About this plugin
Password-protect your entire WordPress site with a simple, branded access screen. PrimePlaced – Advanced password protection helps you lock a development site, share a private client preview, keep a staging site closed, or run a private blog — without building a full membership system.
Visitors see a password screen before they can reach any protected content. Once the correct password is entered, access is remembered for the current browser session or for a number of days you choose in the plugin settings.
The free version gives you a complete, site-wide password gate with practical customization options and clear controls in the WordPress dashboard. No coding required.
Free Features
- Site-Wide Password Protection: Lock the public frontend of your entire WordPress site behind one primary password.
- Customizable Password Screen: Add your logo, adjust background colors, and edit the heading, field labels, button text, and error message.
- Session or Duration-Based Access: Let visitors stay signed in for one browser session or remember access for a chosen number of days.
- Live Design Preview: Review password screen changes in real time from the admin area.
- Protection Status Widget: See your site’s lock status and key protection details right from the WordPress dashboard.
- Cache-Friendly Access Control: Uses cache-busting headers and integrates with common caching workflows to help prevent stale cached pages from bypassing the lock screen.
- Built-In Attempt Throttling: Slows down repeated password checks to reduce automated guessing attempts.
PrimePlaced is built for agencies, developers, site owners, and anyone who needs a fast, reliable way to password-protect a WordPress site during development, client review, migration, or private sharing.
PRO Features
The optional Pro extension adds advanced password protection and granular access control for larger sites, agencies, stores, and client projects.
- Multiple Passwords: Create separate passwords, each with its own settings and access rules.
- Scheduled Passwords: Set activation and expiration dates for temporary or time-based access.
- Specific Content Protection: Protect individual posts, pages, products, categories, custom post types, and taxonomies instead of locking the whole site.
- Editor and Template Integrations: Manage protection from the Gutenberg and classic editors, and use password form blocks with branded lock screen templates.
- Role and IP Bypass: Let selected user roles or trusted IP addresses skip the password screen entirely.
- Advanced Session Controls: Configure remember-me behavior and stricter re-authentication rules per protected area.
- Bot Protection: Add Google reCAPTCHA v2 or invisible reCAPTCHA v3 to password forms when enabled by the administrator.
- Activity Logs and Reports: Review authentication attempts, configure log retention, and use export, statistics, backup, and import tools.
- WooCommerce and Custom Content Rules: Apply password protection to products, product categories, and other public content types.
Privacy Policy
When protection features are active, this plugin stores and processes the following data on your WordPress site:
Cookies:
* Functional cookies store the temporary authentication token needed to remember an authorized visitor.
* The cookie can last for the current browser session or for a number of days selected by the administrator.
Activity Logs (Pro Only):
* IP addresses associated with authentication requests.
* Browser user-agent strings used for diagnostic information.
* Timestamps of access evaluations.
* Evaluation status codes such as successful, failed, or blocked attempts.
Plugin settings and cookie configuration are stored locally in your WordPress database at all times. The dedicated activity log table (Pro only) is likewise created and maintained entirely on your own server infrastructure.
Third-Party Services
This plugin includes or integrates with the following external services:
- Freemius – Used for optional account connection, licensing, upgrade checkout, support/account screens, and software update services. Communication with Freemius happens through administrator-initiated opt-in, account, checkout, support, or update flows. Privacy Policy: https://freemius.com/privacy/
- Google reCAPTCHA (Pro Only) – Used only when a site administrator configures and enables a Pro reCAPTCHA module for bot mitigation on password forms. Depending on the configured version, Google may receive information such as the visitor’s IP address and browser/device data. Privacy Policy: https://policies.google.com/privacy