# WP Ghost
> WP Ghost stops WordPress hacks before they start. Hide paths, block bots with 7G/8G Firewall, add 2FA & brute force protection. Trusted by 250,000+ sites.

This file is the curated index of wpghost.com. For the complete content of every page in one file, see the companion `llms-full.txt`. Sections below group entry-point pages by intent; the `## Optional` section at the end contains specific reference material that can be skipped for shorter context.

## Start Here
- [WP Ghost (Hide My WP Ghost) - Knowledge Base](https://wpghost.com/kb/): Discover comprehensive guides, troubleshooting tips, and best practices for using WP Ghost (Hide My WP Ghost).
- [WP Ghost Pricing - WordPress Hack Prevention Plugin From $29.99](https://wpghost.com/pricing/): Stop bot attacks before they reach WordPress. WP Ghost hides paths, blocks threats with 7G/8G Firewall, and adds 2FA. Plans from $29.99/yr. 30-day guarantee.
- [Install WP Ghost Premium Plugin, Safe Mode & Ghost Mode Setup](https://wpghost.com/kb/install-wp-ghost-premium-plugin/): Install WP Ghost Premium, activate your license token, and choose Safe Mode (max compatibility) or Ghost Mode (max security) for WordPress hack prevention.
- [Install WP Ghost Free Plugin for WordPress - Setup Guide](https://wpghost.com/kb/install-wp-ghost-plugin/): Step-by-step guide to installing, activating, and configuring WP Ghost free from the WordPress directory. Set up Lite Mode path security in minutes.

## Getting Started
- [How Do I Install Security Plugins in WordPress? (Guide)](https://wpghost.com/kb/faqs/how-do-i-install-security-plugins-in-wordpress/): Learn how to install and configure a WordPress security plugin step by step. Covers plugin search, activation, settings, and hack prevention tips with WP Ghost.
- [Can I Reverse All WP Ghost Settings to Pre-Install State?](https://wpghost.com/kb/faqs/can-i-reverse-all-settings/): Yes. Every WP Ghost setting is reversible. Deactivate the plugin and all custom paths revert to defaults instantly.
- [How Do I Set Up Two-Factor Authentication in WordPress?](https://wpghost.com/kb/faqs/how-do-i-set-up-two-factor-authentication-in-wordpress/): Set up WordPress 2FA with WP Ghost in under 3 minutes. Choose authenticator app, email code, or passkey (Face ID, Touch ID, Windows Hello).
- [Set Up WP Ghost in Safe Mode in 3 Minutes](https://wpghost.com/kb/set-up-wp-ghost-in-safe-mode-in-3-minutes/): This video shows how to set up WP Ghost in Safe Mode with custom login and setup - in just 3 minutes!

## Features
- [Protect wp-config.php: WordPress Security Guide 2026](https://wpghost.com/protect-wp-config-php/): Protect wp-config.php in WordPress: move it above the web root, deny direct access, set 600 permissions, rotate keys, and return 404 to probes. 2026 guide.
- [How AI Scanners Find and Pick WordPress Targets](https://wpghost.com/how-ai-scanners-pick-wordpress-targets/): Automated scanners classify your stack, then route an exploit. Remove the fingerprint and reconfigure default paths to fail step one and drop off the list.
- [WordPress Path Security: Change Paths, Break Attacks](https://wpghost.com/wordpress-path-security/): WordPress path security changes default login, admin, and file paths so automated probes return 404 before PHP runs. What it is, how to do it, 2026 data.
- [Attack Surface Reduction for WordPress (2026 Guide)](https://wpghost.com/attack-surface-reduction/): Shrink your WordPress attack surface: disable unused endpoints, change default paths, enforce least privilege at the server layer.
- [WordPress Hack Prevention: Stop Attacks Before They Hit](https://wpghost.com/wordpress-hack-prevention/): Prevention-first WordPress security: reduce attack surface, change login paths, reject probes at the rewrite layer. 2026 data + how it beats scan-and-clean.
- [Wordfence vs WP Ghost: Which Do You Need? (Usually Both)](https://wpghost.com/wordfence-vs-wp-ghost/): Wordfence detects and cleans; WP Ghost prevents before PHP loads. An honest, layer-by-layer comparison of why most WordPress stacks run both.
- [Hide wp-admin: rename vs. reconfigure the login path](https://wpghost.com/hide-wp-admin-why-renaming-the-login-url-isnt-the-same-as-making-it-disappear/): Renaming your WordPress login URL moves the form. It doesn't change what answers at the old path or what your HTML reveals. Here's the real difference.
- [WordPress Plugin Supply Chain: The Second Line of Defense](https://wpghost.com/the-wordpress-plugin-supply-chain-auditing-your-stack-is-the-first-line-of-defense-not-the-only-one/): Auditing plugins is your first line of defense against a WordPress supply chain attack. The second: reconfigure paths so post-compromise recon goes blind.
- [Renamed Login Still Attacked? Why It's the Wrong Layer](https://wpghost.com/your-security-plugin-logged-the-attack-and-didnt-stop-it-rotating-ip-brute-force-and-the-renamed-login-bypass/): Rotating-IP brute force beats rate limiting and a renamed login gets hit via XML-RPC. Both are the same problem: the defense keys on the wrong layer.
- [WordPress Firewall Before the Patch: Closing the Gap](https://wpghost.com/wordpress-firewall-before-the-patch/): Exploits hit hours after disclosure but most sites patch weekly. How a request-filtering layer and path reconfiguration protect WordPress before you update.
- [Set Up WordPress 2FA with Mobile Authenticator Apps WP Ghost](https://wpghost.com/kb/setting-up-two-factor-authentication-2fa-for-wordpress-using-mobile-apps/): Step-by-step guides to connect WP Ghost 2FA with Google Authenticator, Authy, Microsoft Authenticator, or LastPass. Scan QR code, enter verification code, done.
- [Security Presets - One-Click WordPress Protection WP Ghost](https://wpghost.com/kb/preset-security-options/): Load a tested security configuration in one click. Four presets from minimal to full Ghost Mode with firewall, brute force, 2FA, and logging.
- [WP Ghost Security Modes: Lite, Safe & Ghost Mode Explained](https://wpghost.com/kb/difference-between-safe-mode-and-ghost-mode-in-wp-ghost/): WP Ghost offers 3 security levels: Lite Mode (free), Safe Mode (Premium, max compatibility), and Ghost Mode (Premium, max security). See which fits you.

## Compatibility
- [WP Ghost Plugin Compatibility WooCommerce, Elementor, More](https://wpghost.com/kb/category/compatibility/plugins/): Configure WP Ghost with WooCommerce, Elementor, Wordfence, Sucuri, Solid Security, WP Rocket, LiteSpeed Cache, Cloudflare, and 50+ popular WordPress plugins.
- [WP Ghost Compatibility Plugins, Themes, Servers, Hostings](https://wpghost.com/kb/category/compatibility/): WP Ghost compatibility with WooCommerce, Elementor, Wordfence, Cloudflare, Nginx, LiteSpeed, Kinsta, WP Engine, SiteGround, and 50+ other plugins and platforms.
- [WP Ghost and Wordfence Compatibility Setup Guide](https://wpghost.com/kb/wp-ghost-and-wordfence-security/): Use WP Ghost with Wordfence for layered WordPress protection. Path security, brute force, 2FA in WP Ghost; application firewall and malware scanner in…
- [WP Ghost and Solid Security Compatibility Setup Guide](https://wpghost.com/kb/wp-ghost-and-solid-security/): Use WP Ghost with Solid Security (formerly iThemes Security) together. Path security and firewall in WP Ghost; hardening, password policies, and scanning in…
- [WP Ghost and Zapier Compatibility Setup Guide](https://wpghost.com/kb/wp-ghost-and-zapier/): Configure WP Ghost with Zapier. Whitelist Zapier User Agent and AWS IP addresses to allow XML-RPC API access while keeping XML-RPC blocked for public traffic.
- [WP Ghost on Ploi.io Server Setup Guide](https://wpghost.com/kb/setup-wp-ghost-on-ploi-io/): Set up WP Ghost on Ploi.io Nginx server. Add include line through Ploi's Nginx editor, deploy config. Disable OPCache during setup. Step-by-step Ploi.io guide.
- [RunCloud WP Ghost Setup Step by Step Guide Hybrid](https://wpghost.com/kb/runcloud-wp-ghost-setup/): Setup WP Ghost on RunCloud with NGINX + Apache2 Hybrid (recommended) or Native NGINX. Configure path security, add the include directive, rebuild Nginx config.
- [WP Ghost on AWS Lightsail (Bitnami) Setup Guide](https://wpghost.com/kb/how-to-setup-hide-my-wp-on-amazon-aws-lightsail/): Set up WP Ghost on AWS Lightsail Bitnami WordPress. Enable AllowOverride All or add rules to httpd-app.conf. Two options with step-by-step SSH configuration.
- [WP Ghost on Google Cloud Platform Setup AllowOverride](https://wpghost.com/kb/enable-allowoverwrite-on-google-cloud-platform/): Enable AllowOverride All on Google Cloud Platform for WP Ghost. Enable mod_rewrite, set AllowOverride All in apache2.conf, restart Apache. One-time SSH setup.
- [WP Ghost on GoDaddy Managed WordPress Setup Guide](https://wpghost.com/kb/godaddy-hosting-wp-ghost-setup/): Set up WP Ghost on GoDaddy Managed WordPress hosting. Disable GoDaddy CDN first, then activate WP Ghost normally. Use external CDN like Cloudflare if needed.
- [WP Ghost on Windows IIS Server Setup Guide IIS](https://wpghost.com/kb/setup-wp-ghost-on-windows-iis-server/): Set up WP Ghost on Windows IIS server. Add rewrite rules to web.config, install IIS URL Rewrite Module, restart IIS. Step-by-step IIS configuration guide.
- [WP Ghost and ManageWP Compatibility Setup Guide](https://wpghost.com/kb/wp-ghost-and-manage-wp/): Configure WP Ghost with ManageWP. Set Plugin Loading Hook to Must Use Plugin to avoid ManageWP worker conflicts. Step-by-step compatibility guide for ManageWP.
- [WP Ghost on WPMUDEV Hosting Setup Guide](https://wpghost.com/kb/wpmudev-server-wp-ghost-setup/): Set up WP Ghost on WPMUDEV managed hosting. Use the Minimal preset without config changes (recommended), or contact WPMUDEV support for full Nginx path…
- [WP Ghost on Bitnami Nginx Server Setup Guide](https://wpghost.com/kb/bitnami-servers-wp-ghost-setup/): Set up WP Ghost on Bitnami Nginx servers (AWS Lightsail, Google Cloud, Azure). Add include line to server block config, restart Nginx. One-time SSH setup guide.
- [WP Ghost and Autoptimize Cache Setup Guide Compat](https://wpghost.com/kb/wp-ghost-and-autoptimize-cache/): Configure WP Ghost with Autoptimize cache. Change the cache directory, enable CSS/JS aggregation, turn on Change Paths in Cache Files. Step-by-step setup guide.
- [WP Ghost and WP Rocket Cache Setup Guide Compat](https://wpghost.com/kb/wp-ghost-and-wp-rocket-cache/): Configure WP Ghost with WP Rocket cache. Enable file optimization, Change Paths in Cache Files. WP Ghost auto-detects WP Rocket and maps cache URLs…
- [WP Ghost on Kinsta Hosting Setup Guide](https://wpghost.com/kb/kinsta-server-wp-ghost-setup/): Set up WP Ghost on Kinsta managed WordPress hosting. Use the Minimal preset without config changes, or contact Kinsta support for full path security via Nginx.
- [WP Ghost on WP Engine Setup Guide Config](https://wpghost.com/kb/wp-engine-wp-ghost-setup/): Set up WP Ghost on WP Engine managed hosting. Add Internal Rewrite rules to WP Engine Web Rules Engine. One-at-a-time or bulk upload. Step-by-step setup guide.
- [WP Ghost on Flywheel Server Setup Guide Config](https://wpghost.com/kb/flywheel-server-wp-ghost-setup/): Set up WP Ghost on Flywheel managed hosting. Add redirect rules to Flywheel's Redirect Tool, clear cache, and verify. Step-by-step Flywheel configuration guide.
- [WP Ghost and Breeze Cache Plugin Setup Guide Compat](https://wpghost.com/kb/wp-ghost-and-breeze-cache-plugin/): Configure WP Ghost with Breeze cache by Cloudways. Enable minification, exclude custom paths from caching, turn on Change Paths in Cache Files. Step-by-step.
- [WP Ghost and Hummingbird Cache Plugin Setup Guide](https://wpghost.com/kb/wp-ghost-and-hummingbird-cache-plugin/): Configure WP Ghost with Hummingbird cache. Change cache directory, enable minification, and turn on Change Paths in Cache Files for full WordPress path…
- [WP Ghost on Nginx VPS Setup Guide Server Config](https://wpghost.com/kb/setup-wp-ghost-on-nginx-web-server-with-virtual-private-server/): Set up WP Ghost on Nginx VPS with root access. Add include line to your server block, reload Nginx.
- [Cloud Panel Server WP Ghost Setup Step by Step Guide](https://wpghost.com/kb/cloud-panel-server-wp-ghost-setup/): Install WP Ghost on Cloud Panel Nginx servers. Set server type, configure paths, include hidemywp.conf in the Vhost above the settings line, restart Nginx.
- [Setup Plesk to Work as Apache for WP Ghost Guide](https://wpghost.com/kb/setup-plesk-to-work-as-apache/): Configure Plesk so Apache handles all content instead of Nginx serving static files. Enable WP Ghost path security on Plesk hosting. Step-by-step setup guide.
- [WP Ghost on InMotion Hosting Setup Guide Config](https://wpghost.com/kb/inmotion-wordpress-hosting-wp-ghost-setup/): Set up WP Ghost on InMotion Hosting. Add Force Passthrough rule in Cache Manager for static files.
- [Setup WP Ghost on Nginx Server Guide](https://wpghost.com/kb/setup-wp-ghost-on-nginx-server/): Set up WP Ghost on Nginx. Add the hidemywp.conf include to your server block, reload Nginx. Covers sites-available, conf.d, and direct nginx.conf…
- [WP Ghost on Local by Flywheel Setup Guide Config](https://wpghost.com/kb/local-flywheel-wp-ghost-setup/): Set up WP Ghost on Local by Flywheel (Nginx). Set server type, add include to site.conf.hbs, restart server. Only needed for Nginx; Apache works automatically.
- [WP Ghost and LiteSpeed Cache Setup Guide Compat](https://wpghost.com/kb/wp-ghost-and-litespeed-cache/): Configure WP Ghost with LiteSpeed Cache. Enable Change Paths in Cache Files, whitelist QUIC.cloud IPs, obtain Domain Key. Complete LiteSpeed CDN setup guide.
- [WP Ghost on YunoHost Server Setup Guide](https://wpghost.com/kb/yunohost-server-wp-ghost-setup/): Set up WP Ghost on YunoHost self-hosted server. Add include line to domain Nginx config in /etc/nginx/conf.d/. Restart via SSH or admin panel. Step-by-step.
- [WP Ghost on aaPanel Multi-WebServer Setup Nginx + OLS](https://wpghost.com/kb/wp-ghost-and-aapanel-multi-webserver-hosting/): Fix WP Ghost on aaPanel Multi-WebServer (Nginx + OpenLiteSpeed). Run the static fallback script so Nginx forwards rewritten URLs to OLS. One-time setup guide.

## Developer Reference
- [WP Ghost Admin Mapping Add-on Setup Guide](https://wpghost.com/kb/wp-ghost-admin-mapping/): Customize WordPress admin dashboard URLs and text with WP Ghost Admin Mapping. Change parameter names, values, and visible text. Free add-on setup guide.
- [Disable WP Ghost for User Roles Whitelist IP](https://wpghost.com/kb/disable-hide-my-wp-ghost-for-user-roles/): Disable WP Ghost path changes for specific user roles or whitelisted IPs. Use built-in IP whitelist or role-based filter in functions.php. Two methods guide.
- [Disable WP Ghost on Specific Pages Whitelist](https://wpghost.com/kb/disable-wp-ghost-on-specific-pages/): Disable WP Ghost path changes on specific pages using Whitelist Paths or the hmwp_process_init filter. Exclude pages with compatibility issues. Two methods.

## Account & Agency Tools
- [WP Ghost White Label Setup Guide Agency](https://wpghost.com/kb/whitelabel-in-wp-ghost/): White label WP Ghost with your brand name, logo, and menu icon. Configure in Dashboard, download customized ZIP, install on client sites. Agency setup guide.

## Troubleshooting
- [WP Ghost Error Troubleshooting Fix Common WordPress Issues](https://wpghost.com/kb/category/errors/): Fix 404 errors, redirect loops, broken login, frontend not loading, style issues, and other common WP Ghost errors.
- [Can I Remotely Disable WP Ghost on a Client's Website?](https://wpghost.com/kb/faqs/is-there-a-way-to-remotely-disable-the-plugin/): Yes, remotely disable WP Ghost from your dashboard without logging in to the client's WordPress. Paths revert to default automatically and the site keeps…
- [Why Do I Get a 404 Error When I Access My New Admin URL?](https://wpghost.com/kb/faqs/404-error-when-accessing-admin-url/): The 404 is intentional when Hide the New Admin Path is on. Log in through your custom login path first, you'll be redirected to the dashboard.
- [Getting Locked Out After Exceeding Max Fail Attempts](https://wpghost.com/kb/getting-locked-out-after-exceeding-max-fail-attempts/): If you see the message “Your IP has been flagged for potential security violations” after entering wrong credentials or 2FA codes, WP Ghost’s brute force…
- [Cannot Access the Login Page After Changing Wp-Login Path](https://wpghost.com/kb/cannot-access-the-login-page-after-changing-wp-login-path/): If you can’t reach the login page or see errors after changing the login path in WP Ghost, work through these checks.
- [Preventing 404 Errors After Deactivating WP Ghost](https://wpghost.com/kb/preventing-404-errors-after-deactivating-hide-my-wp-ghost/): If you deactivate WP Ghost after using custom paths (Safe Mode or Ghost Mode), search engines and external sites may still link to your content using the old…
- [Disable WP Ghost In Case Of Error](https://wpghost.com/kb/disable-wp-ghost-in-case-of-error/): Disable WP Ghost in case you're stuck in front-end or if the theme is not loading properly.

## Does
- [How Does WP Ghost Compare to WP Hide?](https://wpghost.com/kb/faqs/how-does-hide-my-wp-ghost-compare-to-wp-hide/): WP Ghost covers everything WP Hide does plus firewall, 2FA, brute force, country blocking, and security headers. Running both causes rule conflicts.
- [How Does WP Ghost Compare to Wordfence?](https://wpghost.com/kb/faqs/how-does-wp-ghost-compare-to-wordfence/): WP Ghost handles prevention (path security, passkeys, firewall). Wordfence handles detection (malware scanning, file integrity).
- [Does WP Ghost Write Codes Into PHP Files?](https://wpghost.com/kb/faqs/does-hide-my-wp-ghost-write-codes-into-php-files/): No. WP Ghost never writes to PHP files. It uses .htaccess rewrite rules on Apache, hidemywp.conf on Nginx, web.config on IIS, and WordPress filters in memory.
- [Does WP Ghost Protect My Site from Clickjacking?](https://wpghost.com/kb/faqs/does-wp-ghost-protect-you-from-clickjaking/): Yes. WP Ghost blocks clickjacking with X-Frame-Options and Content-Security-Policy frame-ancestors headers. Enable it with one toggle in Header Security.
- [Does WP Ghost Work in Shared Hosting Plans?](https://wpghost.com/kb/faqs/does-hide-my-wp-ghost-work-in-shared-hosting-plans/): Yes. WP Ghost works on all Apache shared hosting out of the box, and on Nginx shared hosting via the Minimal preset with no server config changes needed.
- [Does WP Ghost Have 7G Firewall Protection?](https://wpghost.com/kb/faqs/does-wp-ghost-have-7g-firewall-protection/): Yes. WP Ghost includes 7G and 8G Firewall by Jeff Starr plus Minimal and Medium levels. Server-level rules block SQL injection and bots before WordPress loads.
- [Does WP Ghost Rewrite PDF Links on the Frontend?](https://wpghost.com/kb/faqs/does-wp-ghost-rewrite-links-on-the-front-end/): Yes. WP Ghost automatically rewrites every PDF, image, and media link when you change the uploads path. Files never move, URLs update across your entire site.
- [Does WP Ghost Work with WordPress Migration Plugins?](https://wpghost.com/kb/faqs/will-it-affect-wordpress-migration-plugins/): Yes. WP Ghost works with Duplicator, UpdraftPlus, All-in-One WP Migration, and others. Back up settings, deactivate before migrating, reactivate and restore on…
- [How Does WP Ghost Compare to CloudFilt?](https://wpghost.com/kb/faqs/how-does-wp-ghost-compare-to-cloudfilt/): WP Ghost hides your WordPress fingerprint at the application layer. CloudFilt filters bots at the edge. Different layers, complementary, many sites run both.
- [Does WP Ghost Replace Wordfence, Sucuri, or VirusDie?](https://wpghost.com/kb/faqs/does-it-complement-overlap-or-replace-other-security-tools/): No. WP Ghost complements them. It handles prevention (path security, firewall, 2FA). They handle detection (malware scanning, file integrity, cleanup).
- [How Does WP Ghost Monitor Hacking Attempts?](https://wpghost.com/kb/faqs/how-extensive-is-the-monitoring-of-hacking-attempts/): WP Ghost tracks hacking attempts through the Security Threats Log with IP, country, threat type, detection rule, and block status.
- [Does WP Ghost Slow Down WordPress Sites?](https://wpghost.com/kb/faqs/does-hide-my-wp-ghost-slow-down-wordpress/): No. WP Ghost runs at the server level, blocking bots before WordPress loads. Path changes take 0.05s, and many users see faster sites due to reduced bot…
- [Does WP Ghost Include a CDN Server for CDN Mapping?](https://wpghost.com/kb/faqs/is-the-cdn-server-included/): No. WP Ghost includes CDN Mapping to apply path security to your CDN URLs, but you supply your own CDN (BunnyCDN, KeyCDN, StackPath, CloudFront, or others).
- [How Does WP Ghost Affect Existing Indexed Assets?](https://wpghost.com/kb/faqs/does-wp-ghost-affect-existing-assets/): WP Ghost does not move files or break indexed URLs. Enable Hide WordPress Common Paths with MEDIA Files for 301 redirects from old paths to new ones.
- [Does WP Ghost Affect SEO or Google Rankings?](https://wpghost.com/kb/faqs/will-using-wp-ghost-impact-the-seo-rankings/): No. WP Ghost does not hurt SEO. It only hides WordPress backend URLs that Google never indexes anyway.
- [Does WP Ghost Work With WP Umbrella?](https://wpghost.com/kb/faqs/does-wp-ghost-work-with-wp-umbrella/): Yes. Switch off "Hide login" in WP Ghost and match the REST API path in both plugins. WP Umbrella then manages your site normally behind WP Ghost.
- [Why Does IsItWP Still Show WordPress After WP Ghost?](https://wpghost.com/kb/faqs/why-detectors-like-isitwp-are-showing-wp-cms/): IsItWP and BuiltWith cache CMS detection results for up to 30 days. Use real-time detectors to verify WP Ghost is hiding your WordPress site correctly.
- [Does WP Ghost Work Without Custom Permalinks?](https://wpghost.com/kb/faqs/is-this-plugin-working-if-i-dont-have-custom-permalinks-on-my-site/): Yes. WP Ghost works with any WordPress permalink structure, including the default Plain setting. Post Name structure is recommended for better SEO and…
- [Does WP Ghost Work on WordPress Multisite?](https://wpghost.com/kb/faqs/is-this-plugin-working-on-wp-multisite/): Yes. WP Ghost supports both subdomain and subdirectory Multisite structures, works on Apache, Nginx, IIS, and LiteSpeed, and counts the entire network as one…
- [Does WP Ghost Work with All Cache Plugins?](https://wpghost.com/kb/faqs/does-wp-ghost-work-with-all-cache-plugins/): Yes. WP Ghost is tested with W3 Total Cache, WP Super Cache, LiteSpeed, Autoptimize, NitroPack, BunnyCDN, and 20+ other cache plugins.
- [Does WP Ghost Make My Website Invisible On FTP?](https://wpghost.com/kb/faqs/is-wp-ghost-going-to-make-my-website-invisible-on-ftp/): No. WP Ghost uses rewrite rules, not file changes. Your WordPress files look normal via FTP. Deactivating the plugin restores defaults instantly.
- [Does WP Ghost Come With a License Transfer System?](https://wpghost.com/kb/faqs/does-it-come-with-a-license-transfer-system/): No built-in transfer system, but you can still pass your WP Ghost license to a new owner. Change the account email or disconnect and reactivate the site.
- [Does Support Cover All Sites WP Ghost Is Installed On?](https://wpghost.com/kb/faqs/does-support-cover-all-the-websites/): Yes. Every site on your active WP Ghost subscription gets premium support. Typical response time is 24-48 hours.

## Security
- [What Is the WP Ghost Security Plugin for WordPress?](https://wpghost.com/kb/faqs/what-is-the-hide-my-wp-security-plugin-for-wordpress/): WP Ghost is a hack-prevention WordPress plugin that hides default paths, adds 7G/8G firewall rules, 2FA with passkeys, and brute force protection.
- [Can I Use WP Ghost With Solid Security?](https://wpghost.com/kb/faqs/can-i-use-hide-my-wp-ghost-with-ithemes-security/): Yes. WP Ghost handles path security, firewall, and passkey 2FA. Solid Security handles hardening and password policies. Disable overlapping features in one.
- [WP Ghost and Shield Security Compatibility Guide](https://wpghost.com/kb/wp-ghost-and-shield-security/): Use WP Ghost with Shield Security for layered WordPress protection. Path security and firewall in WP Ghost; bot detection and automated responses in Shield.
- [WP Ghost and WP Hide Security Enhancer Compatibility](https://wpghost.com/kb/wp-ghost-and-wp-hide-security-enhancer/): WP Ghost and WP Hide Security Enhancer overlap on path security. Use WP Ghost alone or disable path features in one plugin to avoid conflicts. Comparison guide.
- [WP Ghost and SiteGround Security Compatibility Guide](https://wpghost.com/kb/wp-ghost-and-siteground-security/): Use WP Ghost with SiteGround Security for layered WordPress protection. Path security, firewall, 2FA in WP Ghost; activity logging and post-hack tools in SG.
- [WP Ghost and WP Cerber Security Compatibility Guide](https://wpghost.com/kb/wp-ghost-and-wp-cerber-security/): Use WP Ghost with WP Cerber Security for layered WordPress protection. Path security, firewall, 2FA in WP Ghost; malware scanning and anti-spam in Cerber.
- [Do I Really Need a Security Plugin for WordPress?](https://wpghost.com/kb/faqs/do-i-really-need-a-security-plugin-for-wordpress/): Yes. WordPress default paths make every site a bot target. Learn why a hack-prevention plugin like WP Ghost is essential for protecting your WordPress site.
- [Same Login Path with Multiple Security Plugins? Don't](https://wpghost.com/kb/faqs/can-i-use-the-same-login-path-if-multiple-security-plugins-are-installed-on-the-website/): Using the same custom login path in two security plugins causes redirect loops and leaks your login URL to bots. Here is the safe setup.
- [What Value Does WP Ghost Add to My Security Stack?](https://wpghost.com/kb/faqs/what-value-does-hide-my-wp-ghost-add-to-my-security-stack/): WP Ghost is the prevention layer most WordPress security stacks are missing. Hides WordPress paths, blocks bot reconnaissance, and cuts automated attacks by…
- [What Security Plugin Should I Use Alongside WP Ghost?](https://wpghost.com/kb/faqs/what-other-security-plugin-do-you-recommend/): Pair WP Ghost with Wordfence, Sucuri, Solid Security, WP Cerber, or Shield for complete protection. WP Ghost prevents, the other plugin detects and cleans.
- [Can WP Ghost Replace Solid Security (iThemes)?](https://wpghost.com/kb/faqs/can-wp-ghost-replace-ithemes-security/): Partly. WP Ghost replaces Solid Security's login path, 2FA, and firewall with stronger versions. For file integrity and malware scanning, keep both plugins…
- [Can WP Ghost Be Used as a Stand-Alone Security Plugin?](https://wpghost.com/kb/faqs/can-wp-ghost-be-used-as-a-stand-alone-security-plugin/): Yes. WP Ghost covers path security, firewall, brute force, 2FA, and headers as a stand-alone plugin for most sites. Add a scanner only if your host lacks one.
- [Do I Still Need WP Ghost with Another Security Plugin?](https://wpghost.com/kb/faqs/do-i-still-need-wp-ghost-if-i-already-use-a-security-tool-or-plugin/): Yes. Most security plugins detect and respond to attacks. WP Ghost prevents them. Run both for layered defense: prevention plus detection equals complete…
- [Why is website security important?](https://wpghost.com/kb/why-is-website-security-important/): In this video, we’ll explore why website security matters and what can happen if it’s ignored. Learn how securing your site protects sensitive data and keeps…
- [Does WordPress Have Built-in Security?](https://wpghost.com/kb/does-wordpress-have-built-in-security/): In this video, we'll explore what security features WordPress offers and how they can protect your website from security threats.
- [Change the WordPress Database Prefix for Security WP Ghost](https://wpghost.com/kb/change-database-prefix-in-wordpress/): Replace the default wp_ database prefix with a random one to protect against SQL injection attacks. One-click change with undo option. WP Ghost Premium feature.
- [Security Monitor - Weekly Cloud Scanning for WordPress WP Ghost](https://wpghost.com/kb/wp-ghost-security-monitor/): Automated weekly WordPress security scans from the cloud. Get emailed when login paths are exposed or WordPress markers are visible.
- [Change WordPress File Permissions for Security WP Ghost](https://wpghost.com/kb/how-to-change-file-permissions-in-wordpress/): Fix incorrect WordPress file and directory permissions in one click with WP Ghost Security Check. Set 755 for directories, 644 for files, 444 for wp-config.php.
- [Backup and Restore WP Ghost Security Settings WP Ghost](https://wpghost.com/kb/backup-and-restore/): Export your complete WP Ghost security configuration as a backup file. Restore on the same site or import on other WordPress installations.
- [WP Ghost and Anti-Malware Security Compatibility Guide](https://wpghost.com/kb/hide-my-wp-ghost-with-anti-malware-security/): Use WP Ghost with Anti-Malware Security (GOTMLS) for prevention plus detection. Path security and firewall in WP Ghost; malware scanning and cleanup in GOTMLS.
- [Content Security Policy (CSP) for WordPress WP Ghost](https://wpghost.com/kb/content-security-policy-csp/): Configure Content Security Policy in WordPress with WP Ghost. Block XSS and script injection with CSP directives.
- [WP Ghost and Sucuri Security Compatibility Guide](https://wpghost.com/kb/wp-ghost-and-sucuri-security/): Use WP Ghost with Sucuri Security for prevention plus monitoring. Path security and firewall in WP Ghost; malware scanning, WAF, and incident response in…
- [How to Block Countries in WordPress with WP Ghost Geo Security](https://wpghost.com/kb/geo-security-country-blocking/): Block access to your WordPress site by country or restrict specific paths like login and checkout from selected countries.
- [How to Add Security Headers in WordPress with WP Ghost](https://wpghost.com/kb/header-security/): Add HSTS, Content-Security-Policy, X-Frame-Options, and other HTTP security headers to WordPress with one toggle in WP Ghost.
- [WordPress Security Check - 40 Security Tasks WP Ghost](https://wpghost.com/kb/website-security-check/): Scan your WordPress site for 39 security issues: outdated software, exposed paths, debug leaks, weak permissions, and more.
- [WP Ghost and WP Security Ninja Compatibility Guide](https://wpghost.com/kb/wp-ghost-and-wp-security-ninja/): Use WP Ghost with WP Security Ninja for prevention plus vulnerability testing. Path security and firewall in WP Ghost; 50+ security tests and scanning in Ninja.
- [WP Ghost with WooCommerce, Complete Ecommerce Security Guide](https://wpghost.com/kb/wp-ghost-with-woocommerce-ecommerce-security/): Secure your WooCommerce store with WP Ghost. Brute force protection on login, anti-spam for reviews, 8G firewall, security headers, and country blocking. Guide.
- [WP Ghost Security Features for WordPress Protection Guide](https://wpghost.com/kb/unmasking-wp-ghosts-hidden-security-features/): Path security, 8G firewall, brute force protection, 2FA, security headers, and country blocking. Explore every WP Ghost feature for proactive WordPress…
- [WP Ghost 9.0 Biggest Security Update of 2026](https://wpghost.com/kb/wp-ghost-9-0-biggest-security-update-of-2026/): WP Ghost 9.0 is the most significant release since the plugin was renamed from Hide My WP Ghost. This update introduces a redesigned security dashboard with a…
- [Security Threats Log - Monitor Blocked Attacks WP Ghost](https://wpghost.com/kb/security-threats-log/): Monitor every blocked attack on your WordPress site. View threat type, source IP, country, and targeted path.

## Optional
Specific configuration guides, less-common scenarios, and reference material. URLs in this section can be skipped if a shorter context is needed.
- [WP Ghost - Changelog and Updates](https://wpghost.com/kb/changelog/): Stay informed about the latest updates and improvements to the WP Ghost plugin. This changelog provides a detailed record of all version releases, including…
- [Two-Factor Authentication (2FA) for WordPress WP Ghost](https://wpghost.com/kb/two-factor-authentication/): Add 2FA to WordPress with WP Ghost - by authenticator app, email code, or passkey (Face ID, Touch ID, Windows Hello). Free feature. Three methods, one plugin.
- [WP Ghost and QUIC.cloud CDN: Is It Compatible? WordPress](https://wpghost.com/kb/wp-ghost-litespeed-quic-cloud-compatibility/): Yes. WP Ghost is fully compatible with LiteSpeed and QUIC.cloud. It auto-whitelists CDN edge IPs and hides paths on cached pages, all automatically.
- [Blocked by ModSecurity? Causes and How to Fix It WordPress](https://wpghost.com/kb/blocked-by-modsecurity/): A "Blocked by ModSecurity" error comes from your host's firewall, not WP Ghost. Learn why it happens and how to whitelist the rule in two minutes.
- [How to Block WordPress Pingbacks with WP Ghost](https://wpghost.com/kb/how-to-block-wordpress-pingbacks-with-wp-ghost/): Pingbacks are a legacy WordPress feature that notifies another site when you link to its content. The notification travels through xmlrpc.php using a method…
- [Add a Custom CMS Simulator in WP Ghost Guide](https://wpghost.com/kb/adding-a-custom-cms-simulator/): Simulate a different CMS (Joomla, Drupal, custom) on WordPress with WP Ghost. Use the built-in emulator or add a custom generator name via filter. Setup guide.
- [Stop the Hack Before It Starts: Introducing Hide My WP Ghost 8.3](https://wpghost.com/kb/stop-the-hack-before-it-starts-introducing-hide-my-wp-ghost-8-3/): The new update to WP Ghost (Hide My WP Ghost) has arrived. Version 8.3 isn’t just a maintenance release; it is a fundamental evolution in how we approach…
- [WP Ghost Refund Policy](https://wpghost.com/kb/payment-refund/): WP Ghost offers a 30-day refund on initial purchases and 24-hour refund on annual renewals. How to request a refund and what happens to your account afterward.
- [WordPress Brute Force Protection with reCAPTCHA WP Ghost](https://wpghost.com/kb/brute-force-attack-protection/): Limit login attempts and add reCAPTCHA to WordPress login, registration, and comment forms. Block brute force attacks with WP Ghost. Free feature, four options.
- [How Do I Block WP Content in WordPress? (WP Ghost Guide)](https://wpghost.com/kb/faqs/how-do-i-block-wp-content/): Block direct access to wp-content by changing the path and hiding it with WP Ghost. Step-by-step guide to protect themes, plugins, and uploads from bots.
- [Do I Need to Hide WordPress from Detectors or Hackers?](https://wpghost.com/kb/faqs/do-i-need-to-hide-wordpress-from-detectors-or-hackers/): Both, for different reasons. Hiding from hacker bots blocks attacks (critical). Hiding from detectors protects brand privacy (optional). WP Ghost does both.
- [How Can I Deactivate All WordPress Plugins At Once?](https://wpghost.com/kb/faqs/how-can-i-deactivate-all-plugins-at-once/): /wp-content/plugins to /wp-content/plugins_temp via FTP and create an empty plugins folder. All plugins deactivate instantly with settings preserved.
- [Will There Be Issues With My Site If I Stop Using WP Ghost?](https://wpghost.com/kb/faqs/will-there-be-any-issues-with-my-site-if-i-stop-using-wp-ghost/): No. Deactivating WP Ghost is fully reversible. All custom paths revert to WordPress defaults instantly, your files, database, and content stay untouched.
- [Is WP Ghost Available in Other Languages Besides English?](https://wpghost.com/kb/faqs/is-wp-ghost-available-in-other-languages/): Yes, WP Ghost is translated into 15 languages including Arabic, Chinese, French, German, Spanish, Japanese, Turkish, and Indonesian.
- [Is WP Ghost Compatible With AppMySite Plugin?](https://wpghost.com/kb/faqs/is-wp-ghost-compatible-with-appmysite/): Yes. Leave the REST API path at default /wp-json/ and do not disable REST API access. Every other WP Ghost feature works normally alongside AppMySite.
- [What Can I Do if I Can't Log in to WP Ghost Site?](https://wpghost.com/kb/faqs/what-can-i-do-if-i-cant-login/): Locked out of WordPress after WP Ghost setup? Use your SAFE URL, the Safe URL parameter, 5-minute pause, or wp-config.php constant to recover in under a minute.
- [Can I Disable Inspect Element Using WP Ghost?](https://wpghost.com/kb/faqs/can-i-disable-inspect-element/): Yes. Enable Disable Inspect Element under WP Ghost > Tweaks > Disable Options to block F12, Ctrl+Shift+I, Cmd+Option+I, and right-click Inspect in one toggle.
- [Is WP Ghost Easy to Use?](https://wpghost.com/kb/faqs/is-hide-my-wp-ghost-easy-to-use/): Yes. Four one-click security presets, Safe Mode and Ghost Mode levels, and built-in Security Check. Most users get full protection in under five minutes.
- [Do I Still Need WP Ghost if I Have Sucuri Pro?](https://wpghost.com/kb/faqs/do-i-still-need-this-if-i-have-sucuri/): Yes. Sucuri detects and cleans up after attacks, WP Ghost prevents them. The two plugins cover different layers with no conflicts.
- [How Customizable Is WP Ghost?](https://wpghost.com/kb/faqs/how-customizable-is-wp-ghost/): WP Ghost has 115+ free settings and 150+ in premium: every path, firewall rule, 2FA method, role-based toggle, and mapping rule.
- [Why Use WP Ghost If I Already Have a 2FA Plugin?](https://wpghost.com/kb/faqs/why-should-i-use-the-plugin-if-i-have-an-2fa-plugin/): 2FA only protects logins. WP Ghost hides the login URL, blocks bots with firewall, protects all forms, and includes free 2FA with passkeys that most 2FA…
- [How Can Using WP Ghost Increase Site Speed?](https://wpghost.com/kb/faqs/how-can-using-hide-my-wp-ghost-increase-site-speed/): WP Ghost cuts 15-20 KB of render-blocking scripts by disabling emoji, embed, and WLW. The 7G/8G Firewall blocks bot traffic at server level, freeing PHP…
- [Will WP Ghost Replace the Sitemap Created by SEO Plugins?](https://wpghost.com/kb/faqs/will-hide-my-wp-ghost-replace-the-sitemap-created-by-seo-plugins/): No. WP Ghost filters sitemap output at runtime. Your SEO plugin (Yoast, Rank Math, AIOSEO) generates the sitemap, WP Ghost cleans paths and fingerprints.
- [Can I Use WP Ghost with Cloudflare?](https://wpghost.com/kb/faqs/can-i-use-hide-my-wp-ghost-with-cloudflare/): Yes. WP Ghost works seamlessly with Cloudflare as complementary layers. Cloudflare handles edge/CDN/WAF, WP Ghost adds path security, firewall, and 2FA.
- [Can WP Ghost Prevent Spam on Contact Forms?](https://wpghost.com/kb/faqs/can-wp-ghost-prevent-spam-messages/): WP Ghost protects login, signup, lost password, and comments forms with reCAPTCHA. For Contact Form 7, WPForms, Gravity Forms, use the plugin's own reCAPTCHA…
- [Do I Need WP Ghost with Server-Side Protection?](https://wpghost.com/kb/faqs/do-i-still-need-wp-ghost-if-i-already-have-server-side-protection/): Yes. Server firewalls catch generic web attacks. WP Ghost catches WordPress-specific attacks they cannot see: bot scans, brute force, plugin exploits,…
- [Will I See All Edits and Settings Changes With Events Log?](https://wpghost.com/kb/faqs/will-i-be-able-to-see-all-edits-and-settings-changes-made-by-users/): Yes. WP Ghost's User Events Log records logins, content edits, plugin changes, and settings modifications. Shows who, what, when, and from which IP.
- [How Can I Change The Paths In Admin Dashboard?](https://wpghost.com/kb/faqs/how-can-i-change-the-paths-in-admin-dashboard/): Add define('HMW_ALWAYS_CHANGE_PATHS', true) to wp-config.php, then save WP Ghost settings. Advanced option, back up first. May conflict with page builders.

- [How To Remove WP Ghost Rules From WordPress .htaccess Block?](https://wpghost.com/kb/faqs/how-to-remove-the-wp-ghost-rewrite-rules-from-wp-definition-in-htaccess/): Move WP Ghost rewrite rules out of the # BEGIN WordPress block with one toggle in WP Ghost > Advanced > Compatibility, or set HMW_RULES_IN_WP_RULES in…
- [Why The New Admin Path Is Redirected To Front Page?](https://wpghost.com/kb/faqs/why-the-new-admin-path-is-redirected-to-front-page/): Your custom admin path redirects to the homepage because the Hide the New Admin Path option is active in WP Ghost.
- [How To Disable XML-RPC in WordPress?](https://wpghost.com/kb/faqs/how-to-disable-xml-rpc/): Disable WordPress XML-RPC in one click with WP Ghost. Block system.multicall brute force amplification, pingback DDoS, and username enumeration.
- [How Do I Protect My WordPress Website from Hackers?](https://wpghost.com/kb/faqs/how-to-protect-your-website-from-hackers/): Protect WordPress from hackers with a layered strategy: secure hosting, WP Ghost hack prevention, 2FA, strong passwords, updates, and backups.
- [Why Can't I Login to WordPress via /wp-admin/?](https://wpghost.com/kb/faqs/why-cant-i-login-to-wordpress-anymore-via-wp-admin/): Ghost hides /wp-admin/ from bots by design. Use your custom login path instead, or disable the Hide wp-admin option. Three recovery methods if locked out.
- [How do I hide my WordPress site?](https://wpghost.com/kb/faqs/how-do-i-hide-my-wordpress-site/): Hide your WordPress site completely: login URL, wp-admin, version, theme and plugin names, HTML fingerprints. WP Ghost does it all from one dashboard.
- [Can We Use WP Ghost to Hide Our Plugins and Theme?](https://wpghost.com/kb/faqs/can-we-use-wp-ghost-to-hide-our-plugins-and-theme/): Yes. WP Ghost renames plugin and theme directories, blocks default paths with 404s, and removes WordPress fingerprints so vulnerability scanners find nothing.
- [How Do I Hide the Theme Name in WordPress?](https://wpghost.com/kb/faqs/how-do-i-hide-the-theme-name-in-wordpress/): Hide your WordPress theme name with WP Ghost. Block BuiltWith, Wappalyzer, and theme detectors from reading your active theme in six steps.
- [How Do I Hide My WordPress Site from the Public?](https://wpghost.com/kb/faqs/how-do-i-hide-my-wordpress-site-from-the-public/): Hide your WordPress site from visitors, search engines, and hacker bots during development with maintenance mode, noindex, WP Ghost, and IP whitelisting.
- [What Is the Best Plugin for Cloaking WordPress?](https://wpghost.com/kb/faqs/what-is-the-plugin-for-cloaking-wordpress/): WP Ghost cloaks WordPress by changing all default paths, removing CMS fingerprints, and simulating Drupal or Joomla.
- [How Do I Hide the WordPress Version? (WP Ghost Guide)](https://wpghost.com/kb/faqs/how-do-i-hide-the-wordpress-version/): Remove WordPress version numbers from CSS, JS, images, and the generator meta tag with WP Ghost. Two toggles strip all version fingerprints from your source…
- [Is WP Ghost Hiding The wp-admin On Nginx Servers?](https://wpghost.com/kb/faqs/is-wp-ghost-hiding-the-wp-admin-on-nginx-servers/): Yes, you can customize and hide wp-admin path on Nginx server. Just follow the setup instruction.
- [How Do I Know If My Website Is Hidden with WP Ghost?](https://wpghost.com/kb/faqs/how-do-i-know-if-my-website-is-hidden-with-wp-ghost/): Verify WP Ghost is working by running your site through WordPress detectors like WhatCMS and WPThemeDetector, or manually check your page source for WordPress…
- [Is It Safe That Logged-In Users Can Access wp-admin?](https://wpghost.com/kb/faqs/if-im-logged-in-my-website-i-can-access-the-wp-admin-is-that-safe/): By default yes, all logged users reach wp-admin. WP Ghost restricts access to administrators only with the Hide wp-admin from Non-Admin Users option.
- [Should You Disable XML-RPC on WordPress?](https://wpghost.com/kb/faqs/should-you-disable-xml-rpc-on-wordpress/): Yes, for most sites. XML-RPC is a legacy protocol replaced by the REST API. It's abused for brute force amplification and pingback DDoS. Exception: Jetpack.
- [Do I Have to Write Some Code in .htaccess?](https://wpghost.com/kb/faqs/do-i-have-to-write-some-code-in-htaccess/): Not usually. WP Ghost writes rewrite rules to .htaccess automatically if the file is writable. Manual editing only needed if permissions block writes.
- [I Forgot the Custom Login URL. What Should I Do?](https://wpghost.com/kb/faqs/i-forgot-the-custom-login-and-admin-urls-what-should-i-do/): your Safe URL from WP Ghost > Change Paths or the WP Ghost Dashboard, or rename the hide-my-wp folder via FTP to log in at /wp-login.php.
- [Is WP Ghost Compatible with Classiera Theme?](https://wpghost.com/kb/faqs/wp-ghost-compatible-with-classiera-theme/): Yes. WP Ghost is fully compatible with Classiera classified ads theme from ThemeForest. Path security, brute force protection, and 2FA protect ad forms and…
- [How Can We Hide Plugins From WordPress Detectors?](https://wpghost.com/kb/faqs/how-can-we-hide-plugins-from-wordpress-detectors/): Hide plugin paths, directory names, version tags, readme files, and class names. WP Ghost covers all 5 plugin detection signals so scanners report zero plugins.
- [How to Hide WordPress Theme and Plugins from Detectors?](https://wpghost.com/kb/faqs/how-can-i-hide-all-wordpress-data-such-as-theme-and-plugin-names-from-sites-like-whatwpthemeisthat-com-and-wpthemedetector-com/): WP Ghost blocks theme detectors (WhatWPThemeIsThat, WPThemeDetector, Wappalyzer, BuiltWith) by hiding paths, version tags, HTML classes, and WordPress signals.
- [How Do I Change admin-ajax in WordPress?](https://wpghost.com/kb/faqs/how-do-i-change-admin-ajax-in-wordpress/): Go to WP Ghost > Change Paths > Ajax Security. Set a custom name, hide wp-admin from AJAX URL, change paths in AJAX calls. Blocks plugin exploits instantly.
- [How Do I Rename a wp-content Folder in WordPress?](https://wpghost.com/kb/faqs/how-do-i-rename-a-wp-content-folder/): Rename wp-content manually via FTP, or use WP Ghost to change the path virtually without moving files. Go to WP Ghost > Change Paths > WP Core Security.
- [How Do I Change the Default Login Page in WordPress?](https://wpghost.com/kb/faqs/how-do-i-change-the-default-login-page-in-wordpress/): the WordPress default login URL with WP Ghost at Change Paths > Login Security. Set a custom path and hide /wp-login.php from bots. No core file changes.
- [Can I Change WP-Admin To Something Else?](https://wpghost.com/kb/faqs/can-i-change-wp-admin-to-something-else/): Yes. Go to WP Ghost > Change Paths > Admin Security, enter a custom name in Custom Admin Path, click Save. No files altered, applied through rewrite rules.
- [Is WP Ghost Compatible With BuddyBoss Theme?](https://wpghost.com/kb/faqs/wp-ghost-compatible-with-buddyboss-theme/): Yes. WP Ghost works with BuddyBoss Theme and Platform plugin. Keep the REST API path unchanged. BuddyBoss App not specifically tested.
- [Is WP Ghost Compatible with Jupiter Theme?](https://wpghost.com/kb/faqs/wp-ghost-compatible-with-jupiter-theme/): Yes. WP Ghost is fully compatible with Jupiter Theme from ThemeForest. Path security, firewall, 2FA, and brute force protection work alongside Jupiter without…
- [How Do I Know My Website Is Hidden from Hackers?](https://wpghost.com/kb/faqs/how-do-i-know-if-my-website-is-hidden-from-detectors-hackers/): Run your site through Sucuri SiteCheck and ImmuniWeb for security scans, plus WhatCMS and WPThemeDetector for CMS hiding.
- [Can I Hide My WordPress Site Until It Is Ready?](https://wpghost.com/kb/faqs/can-i-hide-my-wordpress-site-until-it-is-ready/): Yes. Use Settings > Reading to discourage search engines and a maintenance mode plugin for a coming-soon page.

- [Is Hiding My WP Login Making My Site More Secure?](https://wpghost.com/kb/faqs/is-hide-my-wp-login-plugin-making-my-site-more-secure/): Yes. wp-login.php is the #1 WordPress attack target. Hiding it with WP Ghost stops brute force bots at 404 and cuts login attacks by up to 99%.
- [Is There a Way to Hide My WordPress Site?](https://wpghost.com/kb/faqs/is-there-a-way-to-hide-my-wordpress-site/): Yes. Hide WordPress manually with PHP/htaccess edits or use WP Ghost to automate everything: paths, headers, versions, files, and classes, without touching…
- [How to Hide the WordPress Site From Bots and Detectors?](https://wpghost.com/kb/faqs/how-to-hide-the-wordpress-site/): Remove WordPress fingerprints: paths, generator meta, version tags, emoji, DNS prefetch, HTML comments, default files.
- [Is WordPress Website Easily Hacked?](https://wpghost.com/kb/is-wordpress-website-easily-hacked/): So, is WordPress easily hacked? The short answer is no, but it is a common target for cyberattacks due to its popularity.
- [What WP Ghost Can and Can't Do Overview](https://wpghost.com/kb/what-wp-ghost-cant-do/): WP Ghost prevents hack attacks but doesn't scan for malware or replace backups. Understand what WP Ghost does, what it doesn't, and how it fits your security…
- [WordPress Database Permissions in phpMyAdmin Guide](https://wpghost.com/kb/how-to-grant-and-revoke-permissions-to-database-using-phpmyadmin/): Restrict WordPress database user permissions in phpMyAdmin to reduce SQL injection damage. Only 8 permissions needed. Complements WP Ghost firewall protection.
- [WP Ghost Codecanyon Alternative Guide](https://wpghost.com/kb/hide-my-wp-codecanyon-alternative/): WP Ghost (Hide My WP Ghost) is a separate product from Codecanyon plugins. Available on WordPress.org with free and premium versions. Feature comparison guide.
- [Theme Breaks or The Layout Doesn't Load Correctly](https://wpghost.com/kb/why-doesnt-theme-layout-load-correctly/): If your theme’s layout is broken, CSS styles are missing, or the site looks unstyled after changing paths in WP Ghost, the custom paths for CSS and JS files…
- [Website Forms Are Not Submitting Correctly After Changing Ajax Path](https://wpghost.com/kb/website-forms-are-not-submitting-correctly-after-changing-ajax-path/): If contact forms, comment forms, or other AJAX-powered forms stop submitting after changing the admin-ajax.php path in WP Ghost, the form plugin is still…
- [Elementor Shows an Error When Saving Changes After Changing the Ajax Path](https://wpghost.com/kb/elementor-shows-an-error-when-saving-changes-after-changing-the-ajax-path/): If Elementor, Divi, Bricks, or another page builder shows “Saving failed” or similar errors after changing the admin-ajax.php path in WP Ghost, the page…
- [Post Editor Shows an Error When Saving Changes After Changing the Ajax Path](https://wpghost.com/kb/post-editor-shows-an-error-when-saving-changes-after-changing-the-ajax-path/): If the WordPress post editor (Gutenberg or Classic) shows errors like “Updating failed” or “Publishing failed” after changing the admin-ajax.php path in WP…
- [I Can't Log Out From my WordPress Dashboard After Changing the Logout](https://wpghost.com/kb/i-cant-log-out-from-my-wordpress-dashboard-after-changing-the-logout-path/): If clicking the logout link does nothing, redirects to the homepage, or shows an error after changing the logout path in WP Ghost, the custom path isn’t…
- [Move WordPress from HTTP to HTTPS SSL Guide](https://wpghost.com/kb/move-wordpress-from-http-to-https/): Migrate WordPress from HTTP to HTTPS. Install SSL, update URLs, set up 301 redirects, force SSL on admin. Apache and Nginx redirect code included. Full guide.
- [After Changing the wp-content Path, Some Plugins Are Not Functioning](https://wpghost.com/kb/after-changing-the-wp-content-path-some-plugins-are-not-functioning-properly/): If plugins break, display errors, or lose functionality after changing the wp-content path in WP Ghost, the plugins are loading assets from /wp-content/ and…
- [My Images Are Not Displaying Correctly After Changing the wp-content Path](https://wpghost.com/kb/my-images-are-not-displaying-correctly-after-changing-the-wp-content-path/): If images or media files are broken, missing, or not loading after changing the wp-content path in WP Ghost, the image URLs in your HTML, CSS, or cached files…
- [Certain Membership Plugins Not Function Properly After Changing the](https://wpghost.com/kb/certain-membership-plugins-not-function-properly-after-changing-the-activation-path/): Membership and registration plugins (BuddyPress, Ultimate Member, Paid Memberships Pro, etc.) can break when WP Ghost changes the activation path because they…
- [Author Pages or Profiles Are Not Accessible After Changing the Author Path](https://wpghost.com/kb/author-pages-or-profiles-are-not-accessible-after-changing-the-author-path/): If author pages return 404 errors after changing the author path in WP Ghost, the server’s rewrite rules aren’t mapping the new path correctly or caches are…
- [Some Author Links Are Broken After Changing the Author Path](https://wpghost.com/kb/some-author-links-are-broken-after-changing-the-author-path/): If author page links return 404 errors or redirect to the wrong page after changing the author path in WP Ghost, cached pages or hardcoded links still…
- [Some Contributors or Users Have Difficulty Accessing their Profiles after](https://wpghost.com/kb/some-contributors-or-users-have-difficulty-accessing-their-profiles-after-changing-author-path/): After changing the author path in WP Ghost, users may not be able to access their author pages or profile URLs because the old /author/username/ path no longer…
- [Users Can't Register to the Website After Changing the Register Path](https://wpghost.com/kb/users-cant-register-to-the-website-after-changing-the-register-path/): If users see a 404 error or can’t access the registration form after you changed the register path in WP Ghost, the custom path isn’t resolving correctly or…
- [Users Can't Reset the Password After Changing the Lost Password Path](https://wpghost.com/kb/users-cant-reset-the-password-after-changing-the-lost-password-path/): If users see a 404 error or get redirected when trying to reset their password after you changed the lost password path in WP Ghost, the custom path isn’t…
- [Admin Dashboard Not Working Properly After wp-admin Change](https://wpghost.com/kb/admin-dashboard-not-working-properly-after-wp-admin-change/): If the WordPress admin dashboard breaks after changing the wp-admin path in WP Ghost (pages not loading, settings not saving, blank screens, or redirect…
- [Can't Log in Via wp-admin as I am Redirected To the Front Page](https://wpghost.com/kb/cant-log-in-via-wp-admin-as-i-am-redirected-to-the-front-page/): If accessing /wp-admin/ redirects to the homepage instead of the login page, this is because WP Ghost’s Hide “wp-admin” option is active.
- [JetPack Plugin Analytics not Working with Disabled XML-RPC Access](https://wpghost.com/kb/jetpack-plugin-analytics-not-working-with-disabled-xml-rpc-access/): JetPack requires XML-RPC access to communicate with WordPress.com for analytics, stats, and connection features.
- [Force Login Page for All Visitors WP Ghost Guide](https://wpghost.com/kb/how-to-redirect-visitors-to-login-force-login-page/): Redirect all visitors to the WordPress login page. Force login for private sites, intranets, and client portals. Works with WP Ghost custom login paths. Guide.
- [REST API Not Working After Custom Path Change](https://wpghost.com/kb/rest-api-not-working-after-custom-path-change/): If you get errors accessing the REST API after changing the wp-json path in WP Ghost (404 errors, “rest_no_route” responses, or plugins that depend on the API…
- [Unable to Scan the QR Code](https://wpghost.com/kb/unable-to-scan-the-qr-code/): If your authenticator app can’t scan the 2FA QR code during setup (blurry screen, camera issues, or the code doesn’t register), use the manual entry method…
- [Comments Not Being Posted or Processed](https://wpghost.com/kb/comments-not-being-posted-or-processed/): If visitors can’t submit comments after changing the comments path in WP Ghost, the comment form is still pointing to the old wp-comments-post.php path while…
- [Spam Still Appearing Despite Comments Changes](https://wpghost.com/kb/spam-still-appearing-despite-comments-changes/): If spam comments continue after changing the comments path in WP Ghost, the spam is likely coming from human spammers or bots that have adapted to the new path.
- [WP Ghost and Advanced Access Manager Compatibility Guide](https://wpghost.com/kb/wp-ghost-and-advanced-access-manager/): Configure WP Ghost with Advanced Access Manager (AAM). Update AAM htaccess rewrite rules to match WP Ghost custom uploads path.
- [Activate WordPress Debugging WP Ghost Guide](https://wpghost.com/kb/how-to-activate-wordpress-debugging/): Enable WordPress debugging to troubleshoot WP Ghost and plugin issues. Log PHP errors to debug.log without showing them to visitors.
- [Grant User Role Access to WP Ghost Settings Guide](https://wpghost.com/kb/grant-user-role-access-to-wp-ghost-settings/): Grant non-administrator users access to WP Ghost settings using hmwp_manage_settings capability and User Role Editor plugin. Role-based access control guide.
- [How to Protect My WordPress Website from Hackers Guide](https://wpghost.com/kb/protect-my-wordpress-website/): Protect your WordPress website with a layered security approach: secure hosting, proactive hack prevention, regular updates, and reliable backups.
- [WP Ghost Widget on WordPress Dashboard Guide](https://wpghost.com/kb/wp-ghost-widget-on-wordpress-dashboard/): WP Ghost adds a security widget to the WordPress Dashboard with a 0-100 security gauge, 7-day threats chart, and blocked attack stats. Show or hide guide.
- [How to Hide the Admin Toolbar in WordPress WP Ghost](https://wpghost.com/kb/hide-admin-toolbar/): Hide the WordPress admin toolbar for specific user roles with WP Ghost. Remove backend elements from subscribers, customers, and members for a clean,…
- [How to Disable WLW Manifest Scripts in WordPress WP Ghost](https://wpghost.com/kb/disable-wlw-manifest-scripts/): Remove the Windows Live Writer manifest link from your WordPress page source. WLW is discontinued but WordPress still advertises it. One toggle removes it.
- [WP Ghost - Why You Must Have It!](https://wpghost.com/kb/wp-ghost-why-you-must-have-it/): WP Ghost is an easy-to-use product designed to prevent hack attempts and provide the best protection against hackers.
- [WP Ghost and CDN Enabler Compatibility Guide](https://wpghost.com/kb/wp-ghost-and-cdn-enabler/): Configure WP Ghost with CDN Enabler. Set Plugin Loading Hook to Late Loading so WP Ghost processes paths after CDN URL rewrites. Works with BunnyCDN and others.
- [Customize WordPress Uploads Directory WP Ghost](https://wpghost.com/kb/customize-wordpress-uploads-directory/): Change the WordPress uploads directory path with WP Ghost (rewrite rules, no files moved) or the UPLOADS constant in wp-config.php. Protect media uploads path.
- [Hide WordPress from BuiltWith WP Ghost Guide](https://wpghost.com/kb/hide-wordpress-from-builtwith/): Hide your WordPress site from BuiltWith technology profiling. Use WP Ghost Ghost Mode to remove all detection signals.
- [Change WordPress Paths in CSS Files WP Ghost Guide](https://wpghost.com/kb/change-wordpress-common-paths-in-css-files/): Change WordPress paths inside cached CSS and JS files with WP Ghost. Remove wp-content and wp-includes references from cache files. No speed impact. Guide.
- [Remove Generator Meta WordPress WP Ghost](https://wpghost.com/kb/remove-generator-meta-wordpress/): Remove WordPress generator meta tags and version numbers from source code with WP Ghost. Also strips WPML, Slider Revolution, and Visual Composer tags. Guide.
- [Remove WordPress DNS-Prefetch WP Ghost Guide](https://wpghost.com/kb/how-to-remove-dns-prefetch-wordpress/): Remove the WordPress DNS-Prefetch s.w.org meta tag to hide your CMS identity. Use WP Ghost toggle or functions.php code. Doesn't affect site loading speed.
- [WP Ghost Meta Mapping - Hide Text in META Tags](https://wpghost.com/kb/wp-ghost-meta-mapping/): Extend WP Ghost Text Mapping to page titles, descriptions, and other META tag content. Replace WordPress and plugin references in your head section with this…
- [Customize WP Ghost Cookie Names wp-config Guide](https://wpghost.com/kb/customize-hmwp_logged_in_admin-hmwp_logged_in_login/): Customize WP Ghost logged-in cookie prefix with the HMWP_LOGGED_IN_COOKIE constant in wp-config.php. Remove WordPress identifiers from browser cookies. Guide.
- [Hide Old Image Paths with WP Ghost Guide](https://wpghost.com/kb/hide-the-old-image-paths-with-wp-ghost/): Block or redirect old WordPress image paths after changing uploads directory with WP Ghost. Return 404 or redirect to new paths. SEO and security trade-offs.
- [How to Change Relative URLs to Absolute URLs in WordPress WP Ghost](https://wpghost.com/kb/change-relative-urls-to-absolute-urls/): Convert relative WordPress paths to absolute URLs so WP Ghost can rewrite them. Fix paths that slip through path security because they lack a domain prefix.
- [After Changing the wp-includes Path Some Plugins are not Functioning](https://wpghost.com/kb/after-changing-the-wp-includes-path-some-plugins-are-not-functioning-properly/): If plugins break or display errors after changing the wp-includes path in WP Ghost, the plugins are loading scripts or stylesheets from /wp-includes/ and the…
- [Certain Membership Plugins Not Functioning Correctly After Changing the](https://wpghost.com/kb/certain-membership-plugins-not-functioning-correctly-after-changing-the-register-path/): Membership and registration plugins (BuddyPress, Ultimate Member, Paid Memberships Pro, WooCommerce registration, etc.) can break when WP Ghost changes the…
- [Email Notification](https://wpghost.com/kb/email-notification/): Update: this feature was remove in the last version of WP Ghost.
- [Change .htaccess Permission to Read Only (444) Guide](https://wpghost.com/kb/change-htaccess-permission-to-read-only/): Set .htaccess to read-only (444) on Apache, LiteSpeed, or Windows servers to prevent malicious modification. FTP, cPanel, and SSH methods covered step by step.
- [Will WP Ghost Protect My Site from Spam Signups?](https://wpghost.com/kb/faqs/will-it-protect-my-site-against-spam-signups/): Yes. WP Ghost cuts spam signups by up to 95% with custom register paths plus reCAPTCHA on the signup form. Free feature. Pair with Akismet for content spam.
- [How to Remove Authors and Style in Sitemap XML WP Ghost](https://wpghost.com/kb/remove-the-sitemap-author-in-wordpress/): Strip SEO plugin author names and XSL styling from your WordPress sitemap.xml with WP Ghost. Remove Yoast, Rank Math, and other plugin branding in one click.
- [How to Secure Feed, Sitemap, and Robots.txt in WordPress WP Ghost](https://wpghost.com/kb/sitemap-feed-and-robots/): Remove WordPress fingerprints from your RSS feed, sitemap.xml, and robots.txt with WP Ghost. Replace default paths, hide link tags, and protect your CMS…
- [Do You Support WP Ghost on Client Sites I Manage?](https://wpghost.com/kb/faqs/what-are-your-terms-for-providing-support/): WP Ghost support covers the account owner for all connected sites, not end clients. Agencies can use Whitelabel to brand the plugin and route help links.
- [Will WP Ghost Stop Bots and Reduce Server Load?](https://wpghost.com/kb/faqs/will-wp-ghost-help-my-site-against-all-bots/): Yes. WP Ghost returns 404 on bot probes at the server level, so WordPress never loads. Cuts bot-driven inode usage, CPU load, and server resources dramatically.
- [Where Is WP Ghost Events Log Data Stored?](https://wpghost.com/kb/faqs/where-is-the-data-from-the-events-log-reports-stored/): WP Ghost Events Log is stored locally in your WordPress database and optionally synced to the cloud for 30 days. Not shared with third parties, GDPR compliant.
- [How to Redirect Images from Old Paths to New Paths WP Ghost](https://wpghost.com/kb/redirect-images-from-the-old-paths-to-the-new-paths/): Learn how to redirect old WordPress image URLs to new custom paths with WP Ghost. Prevent duplicate content, preserve external links, and protect your SEO…
- [How to Disable Right-Click, Inspect Element, and Keys WP Ghost](https://wpghost.com/kb/disable-right-click-and-keys/): Block right-click, Inspect Element, View Source, copy/paste, and image drag-and-drop on your WordPress site by user role with WP Ghost.
- [Is WP Ghost Compatible with BuddyBoss?](https://wpghost.com/kb/faqs/does-hide-my-wp-ghost-work-with-buddyboss/): Yes, WP Ghost works with BuddyBoss platform, theme, and community features. Keep REST API and author path at default for BuddyBoss App compatibility.
- [Connection Issues With Third-Party Apps](https://wpghost.com/kb/connection-issues-with-third-party-apps/): Third-party apps (mobile apps, payment gateways, CRM integrations, email marketing tools, etc.) can lose connection to your site when WP Ghost changes the REST…
- [How Do I Remove the Language Switcher from WordPress Login?](https://wpghost.com/kb/faqs/is-it-possible-to-remove-the-language-switcher-from-the-login-screen/): Remove the WordPress 5.9+ language switcher from the login screen with WP Ghost. One toggle in Login Security settings, no code or theme edits required.
- [Set a Specific Language in WP Ghost Plugin Guide](https://wpghost.com/kb/set-a-specific-language-in-wp-ghost/): Display WP Ghost in a specific language using the Built-in Plugin Translations option or a plugin_locale filter in wp-config.php. Supports 11 languages.
- [Is My Website Loading Slower With WP Ghost?](https://wpghost.com/kb/faqs/is-my-website-loading-slower-with-wp-ghost/): No. WP Ghost adds about 0.05s per request and often makes sites faster by blocking bot traffic and stripping unused WordPress scripts. Here is why.
- [PDFs and Iframes not Loading in Frontend](https://wpghost.com/kb/pdfs-and-iframes-not-loading-in-frontend/): Some users may encounter issues with PDFs and iframes not loading in the frontend when the plugin is set to Ghost Mode.
- [Can I Remove a Connected Site from My WP Ghost Plan?](https://wpghost.com/kb/faqs/can-i-remove-a-connected-sites/): Yes, remove a connected site from your WP Ghost Dashboard any time to free a slot for a new website. Site limits cap simultaneous installs, not lifetime use.
- [Will Clients Be Asked to Add a Token? WP Ghost White Label](https://wpghost.com/kb/faqs/will-clients-be-asked-to-add-a-token/): No. With WP Ghost White Label, the plugin is pre-bound to your agency license. Clients never see a token prompt, just your branded security plugin.
- [Categorize Websites with WP Ghost Dashboard Tags](https://wpghost.com/kb/categorize-websites-with-wp-ghost-dashboard/): Organize connected websites in WP Ghost Dashboard using tags. Add tags to group sites by client, type, or environment.
- [Can WP Ghost Hide My WordPress Plugins and Theme?](https://wpghost.com/kb/faqs/can-we-use-wp-ghost-to-hide-the-plugins-and-theme-we-are-using/): Yes. WP Ghost renames plugin and theme directories, blocks the old paths, and hides style.css so scanners cannot enumerate your WordPress stack.
- [How Do I Hide WordPress from Browser Extensions?](https://wpghost.com/kb/faqs/how-can-i-hide-my-website-from-browser-extension-detectors/): Browser extensions like Wappalyzer and WhatRuns read WordPress fingerprints from your page source. Here's how WP Ghost removes those signals so detectors fail.
- [Not Receiving the 2FA Email Code](https://wpghost.com/kb/not-receiving-the-2fa-email-code/): There are several reasons why the 2FA email code may not arrive. Work through these checks in order.
- [Authenticator App Not Generating Valid Codes for 2FA](https://wpghost.com/kb/authenticator-app-not-generating-valid-codes-for-2fa/): If your authenticator app (Google Authenticator, Authy, Microsoft Authenticator, etc.) generates codes that WP Ghost rejects, work through these checks in…
- [WordPress Theme Detectors and How to Hide Guide](https://wpghost.com/kb/most-popular-wordpress-theme-detectors/): Top WordPress theme detectors (BuiltWith, Wappalyzer, WhatCMS, WP Theme Detector) and how WP Ghost hides your site from all of them. Detection tools overview.
- [Hide Gutenberg Classes with WP Ghost Guide](https://wpghost.com/kb/hide-gutenberg-classes-with-wp-ghost/): Hide WordPress Gutenberg wp-block class names with WP Ghost Text Mapping. Rename classes or remove the block library entirely for security and performance.
- [How to Disable WordPress Embed Scripts WP Ghost](https://wpghost.com/kb/disable-embed-scripts/): Remove the WordPress oEmbed script library and discovery endpoint from your site. Improve performance and eliminate CMS fingerprints in one click with WP Ghost.
- [How to Disable WordPress Emoji Scripts WP Ghost](https://wpghost.com/kb/hide-wordpress-emoji-icons/): Remove the WordPress Twemoji script that loads on every page from s.w.org. Improve performance and eliminate a unique WordPress fingerprint with WP Ghost.
- [How to Hide IDs from META Tags in WordPress WP Ghost](https://wpghost.com/kb/hide-ids-from-meta-tags/): Remove plugin and theme identifiers from HTML link, style, and script tags with WP Ghost. Stop scanners from reading your WordPress stack through element IDs.
- [How to Hide WordPress DNS Prefetch META Tags WP Ghost](https://wpghost.com/kb/hide-wordpress-dns-prefetch/): Remove the DNS prefetch tags that WordPress adds to your page source pointing to wordpress.org and w.org. Eliminate another WordPress fingerprint with WP Ghost.
- [How to Hide HTML Comments in WordPress WP Ghost](https://wpghost.com/kb/hide-html-comments/): Remove HTML comments from your WordPress source code that reveal plugin names, theme names, and version numbers. Strip all identifying comments with WP Ghost.
- [How to Hide WordPress Generator META Tags WP Ghost](https://wpghost.com/kb/hide-wordpress-generator/): Remove the WordPress generator meta tag that reveals your CMS version to every bot and scanner. Also strips WooCommerce and plugin generator tags with WP Ghost.
- [Plugin or Theme Conflicts](https://wpghost.com/kb/plugin-or-theme-conflicts/): If something breaks after activating WP Ghost, the issue is likely a conflict with another plugin or your theme. Follow this process to isolate the conflict.
- [WP Ghost Exceptions](https://wpghost.com/kb/wp-ghost-exceptions/): WP Ghost is compatible with all major servers, hosting providers, and WordPress Multisite. There are two hosting environments where some features have…
- [WP Ghost - Advanced Pack](https://wpghost.com/kb/wp-ghost-advanced-pack/): Advanced Pack takes the basic security provided by the free version and enhances it with cutting-edge features like Two-Factor Authentication (2FA), Temporary…
- [How to Change the wp-content/uploads Path in WordPress WP Ghost](https://wpghost.com/kb/change-wp-content-uploads-path-with-wp-ghost/): Learn how to change the WordPress uploads path with WP Ghost. Hide media file URLs, remove WordPress fingerprints from images, and protect your upload…
- [How to Use CDN URL Mapping in WP Ghost WordPress](https://wpghost.com/kb/cdn-url-mapping/): Extend WP Ghost path changes to your CDN domain so assets served from cdn.yourdomain.com use custom paths instead of default WordPress directories like…
- [Theme Not Loading Correctly and Website Loads Slower](https://wpghost.com/kb/theme-not-loading-correctly-website-loads-slower/): If your theme looks broken or your site loads noticeably slower after activating WP Ghost’s Safe Mode or Ghost Mode, the custom path rewrite rules are not…
- [Hide WordPress from Wappalyzer WP Ghost Guide](https://wpghost.com/kb/hide-wordpress-website-from-wappalyzer/): Hide your WordPress site from Wappalyzer, BuiltWith, and WhatCMS detection tools. Use WP Ghost Ghost Mode to remove all WordPress signals. Verification guide.
- [Clean Login Page, Fix Post-Login Redirect Issues WP Ghost](https://wpghost.com/kb/clean-login/): Fix login redirect issues when themes or plugins interfere with WP Ghost's custom admin path. Also replaces the WordPress logo with your site logo.
- [How to Configure Redirects in WP Ghost WordPress](https://wpghost.com/kb/redirects/): Control what happens when bots hit hidden WordPress paths. Configure 404, 403, or custom page redirects plus role-based login/logout destinations with WP Ghost.
- [How to Use URL Mapping in WP Ghost WordPress](https://wpghost.com/kb/url-mapping/): Replace any internal URL in your WordPress page source with a custom path using WP Ghost URL Mapping. Hide cache directories, plugin filenames, and asset paths.
- [Temporary Login URL is Redirecting to the Home Page](https://wpghost.com/kb/temporary-login-url-is-redirecting-to-the-home-page/): If clicking a temporary login URL redirects to the homepage instead of logging the user in, the session is being interrupted before authentication completes.
- [The Paths Are Not Changed in Frontend After Activating this Option](https://wpghost.com/kb/the-paths-are-not-changed-in-frontend-after-activating-this-option/): If you’ve activated path changes in WP Ghost but the frontend still shows original WordPress paths (like /wp-content/ or /wp-includes/), the changes aren’t…
- [Change Paths in WordPress Admin Dashboard Guide](https://wpghost.com/kb/change-paths-in-admin-dashboard/): Enable WP Ghost path changes in the WordPress admin dashboard. Add HMW_ALWAYS_CHANGE_PATHS to wp-config.php to extend path security to the admin backend.
- [Stop WP Ghost Auto Update Check wp-config.php](https://wpghost.com/kb/stop-plugin-auto-update-check/): Disable WP Ghost automatic update checks by adding WP_AUTO_UPDATE_HMWP constant to wp-config.php. Check for updates manually instead. Step-by-step guide.
- [Customize wp-content Directory in WordPress Guide](https://wpghost.com/kb/customize-wp-content-directory-in-wordpress/): Change the WordPress wp-content directory path with WP Ghost (rewrite rules, no files moved) or wp-config.php constants (physical rename). Two methods guide.
- [Hide wp-admin and wp-login.php from Source Code Guide](https://wpghost.com/kb/hide-wpadmin-and-wplogin-php-from-source-code/): Hide wp-admin and wp-login.php from your WordPress source code with WP Ghost. Verify with Security Check. Fix plugins that hardcode paths.
- [Add Custom Config File for Nginx Servers in WP Ghost Guide](https://wpghost.com/kb/add-a-custom-config-file-for-nginx-servers/): Move WP Ghost Nginx rewrite rules to a writable location when your WordPress root isn't writable. Use the hmwp_config_file filter to set a custom config path.
- [Test if .htaccess Works with AllowOverride All Guide](https://wpghost.com/kb/make-sure-htaccess-is-working-with-allowoverride-all/): Test if Apache reads .htaccess and mod_rewrite works for WP Ghost. Two quick diagnostic tests plus how to fix AllowOverride None. Apache troubleshooting guide.
- [Configure .htaccess in OpenLiteSpeed Step by Step Guide](https://wpghost.com/kb/config-htaccess-in-openlitespeed-a-step-by-step-guide/): Enable .htaccess support in OpenLiteSpeed at the server or virtual host level. Set Auto Load from htaccess, configure Rewrite, restart OLS.
- [Activate WP Ghost on a New Website License Guide](https://wpghost.com/kb/activate-wp-ghost-on-a-new-website/): Activate WP Ghost Premium on a new website using your Activation Token. Move a license between sites by removing one and activating another. Step-by-step guide.
- [Brute Force Protection Not Working on Comment Forms](https://wpghost.com/kb/brute-force-protection-not-working-on-comment-forms/): If reCAPTCHA doesn’t appear on your comment forms after enabling Brute Force Protection, the comment form may not be using WordPress’s standard comment hooks,…
- [Lesson 4 - How to Use the Website Events Log in WP Ghost](https://wpghost.com/kb/how-to-use-website-events-log/): Track every user action on your WordPress site with local and cloud-based logging. Set up email alerts for logins and settings changes.
- [How to Use Text Mapping in WP Ghost WordPress](https://wpghost.com/kb/text-mapping/): Replace WordPress class names like wp-block, elementor, and woocommerce with custom values using WP Ghost Text Mapping.
- [How to Hide WooCommerce and Elementor Class Names WP Ghost](https://wpghost.com/kb/hide-plugins-like-woocommerce-and-elementor/): Replace WooCommerce and Elementor class names in HTML, CSS, and JS using WP Ghost Text Mapping. Hide WordPress-exclusive plugin identifiers from theme…
- [WP Ghost Advanced Text Mapping - {blank} and {rand}](https://wpghost.com/kb/wp-ghost-advanced-text-mapping/): Use WP Ghost's {blank} pattern to remove WordPress class names entirely or {rand} to randomize them. Strip wp- prefixed classes that theme detectors scan for.
- [How to Hide the WordPress Version Number WP Ghost](https://wpghost.com/kb/hide-wordpress-version/): Remove WordPress, plugin, and theme version numbers from your site's source code with WP Ghost. Stop attackers from matching your versions to known…
- [How to Change Paths for Logged Users in WordPress](https://wpghost.com/kb/change-paths-for-logged-users/): Control whether WP Ghost applies custom paths to logged-in users or only visitors. Maintain page builder compatibility while keeping your site protected from…
- [Register Google reCAPTCHA V2 for WP Ghost Guide](https://wpghost.com/kb/register-new-google-recaptcha-v2/): Register a Google reCAPTCHA V2 site and connect it to WP Ghost Brute Force Protection. Get Site Key and Secret Key. Consider Enterprise for future-proof setup.
- [Disconnect a Website from WP Ghost Dashboard Guide](https://wpghost.com/kb/disconnect-a-website-from-wp-ghost-dashboard/): Disconnect a website from WP Ghost Dashboard to revoke premium license access. Block the site in Connected Sites. Site stays functional. Step-by-step guide.
- [Update Payment Details for WP Ghost Subscription](https://wpghost.com/kb/update-payment-details-for-wp-ghost-subscription/): Update your credit card or payment method for WP Ghost subscription via the Dashboard and Paddle. Prevent subscription lapses.
- [Cancel Your WP Ghost Subscription Guide](https://wpghost.com/kb/cancel-your-subscription-with-wp-ghost/): Cancel your WP Ghost Premium subscription from the Dashboard. Plugin stays active after cancellation. Reactivate anytime. Step-by-step cancellation guide.
- [Hide and Show WP Ghost in the WordPress Menu Guide](https://wpghost.com/kb/hide-and-show-wp-ghost-in-the-wordpress-menu/): Control which WordPress users see the WP Ghost menu. Hide from all administrators and show only to a specific user. Uses hmwp_manage_settings capability. Guide.
- [How to Simulate Drupal or Joomla CMS on WordPress WP Ghost](https://wpghost.com/kb/simulating-drupal-or-joomla-cms-with-wp-ghost/): Learn how to use WP Ghost's CMS Simulator to make WordPress look like Drupal or Joomla. Fool theme detectors, mislead bots, and break the automated attack…
- [Redirect Logged Users to Admin Dashboard WP Ghost](https://wpghost.com/kb/redirect-logged-users-to-admin-path-with-hide-my-wp-ghost/): Redirect logged-in WordPress users to the admin dashboard from the custom login path. Built-in WP Ghost setting or custom code hook. Two methods guide.
- [Set AllowOverride All on Apache Servers Step by Step Guide](https://wpghost.com/kb/how-to-set-allowoverride-all/): Enable .htaccess processing on Apache by setting AllowOverride All in apache2.conf or httpd.conf. Verified commands for Ubuntu, Debian, CentOS, RHEL, Rocky,…
- [Use WP Ghost on Nginx Without Editing Config Files WP Ghost](https://wpghost.com/kb/use-wp-ghost-with-nginx-hosting-without-editing-config-files/): Set up WP Ghost on Nginx hosting without editing nginx.conf. Get custom login paths, firewall, brute force, 2FA, and version hiding with zero server config…
- [WP Ghost Constants in wp-config.php Reference](https://wpghost.com/kb/wp-ghost-constants-in-wp-config-php/): All WP Ghost wp-config.php constants: priority loading, rewrite rules, dynamic files, admin paths, image hiding, cookies, permissions, updates. Full reference.
- [How to Change the Themes Path in WordPress WP Ghost](https://wpghost.com/kb/change-themes-path-with-wp-ghost/): Learn how to change the WordPress themes path, hide theme names, rename style.css, and block theme detectors with WP Ghost.
- [Rollback Settings - Safe URL and Recovery Options WP Ghost](https://wpghost.com/kb/rollback-settings/): Recover access to your WordPress site with WP Ghost's Safe URL parameter, 5-minute pause, and full settings rollback.
- [Rewrites Rules Location, Protect .htaccess Rules WP Ghost](https://wpghost.com/kb/rewrites-rules-location/): Stop other plugins from deleting WP Ghost's .htaccess rewrite rules. Move rules inside the WordPress section for protection. Apache and LiteSpeed servers only.
- [WP Ghost and Really Simple SSL Compatibility Guide](https://wpghost.com/kb/wp-ghost-and-really-simple-ssl/): Fix WP Ghost and Really Simple SSL htaccess rule order. Re-save WP Ghost after Really Simple SSL to ensure SSL redirect rules are positioned correctly.
- [WP Ghost and Loginizer Compatibility Guide](https://wpghost.com/kb/wp-ghost-and-loginizer/): Use WP Ghost with Loginizer for layered WordPress login security. Path security, firewall, brute force protection in WP Ghost; focused login defense in…
- [WP Ghost and Limit Login Attempts Reloaded Compatibility](https://wpghost.com/kb/wp-ghost-and-limit-login-attempts-reloaded/): Use WP Ghost with Limit Login Attempts Reloaded for layered WordPress login security. Path security and firewall in WP Ghost; focused login rate-limiting in…
- [WP Ghost and BBQ Firewall Compatibility Guide Setup](https://wpghost.com/kb/wp-ghost-and-bbq-firewall/): Use WP Ghost with BBQ Firewall (Block Bad Queries) for layered WordPress security. Comprehensive path security and firewall in WP Ghost; pattern filter in BBQ.
- [Plugin Loading Hook, Cache Compatibility Settings WP Ghost](https://wpghost.com/kb/plugin-loading-hook/): Fix WP Ghost path conflicts with caching plugins by changing the Plugin Loading Hook. Four options from Must Use Plugin to Late Loading. Free advanced feature.
- [How to Change Paths in Cached Files with WP Ghost WordPress](https://wpghost.com/kb/change-paths-in-cached-files/): Ensure WP Ghost custom paths work with caching plugins. Rewrite paths in cached CSS, JS, and HTML files. Compatible with WP Rocket, LiteSpeed, and Autoptimize.
- [How to Change the Comments Path in WordPress WP Ghost](https://wpghost.com/kb/change-comments-path-using-wp-ghost/): Learn how to change the WordPress comments path, hide wp-comments-post.php, and add reCAPTCHA to comment forms with WP Ghost.
- [Add Brute Force Protection to Elementor Login Forms WP Ghost](https://wpghost.com/kb/integrating-brute-force-protection-in-elementor-login-forms/): Add reCAPTCHA brute force protection to Elementor login forms using WP Ghost's [hmwp_bruteforce] shortcode. Works with Divi and other page builders too.
- [Google reCAPTCHA Enterprise for WordPress WP Ghost Setup](https://wpghost.com/kb/google-recaptcha-enterprise-protection/): Set up Google reCAPTCHA Enterprise in WordPress with WP Ghost. Advanced risk scoring, Account Defender, and Password Leak Detection for brute force protection.
- [How to Activate the 7G Firewall in WP Ghost WordPress](https://wpghost.com/kb/7g-firewall-for-wordpress/): Enable the 7G Firewall in WP Ghost for server-level protection against SQL injection and script injection.
- [How to Blacklist IPs, User Agents, and Referrers WP Ghost](https://wpghost.com/kb/blacklist/): Block specific IP addresses, bot user agents, spam referrers, and hostnames from accessing your WordPress site. Manual blacklisting with WP Ghost's Firewall.
- [How to Whitelist IPs and Paths in WP Ghost WordPress](https://wpghost.com/kb/whitelist-ips-paths/): Exempt trusted IP addresses and specific URL paths from WP Ghost firewall, brute force, and country blocking rules. Prevent team lockouts and false positives.
- [The 8G Firewall Protection in WP Ghost WordPress](https://wpghost.com/kb/8g-firewall-protection/): Enable the 8G Firewall in WP Ghost to block SQL injection, script injection, and exploit attempts at the server level before WordPress loads.
- [How to Change the wp-includes Path in WordPress WP Ghost](https://wpghost.com/kb/change-wp-includes-path-with-wp-ghost/): Learn how to change and hide the WordPress wp-includes path with WP Ghost. Remove core WordPress fingerprints, block CMS detection, and hide your site…
- [How to Change the Logout Path in WordPress WP Ghost](https://wpghost.com/kb/change-logout-path-with-wp-ghost/): Learn how to change the WordPress logout path with WP Ghost. Prevent forced logout CSRF attacks, remove WordPress fingerprints, and complete your path security.
- [How to Change the wp-activate.php Path in WordPress WP Ghost](https://wpghost.com/kb/change-wp-activate-path-with-hide-my-wp-ghost/): Learn how to change the WordPress activation path (wp-activate.php) with WP Ghost. Secure Multisite user activation, remove WordPress fingerprints, block bots.
- [How to Change the Registration Path in WordPress WP Ghost](https://wpghost.com/kb/change-register-path-with-wp-ghost/): Learn how to change the WordPress registration path with WP Ghost. Stop spam signups, block bot registrations, and prevent fake accounts from cluttering your…
- [How to Change the Lost Password Path in WordPress WP Ghost](https://wpghost.com/kb/change-lost-password-path-with-wp-ghost/): Learn how to change and secure the WordPress lost password path with WP Ghost. Stop spam password reset emails, prevent username enumeration, and block bot…
- [99% Fewer Hacker Attacks on WordPress Sites](https://wpghost.com/kb/99-fewer-hacker-attacks-on-wordpress-sites/): Why most WordPress sites get hacked, what WP Ghost does differently, and how you can protect your site in a few clicks to get fewer hacker attacks, without…
- [Hacker Bot Attack Types Against WordPress Sites Guide](https://wpghost.com/kb/hacker-bots-attack-types/): Learn the six attack types bots use against WordPress: brute force, SQL injection, file inclusion, XSS, and endpoint exploits. See how WP Ghost blocks each one.
- [Prevent Hack Attacks on Your WordPress Site WP Ghost](https://wpghost.com/kb/prevent-hack-attacks-on-wordpress/): Reduce your WordPress attack surface with WP Ghost. Change paths, block bots, add firewall rules, enforce 2FA, and monitor threats.
- [How to Hide WordPress Common Paths and Files WP Ghost](https://wpghost.com/kb/hide-wordpress-common-paths-and-files/): Learn how to hide WordPress common paths, block access to sensitive files like wp-config.php and readme.html, and disable directory browsing with WP Ghost…
- [How to Disable XML-RPC in WordPress with WP Ghost](https://wpghost.com/kb/disable-xml-rpc-access-using-wp-ghost/): Learn how to disable WordPress XML-RPC access with WP Ghost. Block system.multicall brute force amplification, pingback DDoS attacks, and username enumeration.
- [How to Configure WP Ghost Firewall Protection WordPress](https://wpghost.com/kb/firewall-security/): Block SQL injection, script injection, and exploit attempts with WP Ghost's 7G/8G firewall. Automate IP blocking. Block theme detectors and AI crawlers.
- [How to Create Temporary Logins in WordPress WP Ghost](https://wpghost.com/kb/temporary-logins/): Create passwordless, time-limited login URLs for developers and team members with WP Ghost. Set user roles, expiration times, and revoke access instantly.
- [Magic Link Login - Passwordless WordPress Login WP Ghost](https://wpghost.com/kb/magic-link-login/): Let WordPress users log in by clicking a link sent to their email, no password needed. WP Ghost Magic Link Login works with WordPress and WooCommerce login…
- [How to Change the admin-ajax.php Path in WordPress WP Ghost](https://wpghost.com/kb/change-admin-ajax-php-path-with-hide-my-wp-ghost/): Learn how to change and secure the WordPress admin-ajax.php path with WP Ghost. Block plugin exploits, hide wp-admin from AJAX URLs, and securing AJAX…
- [How to Change the REST API Path and Disable XML-RPC WP Ghost](https://wpghost.com/kb/change-rest-api-path-with-wp-ghost/): Learn how to change the WordPress REST API wp-json path, disable unauthenticated access, block rest_route, disable XML-RPC, and remove RSD with WP Ghost plugin.
- [How to Change Author Path and Hide Author ID in WordPress WP Ghost](https://wpghost.com/kb/change-author-path-and-hide-id-with-hide-my-wp-ghost/): Learn how to change the WordPress author path, hide author IDs, and prevent user enumeration with WP Ghost.
- [How to Change the Plugins Path in WordPress WP Ghost](https://wpghost.com/kb/change-plugins-path-with-wp-ghost/): Learn how to change the WordPress plugins path, hide plugin names, and block plugin detection with WP Ghost.
- [How to Change the wp-content Path in WordPress WP Ghost](https://wpghost.com/kb/change-wp-content-path-with-wp-ghost/): Learn how to change and hide the WordPress wp-content path with WP Ghost. Block plugin detection, hide themes from scanners, and protect your entire file…
- [How to Change and Hide wp-login Path in WordPress WP Ghost](https://wpghost.com/kb/change-and-hide-login-path-with-wp-ghost/): Learn how to change and hide the WordPress wp-login.php path with WP Ghost. Stop brute force bots, protect your login page, and secure your site in minutes.
- [How to Change and Hide wp-admin Path in WordPress WP Ghost](https://wpghost.com/kb/change-and-hide-wp-admin-path-with-wp-ghost/): Learn how to change and hide the WordPress wp-admin path with WP Ghost. Block hacker bots, prevent brute force attacks, and secure your admin dashboard in…
- [Why Has Elementor Stopped Working with WP Ghost Safe or Ghost Mode?](https://wpghost.com/kb/elementor-stopped-working-after-changing-paths/): Elementor editor broken after activating WP Ghost Safe Mode or Ghost Mode? Fix it by checking Nginx config, REST API, AJAX path, cache, and logged user…
- [The New Admin Path Is Redirected To Front Page](https://wpghost.com/kb/the-new-admin-path-is-redirected-to-front-page/): If your custom admin path (the one you set to replace wp-admin) redirects to the homepage when you’re not logged in, the Hide the New Admin Path option is…
- [The New Admin Path Is Redirected To Front Page When Logged In](https://wpghost.com/kb/new-admin-path-redirects-to-front-page-when-logged-in/): If you’re logged in as an administrator but the custom admin path still redirects to the homepage, the browser session wasn’t established on the new path.
- [Cache Plugins Not Minifying CSS and JS Files](https://wpghost.com/kb/cache-plugins-not-minifying-css-and-js-files/): If your cache plugin (WP Rocket, Autoptimize, LiteSpeed Cache, W3 Total Cache, etc.) stops minifying or combining CSS and JS files when WP Ghost is active, the…
- [CONNECTION ERROR! Make sure your website can access account.wpghost.com](https://wpghost.com/kb/connection-error-make-sure-your-website-can-access-https-account-wpghost-com/): If you see “CONNECTION ERROR! Make sure your website can access: https://account.wpghost.com” when activating your WP Ghost license or connecting to the cloud,…
- [Customize Right-Click Disable for Specific Pages](https://wpghost.com/kb/customize-right-click-disable-for-specific-pages/): Allow right-click on specific pages while keeping it disabled sitewide. Use the hmwp_option_hmwp_disable_click filter in functions.php. Step-by-step guide.
- [Change or Remove WordPress Login Logo Link Guide](https://wpghost.com/kb/change-or-remove-login-logo-link/): Change the WordPress login page logo link to your homepage and update the alt text to your site name. Remove WordPress identifiers from the login page. Guide.
- [Add Files to Hide WordPress Common Files WP Ghost](https://wpghost.com/kb/add-files-to-hide-wordpress-common-files/): Add custom files to WP Ghost's Hide WordPress Common Files list using the hmwp_hide_commonfiles_files filter. Hide wp-cron.php or custom PHP files. Guide.
- [WP Ghost - Version 8.3.07](https://wpghost.com/kb/wp-ghost-8-3-07/): We are pleased to announce the release of WP Ghost 8.3.07. This update focuses on the “Senior Developer Experience,” refining the precision of our monitoring…
- [Passkey 2FA for WordPress - Face ID, Touch ID WP Ghost](https://wpghost.com/kb/introducing-passkey-2fa-in-wp-ghost/): Use Face ID, Touch ID, or Windows Hello as your WordPress second factor. Phishing-resistant passkey authentication with WP Ghost. Free feature, no codes needed.
- [How to Hide Source Map References in WordPress WP Ghost](https://wpghost.com/kb/hide-source-map-references/): Remove sourceMappingURL and sourceURL references from your WordPress site with WP Ghost. Hide internal file names, build structures, and debugging metadata…
- [Login Page Design Customization with WP Ghost WordPress](https://wpghost.com/kb/login-page-design-customization/): Customize your WordPress login page with WP Ghost. Replace the WordPress logo, change colors, choose layout presets, and remove CMS fingerprints.
- [Lesson 3 - Hide Your Site from WordPress Theme Detectors and Bots WP Ghost](https://wpghost.com/kb/hide-from-wordpress-theme-detectors/): Complete checklist to make your WordPress site invisible to theme detectors and hacker bots. Remove all CMS fingerprints from source code.
- [Lesson 2 – Activate Brute Force Protection on Your Login Page WP Ghost](https://wpghost.com/kb/activate-brute-force-protection/): Add reCAPTCHA and login attempt limits to your WordPress login page in under 5 minutes. Math reCAPTCHA, Google V2, V3, and IP whitelisting.
- [Lesson 1 - Customize Paths and Hide Your WordPress Website WP Ghost](https://wpghost.com/kb/how-to-hide-wordpress-website/): Change wp-admin, wp-login, wp-content, plugins, and themes paths to hide your WordPress identity from bots and theme detectors. Safe Mode or Ghost Mode.
- [WP Ghost - Free vs Premium](https://wpghost.com/kb/wp-ghost-free-vs-premium/): WP Ghost is available in two versions: a free version on WordPress.org with over 115 security features, and a Premium version with over 150 security features…
- [WP Ghost GDPR Compliance Data Policy](https://wpghost.com/kb/wp-ghost-gdpr-compliance/): WP Ghost is GDPR compliant. Minimal data collection, no visitor tracking, payments via Paddle. Events Log data auto-deleted after 30 days. Full privacy details.
- [WP Ghost Plugin Hooks Reference for Developers](https://wpghost.com/kb/wp-ghost-hooks-reference-for-developers/): Complete developer reference for WP Ghost's 80+ filters and actions. Customize path security, firewall, 2FA, brute force, login, and admin UI with hmwp_* hooks.
- [Hosting and Server Types, Auto-Detection Override WP Ghost](https://wpghost.com/kb/hosting-and-server-types/): WP Ghost auto-detects your server type. Override it manually if paths break or detection fails. Supports Apache, Nginx, LiteSpeed, IIS, and managed hosting.
- [WP Ghost Compatible WordPress Themes List Guide](https://wpghost.com/kb/wp-ghost-compatibility-themes-list/): WP Ghost works with all major WordPress themes including Astra, GeneratePress, Avada, Divi, Blocksy, Woodmart, Flatsome, BuddyBoss, and 1,000+ tested themes.
- [WP Ghost Plugin Compatibility List, 1,000+ Tested Plugins](https://wpghost.com/kb/wp-ghost-compatibility-plugins-list/): Full list of WordPress plugins tested with WP Ghost: cache, security, WooCommerce, SEO, page builders. Compatible in Lite Mode, Safe Mode, and Ghost Mode.
- [WP Ghost Settings - Best Practice](https://wpghost.com/kb/wp-ghost-settings-best-practice/): In just 3 minutes, you can learn how to set up WP Ghost in Ghost Mode and activate all the security features you need for a stronger and safer website.
- [User Events Log - Track WordPress Dashboard Activity WP Ghost](https://wpghost.com/kb/events-log-report/): Track logins, plugin changes, post deletions, and settings modifications on your WordPress site. User Events Log with email alerts and cloud backup.