Site Hardening

Content protection, security keys, privacy, and safe updates.

12 articles

  • Security Hardening

    Turn on hardening options for accounts, files, headers, APIs and front-end features, and track how many of the available options are enabled.

    3 min read

Update Manager

Control plugin and theme updates and review update history.

  • Plugin Updates Updated

    Filter plugins by status, including abandoned ones, and for each one control updates, auto-updates, translation updates and dashboard visibility.

    2 min read

  • Theme Updates

    Filter installed themes by status, and for each one control updates, auto-updates, translation updates and whether it shows in the dashboard.

    1 min read

  • Update History

    Review 30 days of plugin, theme and core updates, filter by status or by auto versus manual, export to CSV, and clear old records.

    1 min read

Security Keys

View, back up, and rotate your WordPress keys and salts.

  • WordPress Security Keys

    View your eight WordPress keys and salts, back them up, and schedule automatic rotation with blackout hours and advance reminders.

    7 min read

Content Protection

Configure copy, right-click, image, and keyboard shortcut settings for visitors.

  • Content Protection Overview

    Configure content protection: turn it on, choose whole site or specific pages, add WooCommerce products and URL patterns, and exclude roles.

    1 min read

  • Text Protection

    Configure text settings that disable right-click, text selection, and the copy and cut keyboard shortcuts for visitors to your site.

    1 min read

  • Image Protection

    Configure image settings that disable right-click and dragging on images, add an image overlay, and turn on hotlink protection for other sites.

    1 min read

  • Keyboard Shortcut

    Configure keyboard shortcut settings that disable the developer tools, view source, save page and print shortcuts for visitors to your site.

    1 min read

  • Display Settings

    Configure how visitors are told an action is blocked, set a custom message for each block type, and turn on mobile long-press and iOS callout options.

    1 min read

API & Data Privacy

Configure what WordPress shares about your site in API calls.

  • API & Data Privacy Updated

    Configure API privacy options that remove WordPress version, plugin, theme, header and user login details from API requests and responses.

    2 min read

AI Agent Access

  • AI Agent Access New

    AI tools can connect to your site through the MCP Adapter plugin.

    4 min read

Secure your site today

Install the free plugin from WordPress.org and set up real protection with the guided setup wizard. Upgrade to Pro whenever you need more.