkeys, and brute force protection. - [Why Are Styles and Buttons Not Working With WP Ghost?](https://hidemywpghost.com/faqs/why-style-buttons-are-not-working-with-hide-my-wp/): Fix CSS, JavaScript, and button issues after activating WP Ghost. Step-by-step troubleshooting for Text Mapping, hidden paths, META IDs, and cache conflicts. - [Do I Really Need a Security Plugin for WordPress?](https://hidemywpghost.com/faqs/do-i-really-need-a-security-plugin-for-wordpress/): Yes. WordPress default paths make every site a bot target. Learn why a hack-prevention plugin like WP Ghost is essential for protecting your WordPress site. - [Same Login Path with Multiple Security Plugins? Don't](https://hidemywpghost.com/faqs/can-i-use-the-same-login-path-if-multiple-security-plugins-are-installed-on-the-website/): Using the same custom login path in multiple WordPress security plugins causes conflicts and exposes your URL. - [How to Stop WP Ghost Plugin Auto Update Check](https://hidemywpghost.com/faqs/how-to-stop-plugin-update-check/): Disable WP Ghost automatic update checks by adding WP_AUTO_UPDATE_HMWP to wp-config.php. Keep full control over when you update the plugin. - [How to Change the REST API Path and Secure WordPress APIs with WP Ghost](https://hidemywpghost.com/kb/how-to-change-rest-api-path-with-hide-my-wp-ghost-plugin/): Change the wp-json path, hide the REST API URL, disable unauthenticated access, and block the rest_route backdoor with WP Ghost. - [WP Ghost Temporary Logins - Create Passwordless WordPress Access](https://hidemywpghost.com/kb/temporary-logins/): Create passwordless, time-limited login URLs for developers, clients, and team members using WP Ghost's Temporary Logins feature. - [URL Mapping and Text Mapping in WP Ghost - Complete Guide](https://hidemywpghost.com/kb/url-mapping-text-mapping/): Learn how to use URL Mapping, Text Mapping, CDN Mapping, and experimental CSS/JS mapping in WP Ghost to change class names, URLs, and plugin identifiers in… - [What Is WP Ghost Backup and Restore? How Does It Work?](https://hidemywpghost.com/faqs/what-is-backup-and-restore/): Export and import all WP Ghost settings with Backup and Restore. Replicate configurations across multiple sites, save before testing, or migrate settings to a… - [WP Ghost Free vs Premium - Full Feature Comparison](https://hidemywpghost.com/kb/wp-ghost-free-vs-premium/): Compare WP Ghost Free (115+ features) vs Premium (150+ features). Both share the same hack-prevention engine. - [WP Ghost Security Threats Log - Monitor Blocked WordPress Attacks](https://hidemywpghost.com/kb/security-threats-log/): Monitor every malicious request your WordPress site receives with the WP Ghost Security Threats Log. - [How to Change the Lost Password Path in WordPress with WP Ghost](https://hidemywpghost.com/kb/how-to-change-lost-password-path-with-hide-my-wp-ghost-plugin/): Change the WordPress lost password path with WP Ghost to block spam reset emails, prevent username enumeration, and stop bots from exploiting the password… - [WP Ghost CMS Simulator - Make WordPress Look Like Drupal or Joomla](https://hidemywpghost.com/kb/simulating-drupal-or-joomla-cms-with-hide-my-wp-ghosts-cms-simulator/): Simulate Drupal or Joomla on your WordPress site with WP Ghost's CMS Simulator. Inject fake CMS fingerprints to trick theme detectors and hacker bots. - [How to Change the admin-ajax.php Path in WordPress with WP Ghost](https://hidemywpghost.com/kb/how-to-change-wordpress-admin-ajax-php-path-with-hide-my-wp-ghost-plugin/): Change the WordPress admin-ajax.php path, hide wp-admin from AJAX URLs, and replace paths in AJAX responses with WP Ghost. - [WP Ghost Security Monitor - Weekly Cloud Scanning for WordPress](https://hidemywpghost.com/kb/security-monitor/): Automatically scan your WordPress sites every week from the cloud with WP Ghost's Security Monitor. Get emailed when security issues are found. - [Change and Hide the WordPress Themes Path with WP Ghost](https://hidemywpghost.com/kb/change-themes-path-in-wordpress/): Change the /wp-content/themes/ path and hide individual theme names with WP Ghost. Block theme detectors, protect child themes, and prevent CMS detection… - [How to Change and Hide the wp-includes Path in WordPress with WP Ghost](https://hidemywpghost.com/kb/how-to-change-and-hide-the-wp-includes-path-in-wordpress-with-wp-ghost/): Change and hide the WordPress wp-includes path with WP Ghost to remove the primary CMS fingerprint from your source code. - [How to Change the Comments Path and Block Comment Spam in WordPress with WP Ghost](https://hidemywpghost.com/kb/how-to-change-the-comments-path-and-block-comment-spam-in-wordpress-with-wp-ghost/): Change the WordPress comments path, hide wp-comments-post.php, and add reCAPTCHA to comment forms with WP Ghost. - [WordPress Brute Force Protection with WP Ghost - reCAPTCHA and Login Limits](https://hidemywpghost.com/kb/brute-force-protection/): Protect WordPress login, registration, password reset, and comment forms from brute force attacks. - [How to Change the Plugins Path and Hide Plugin Names in WordPress with WP Ghost](https://hidemywpghost.com/kb/how-to-change-the-plugins-path-and-hide-plugin-names-in-wordpress-with-wp-ghost/): Change the WordPress plugins path, hide plugin directory names, and block plugin detection with WP Ghost. Stop WPScan from enumerating your plugins. - [WP Ghost with Really Simple SSL - Compatibility and Setup](https://hidemywpghost.com/kb/wp-ghost-with-really-simple-ssl/): WP Ghost is fully compatible with Really Simple SSL. Save Really Simple SSL settings first, then re-save WP Ghost to ensure correct .htaccess rule order. - [CDN URL Mapping in WP Ghost - Extend Path Changes to CDN Domains](https://hidemywpghost.com/kb/cdn-url-mapping/): Extend WP Ghost path changes to CDN-served assets. When your CDN uses a different domain, standard path rewriting misses those URLs. - [Hide WordPress Version Numbers and Generator META with WP Ghost](https://hidemywpghost.com/kb/hide-wordpress-version/): Remove WordPress generator META, version parameters from CSS/JS files, WPML/Slider Revolution/WPBakery generator tags, and DNS prefetch with one toggle. - [How to Change the WordPress Logout Path with WP Ghost](https://hidemywpghost.com/kb/how-to-change-wordpress-logout-path-for-enhanced-security-with-hide-my-wp-ghost/): Change the WordPress logout path with WP Ghost to complete your path-hiding strategy. Prevent CSRF logout attacks, remove CMS fingerprints, and keep… - [How to Change the Activation Path (wp-activate.php) in WordPress with WP Ghost](https://hidemywpghost.com/kb/how-to-change-activation-path-with-hide-my-wp-ghost-plugin/): This tutorial has moved to the new WP Ghost Knowledge Base where each feature is presented in detail. - [How to Change the Author Path, Hide Author ID, and Block User Enumeration in WordPress with WP Ghost](https://hidemywpghost.com/kb/how-to-change-author-path-and-hide-id-with-hide-my-wp-ghost-plugin/): Change the WordPress author path, hide author IDs, and block user enumeration through the REST API, oEmbed, and sitemaps with WP Ghost. - [How to Change the wp-content/uploads Path in WordPress with WP Ghost](https://hidemywpghost.com/kb/how-to-change-the-wp-content-uploads-path-using-the-hide-my-wp-ghost-plugin/): Change the WordPress uploads path with WP Ghost to hide media file URLs from scanners. Every image reveals /wp-content/uploads/ by default. - [Hide Style IDs from META Tags in WordPress with WP Ghost](https://hidemywpghost.com/kb/hide-ids-from-meta-tags/): Remove ID attributes from stylesheet and script tags in WordPress source code. WordPress adds plugin and theme names as IDs to every enqueued asset. - [WP Ghost User Events Log - Track WordPress Dashboard Activity](https://hidemywpghost.com/kb/users-activity-log/): Track every security-relevant action on your WordPress site with WP Ghost's User Events Log. Monitor logins, plugin changes, post deletions, and settings… - [WP Ghost Website Security Check - Complete WordPress Security Audit](https://hidemywpghost.com/kb/website-security-check/): Run a complete security audit of your WordPress site with WP Ghost's Security Check. Scans 40+ security tasks including PHP version, debug modes, outdated… - [How to Change and Hide the wp-admin Path in WordPress with WP Ghost](https://hidemywpghost.com/kb/how-to-change-and-hide-wp-admin-path-with-hide-my-wp-ghost-plugin/): Change and hide the default WordPress wp-admin path with WP Ghost to block brute force attacks and prevent bots from finding your admin dashboard. - [Add Security Headers to WordPress with WP Ghost (HSTS, CSP, X-Frame-Options)](https://hidemywpghost.com/kb/header-security/): Enable seven HTTP security headers in WordPress with one toggle in WP Ghost. Covers HSTS, Content-Security-Policy, X-Frame-Options, X-XSS-Protection,… - [How to Change the Register Path in WordPress with WP Ghost](https://hidemywpghost.com/kb/how-to-change-register-path-for-enhanced-wordpress-security-with-hide-my-wp-ghost/): Change the WordPress registration path with WP Ghost to block spam bot signups, prevent username enumeration, and stop fake accounts. - [How to Customize WordPress Paths with WP Ghost - Complete Guide](https://hidemywpghost.com/kb/customize-paths-in-hide-my-wp-ghost/): Learn how to change and secure every WordPress path including wp-admin, wp-login, plugins, themes, REST API, and more using WP Ghost. - [How to Disable XML-RPC Access in WordPress with WP Ghost](https://hidemywpghost.com/kb/how-to-disable-xml-rpc-access-using-hide-my-wp-ghost-plugin/): Disable WordPress XML-RPC to block brute force amplification via system.multicall, DDoS pingback abuse, and CMS fingerprinting. - [How to Activate Security Tweaks in WP Ghost - Complete Guide](https://hidemywpghost.com/kb/activate-security-tweaks/): Learn how to activate all security tweaks in WP Ghost to remove WordPress fingerprints, hide version tags, secure feeds and sitemaps, control redirects, and… - [Login Page Design Customization with WP Ghost](https://hidemywpghost.com/kb/login-page-design-customization/): Replace the default WordPress login with a branded page using WP Ghost. Custom logo, layout presets, colors, and background. Built-in feature, no extra plugin. - [WP Ghost Advanced Settings - Rollback, Compatibility, and Recovery](https://hidemywpghost.com/kb/advanced-wp-security/): Configure WP Ghost's advanced settings for rollback recovery, server compatibility, plugin loading order, and rewrite rule management. - [How to Change and Hide the wp-content Path in WordPress with WP Ghost](https://hidemywpghost.com/kb/how-to-change-wp-content-path-with-hide-my-wp-ghost-plugin/): Change and hide the WordPress wp-content path with WP Ghost to remove the most visible WordPress fingerprint. - [Redirect WordPress Images from Old Paths to New Paths with WP Ghost](https://hidemywpghost.com/kb/redirect-images-from-the-old-paths-to-the-new-paths/): Redirect old WordPress image URLs from /wp-content/uploads/ to custom paths. Preserve external links, consolidate image SEO, and prevent duplicate content.