.htaccess Site Access Control

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

Share of active installs on each version of this plugin · 100% run the current release. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Refined from the date this plugin crossed into its current band.

No paid tier is visible, so we don't put a figure on revenue or sale value: that would be guessing. The install base is a real asset to an acquirer, just not one public data lets us price. A small install base leaves thin data to model from.

1. ★★★★★ pcgardner

   9.8y ago

   The purpose of this plugin is to create additional password protection for the wp-login page, or the wp-admin folder, or even your entire site. It does this by the standard method of adding code to the .htaccess file that gets an additional username and password from a .htpasswd file (in which the MD5 hash of the password is used rather than the password itself). So far so good: it works, but it could be better – hence four stars. When you open the plugin’s settings page, it asks you to enter a new user. At first I thought I had to enter my WordPress username, but in fact it wants the new username that you want to use for the additional login box. I realised that when I thought about it, but it should be made clearer. More seriously, it puts the .htpasswd file in the same directory as the .htaccess file that it has modified. That is within the webroot, and so is accessible via http – although the plugin author has attempted to mitigate this by adding some more code to .htaccess preventing Apache from serving .ht* files. Much better is to put the .htpasswd file into the private folder, which is outside the webroot. I did that manually by moving the file and altering the location in .htaccess, both of which can be done using FTP, but it’s not convenient. Conclusion: using the plugin is quicker than doing the whole thing manually. It would be quicker still if the settings page allowed you to choose where .htpasswd should be placed. The main advantage of the plugin is that it creates the .htpasswd file automatically; otherwise you would need console access to the server in order to run a script to create the file, or the ability to calculate the MD5 hash of the password if you want to create the file in a text editor.

   Read on wp.org ↗
2. ★★★★★ bill57

   10.2y ago

   Ce plugin fait sont travail, protéger l’admin, créer des htaccess et htpasswd et en plus ça fonctionne

   Read on wp.org ↗
3. ★★★★★ hendsiyas

   10.2y ago

   I try to manually set password on the wp-admin page but did not work, this plugins work, but with some bugs. First GUI bug, if I disable some option, it ask for password even when the user and password form not showed. And 2nd bug is with woocommerce. If I enable Protection for wp-login, when buyer logoff their account, this plugin ask for password. The only solution is disabled wp-login protection and only enable it on wp-admin page. Not perfect but this plugins work. Hope you fix the bug and get more download.

   Read on wp.org ↗

Automated install-time checks, tested on PHP 7.2.16 · WP 5.3

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

1. 2024-12-31 900+ → 800+ down after 291 days in tier
2. 2024-03-15 1K+ → 900+ down after 1 days in tier
3. 2024-03-14 900+ → 1K+ up after 1 days in tier
4. 2024-03-13 1K+ → 900+ down after 1 days in tier
5. 2024-03-12 900+ → 1K+ up after 1 days in tier
6. 2024-03-11 1K+ → 900+ down after 1 days in tier
7. 2024-03-10 900+ → 1K+ up after 2 days in tier
8. 2024-03-08 1K+ → 900+ down

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

• htaccess protect 800+ installs · 3.8★ · 3 shared tags D
• Wordfence Security – Firewall, Malware Scan, and Login Security 5M+ installs · 4.7★ · 1 shared tag A
• Hostinger Tools 3M+ installs · 3.6★ · 1 shared tag B
• Really Simple Security – Simple and Performant Security (formerly Really Simple SSL) 3M+ installs · 4.9★ · 1 shared tag A
• Jetpack – WP Security, Backup, Speed, & Growth 3M+ installs · 3.8★ · 1 shared tag A
• Redirection 2M+ installs · 4.4★ · 1 shared tag B

Embed this report card

Drop a live Pulse card for .htaccess Site Access Control into a readme, a review or a deck. It updates itself.

.htaccess Site Access Control: 800+ active installs, 4.0★ (3 reviews). Plugin Pulse (WP Mayor), as of 2026-08-29. https://plugins.wpmayor.com/plugin/htaccess-site-access-control