by
Fernando Tellado
5 (1 reviews)
Force login to make the site private - Gozer
Force visitors to log in before accessing your site with extensive exception controls.
Force login to make the site private ranks #21,348 among WordPress.org plugins with 50+ active installations, is #473 of 1,659 in the Authentication category, a 5/5 rating from 1 reviews, and was last updated Aug 28, 2026. Data from WordPress.org, refreshed twice daily — see methodology.
Compatible with WP 7.1
v2.1.2
Current Version v2.1.2
Updated 2 months ago
Last Update on 28 Aug, 2026
Refreshed 1 week ago
Last Refreshed on
#473 of 1,659 in Authentication
Top 50% by installs
Downloads -23.4% this week
Rank
#21,348
—
No change
Active Installs
50+
+25%
KW Avg Position
77.5
0.5 better
Downloads
314
+3 today
Support Resolved
0%
—
No change
Rating
100%
Review 5 out of 5
5
(1 reviews)
Next Milestone 60
50+
60+
2,399
Ranks to Climb
-
Growth Needed
8,000,000
Active Installs
Pro
Unlock Exact Install Count
See the precise estimated active installs for this plugin, calculated from real-time ranking data.
- Exact install estimates within tiers
- Track install growth over time
- Milestone progress predictions
Need 7 more installs to reach 60+
Rank Changes
Current
#21,348
Change
Best
#
Downloads Growth
Downloads
Growth
Peak
Upgrade to Pro
Unlock 30-day, 90-day, and yearly download history charts with a Pro subscription.
Upgrade NowReviews & Ratings
5.0
1 reviews
Overall
100%
5
1
(100%)
4
0
(0%)
3
0
(0%)
2
0
(0%)
1
0
(0%)
Track This Plugin
Get detailed analytics, keyword tracking, and position alerts delivered to your inbox.
Start Tracking FreePlugin Details
- Version
- 2.1.2
- Last Updated
- Aug 28, 2026
- Requires WP
- 5.0+
- Tested Up To
- 7.1
- PHP Version
- 7.4 or higher
- Author
- Fernando Tellado
Support & Rating
- Rating
- ★ ★ ★ ★ ★ 5
- Reviews
- 1
- Support Threads
- 0
- Resolved
- 0%
Keywords
Upgrade to Pro
Unlock keyword rankings, search positions, and detailed analytics with a Pro subscription.
Upgrade NowSimilar Plugins
Adminify – White Label, Admin Menu Editor, Login Customizer
6K+ installs
#2,757
Master Addons for Elementor – Elementor Addons, Widgets, Mega Menu Builder, Popup Builder, Widget Builder & Template Kits
30K+ installs
#1,015
WPForms – AI Form Builder for WordPress – Contact Forms, Payment Forms, Survey Form, Quiz & More
5M+ installs
#9
Wordfence Security – Firewall, Malware Scan, and Login Security
5M+ installs
#11
WPS Hide Login
2M+ installs
#27
Limit Login Attempts Security - Login Security, 2FA, Firewall, Brute Force Prevention
1M+ installs
#33
Loginizer
1M+ installs
#46
All-In-One Security (AIOS) – Security and Firewall
1M+ installs
#57
Maintenance
1M+ installs
#59
MainWP Child – Securely Connects to the MainWP Dashboard to Manage Multiple Sites
700K+ installs
#86
Frequently Asked Questions
Common questions about Force login to make the site private - Gozer
The plugin is designed with safe defaults. Critical functionality like REST API, WP-Cron, and AJAX are allowed by default to prevent breaking the block editor or scheduled tasks.
Yes, if you enable the "Search engine bots" option. Major search engine bots (Google, Bing, etc.) will be able to access and index your content.
If "Search engine bots" is enabled (the default), yes: bots are recognized by their user agent, which any visitor can set freely, so a curl request claiming to be Googlebot gets through. If your site must stay private to everyone except real search engines, enable "Verify bots by reverse DNS": Gozer then confirms the claim with a forward-confirmed reverse DNS lookup against the engine's official domains (Google, Bing, Yahoo, Yandex, Baidu, and Apple) and blocks impostors, as well as bots that cannot be verified this way (such as social network preview fetchers). If the site should be completely hermetic, disable the "Search engine bots" exception altogether. I am behind Cloudflare or a reverse proxy and my allowed IPs stopped working Since 2.1.0 Gozer reads the visitor IP from the direct connection by default, because trusting proxy headers on sites not behind a proxy allowed anyone to impersonate an allowed IP by forging a header. Behind Cloudflare or a reverse proxy, the direct connection is the proxy itself, so go to Settings > Gozer > "Visitor IP detection" and select the header your infrastructure sets (CF-Connecting-IP for Cloudflare, X-Real-IP or X-Forwarded-For for other proxies). Your IP whitelist will work as before.
Go to Settings > Gozer and add paths to the "Allowed paths" field. Enter one path per line, like /contact/ or /about/.
Use CIDR notation (e.g., 192.168.1.0/24 for a /24 subnet) or wildcards (e.g., 192.168.* for all IPs starting with 192.168).
Generate a token in Settings > Gozer, then share the generated URL. Anyone with that link can access the site without logging in until the token expires.
Yes, the plugin works on multisite installations. Each site can have its own configuration.
Gozer the Gozerian is the supernatural entity from Ghostbusters (1984) who asked "Are you a god?" before denying access to mere mortals. Just like our plugin does with your site visitors.
If you set a "Minimum access level" higher than the user's role, logged-in users below that level are treated like logged-out visitors and shown a 403 page. This front-end restriction is independent from the WordPress dashboard: a Subscriber can still reach their profile screen but will not see the front-end. Set the access level back to "Any logged-in user" to allow every logged-in user through. I enabled private mode but old pages still load without logging in A page cache (a caching plugin, your host, or a CDN) can serve pre-generated HTML without running WordPress, so Gozer never sees those requests. Gozer purges the major caching plugins automatically when you activate the plugin, toggle private mode, or save settings, but if your host or CDN caches HTML you may need to purge it once after enabling Gozer.
