by
Shazzad Hossain Khan
0 (0 reviews)
Adminkeep – Site Lockdown & Admin Enhancements
Site lockdown and admin enhancements for WordPress: email log, custom CSS, disable comments and more. Every feature is off until you switch it on.
Adminkeep ranks #18,688 among WordPress.org plugins with 70+ active installations, and was last updated Oct 24, 2026. Data from WordPress.org, refreshed twice daily — see methodology.
Compatible with WP 7.1.4
v2.6.2
Current Version v2.6.2
Updated 2 weeks ago
Last Update on 24 Oct, 2026
Refreshed 1 week ago
Last Refreshed on
Top 25% by installs
Downloads -19.5% this week
Actively maintained
Rank
#18,688
—
No change
Active Installs
70+
-4.1%
KW Avg Position
71.7
1 worse
Downloads
2K
+81 today
Support Resolved
0%
—
No change
Rating
0%
Review 0 out of 5
0
(0 reviews)
Next Milestone 80
70+
80+
1,411
Ranks to Climb
-
Growth Needed
8,000,000
Active Installs
Pro
Unlock Exact Install Count
See the precise estimated active installs for this plugin, calculated from real-time ranking data.
- Exact install estimates within tiers
- Track install growth over time
- Milestone progress predictions
Need 4 more installs to reach 80+
Rank Changes
Current
#18,688
Change
Best
#
Downloads Growth
Downloads
Growth
Peak
Upgrade to Pro
Unlock 30-day, 90-day, and yearly download history charts with a Pro subscription.
Upgrade NowReviews & Ratings
0.0
0 reviews
Overall
0%
5
0
(0%)
4
0
(0%)
3
0
(0%)
2
0
(0%)
1
0
(0%)
Track This Plugin
Get detailed analytics, keyword tracking, and position alerts delivered to your inbox.
Start Tracking FreePlugin Details
- Version
- 2.6.2
- Last Updated
- Oct 24, 2026
- Requires WP
- 6.9+
- Tested Up To
- 7.1.4
- PHP Version
- 7.4 or higher
- Author
- Shazzad Hossain Khan
Support & Rating
- Rating
- ☆ ☆ ☆ ☆ ☆ 0
- Reviews
- 0
- Support Threads
- 0
- Resolved
- 0%
Keywords
Upgrade to Pro
Unlock keyword rankings, search positions, and detailed analytics with a Pro subscription.
Upgrade Now
Frequently Asked Questions
Common questions about Adminkeep – Site Lockdown & Admin Enhancements
Not unless you ask it to. Turning Disable Comments on only hides them — a test asserts the comment rows are untouched after a full enable-and-disable cycle. There is a separate cleanup button that does delete, and it deletes spam and trashed comments only unless you tick the box to include approved ones. It shows the exact count, asks you to confirm, and cannot be undone.
Yes, instantly. There is never a migration to run or a repair step to find. The locks work through WordPress filters, so nothing was written to your database to undo — switch one off and your site is exactly as it was. The one exception is Two-Factor Login, which remembers trusted devices in user meta so they keep skipping the code. Switching it off leaves those entries where they are, doing nothing, and makes its recovery link stop working; deleting the plugin with "Delete all Adminkeep data when the plugin is deleted" switched on removes them. The Content features are deliberately different: they write the things you asked them to write. A copy you made, an order you saved, a file you replaced, a redirect recorded when you renamed a page — switching the feature off stops it doing any more, and leaves what it already did alone. Work you did on purpose should not disappear because you unticked a checkbox.
Yes. Bots usually POST straight to wp-comments-post.php without ever loading your page, so hiding the comment form does nothing. Adminkeep refuses those requests with a 403 before WordPress processes them, and refuses comment creation through the REST API as well.
Not exactly, and it would be dishonest to say otherwise. It is enforced in PHP, so anyone with filesystem, database or WP-CLI access can bypass it. It reliably stops accidents and casual changes — a client uploading a plugin zip from who knows where, or overwriting an installed plugin with one. Treat it as a policy guard, not a security boundary.
Because it cannot be switched off from the admin. Once it is in wp-config.php you need file access to undo it, which strands people. Installation Lockdown filters capabilities instead, so you can always turn it off from the settings screen. If you want the harder version, the constant is still there and this plugin does not interfere with it.
Gmail and Google Workspace: yes, with an app password. Microsoft 365 and Outlook.com: no — Microsoft now requires signing in through Microsoft (OAuth) for SMTP, which this feature does not support. A dedicated SMTP plugin is the better choice there.
Encrypted in your site's database, which protects it in database backups. For the strongest setup define ADMINKEEP_SMTP_PASS (and the other ADMINKEEP_SMTP_* constants) in wp-config.php: values set there are not saved to the database, and the settings form does not display them.
They are removed before an email is stored, along with sign-in and account-activation links. The common link formats are covered, not every possible one, so treat it as a safeguard rather than a guarantee. If you would rather not store email content at all, Email Log has a setting to keep only the envelope — sender, recipient, subject and status — and switch content storage off. Two-Factor Login's code emails are always stored that way, whatever the setting.
Switching it off stops logging. What is already logged stays until you delete it, or delete the plugin with "Delete all Adminkeep data when the plugin is deleted" switched on. While it is off nothing new is recorded and the entries are not aged out, so if you want the log emptied, empty it first — from the Email Log screen, or with wp adminkeep email-log purge --all — and then switch the feature off.
They stay, unless you ask otherwise. Deleting the plugin keeps its settings, your Custom CSS and Header & Footer Code, the SMTP and contact form settings, the email log, the Keep URL redirects and the devices Two-Factor Login remembers and its recovery link, so installing it again brings everything back. To remove all of it when the plugin is deleted, switch on "Delete all Adminkeep data when the plugin is deleted" under Settings → Adminkeep → Plugin settings, or run wp adminkeep setting set delete_data=true. Deactivating never deletes anything.