You can prevent WP Ghost from automatically checking for updates by adding a constant to wp-config.php. By default, WP Ghost periodically contacts its update server to check for new versions. If you want to control when updates are checked (for example, on staging environments, locked-down production sites, or sites with strict outbound request policies), you can disable automatic checks and run them manually instead.
Why Disable Automatic Update Checks?

WP Ghost checks for updates periodically by contacting the update server. In most cases, this is fine and ensures you’re always running the latest version with the newest security patches. However, some situations benefit from disabling automatic checks: staging or development environments where you don’t want outbound requests, production sites with strict change-management policies, or environments where external HTTP requests are restricted by hosting or firewall rules.
Disable Automatic Update Checks
- Access your site’s root directory via FTP (FileZilla, etc.), cPanel File Manager, or SSH.
- Open the
wp-config.phpfile. - Add the following line before the
/* That's all, stop editing! Happy publishing. */comment:
define('WP_AUTO_UPDATE_HMWP', false);- Save the file.
WP Ghost will no longer contact the update server automatically. You can still check for and install updates manually at any time.
Keep WP Ghost updated. Disabling automatic checks means you won’t receive notifications about new security patches. Check for updates manually on a regular schedule to ensure your site stays protected against newly discovered vulnerabilities.
Manually Check for Updates
With automatic checks disabled, you can still check for updates manually:
- Go to Plugins > Installed Plugins in your WordPress dashboard.
- Find WP Ghost in the list.
- Click the Check for Updates link to check for and install any available updates.
To re-enable automatic checks, remove the define('WP_AUTO_UPDATE_HMWP', false); line from wp-config.php or change false to true. WP Ghost will resume checking for updates automatically.
Frequently Asked Questions
Does this affect my site’s security?
Not directly. The constant only disables the automatic check for new versions. All existing WP Ghost security features (firewall, brute force protection, path security, 2FA) continue working normally. However, you may miss important security patches if you don’t check for updates manually.
Does this affect WordPress core or other plugin updates?
No. The WP_AUTO_UPDATE_HMWP constant only affects WP Ghost’s own update check. WordPress core updates, other plugin updates, and theme updates are not affected.
How do I re-enable automatic updates?
Remove the define('WP_AUTO_UPDATE_HMWP', false); line from wp-config.php, or change the value to true. Save the file.
Does WP Ghost modify WordPress core files?
No. The constant is added to wp-config.php, which is your site’s configuration file, not a WordPress core file. WP Ghost itself doesn’t modify any core files.
Related Tutorials
WP Ghost configuration and management:
- Backup and Restore Settings – Export and import WP Ghost configurations.
- Emergency Disable – Other wp-config.php constants for WP Ghost.