by John Darrel
4.5 (371 reviews)
WP Ghost (Hide My WP Ghost) - Security & Firewall
Hide and Secure WP paths with the complete WP security suite for Site Hardening. Includes 8G Firewall, Brute Force protection, and Passkeys.
Compatible with WP 7
v7.0.07
Current Version v7.0.07
Updated 5 days ago
Last Update on 20 Jul, 2026
Refreshed 10 hours ago
Last Refreshed on
Rank
#577
-31 this week
Active Installs
70K+
-30%
KW Avg Position
59
-0.4 better
Downloads
2.5M
+863 today
Support Resolved
0%
—
No change
Rating
90%
Review 4.5 out of 5
4.5
(371 reviews)
Next Milestone 80K
70K+
80K+
10
Ranks to Climb
-
Growth Needed
8,000,000
Active Installs
Pro
Unlock Exact Install Count
See the precise estimated active installs for this plugin, calculated from real-time ranking data.
- Exact install estimates within tiers
- Track install growth over time
- Milestone progress predictions
Need 1,588 more installs to reach 80K+
Rank Changes
Current
#577
Change
Best
#
Downloads Growth
Downloads
Growth
Peak
Upgrade to Pro
Unlock 30-day, 90-day, and yearly download history charts with a Pro subscription.
Upgrade NowReviews & Ratings
4.5
371 reviews
Overall
90%
5
315
(85%)
4
5
(1%)
3
8
(2%)
2
9
(2%)
1
34
(9%)
Tracked Keywords
Showing 5 of 5| Keyword | Position | Change | Type | Updated |
|---|---|---|---|---|
| hide my wp | 1 | — | Tag | 1 day ago |
| firewall | 19 | — | Tag | 1 day ago |
| Brute Force | 25 | — | Tag | 1 day ago |
| security | 52 | — | Tag | 1 day ago |
| login | 198 | — | Tag | 1 day ago |
Unlock Keyword Analytics
Track keyword rankings, search positions, and discover new ranking opportunities with a Pro subscription.
- Full keyword position tracking
- Historical ranking data
- Competitor keyword analysis
Track This Plugin
Get detailed analytics, keyword tracking, and position alerts delivered to your inbox.
Start Tracking FreePlugin Details
- Version
- 7.0.07
- Last Updated
- Jul 20, 2026
- Requires WP
- 5.8+
- Tested Up To
- 7
- PHP Version
- 7.4 or higher
- Author
- John Darrel
Support & Rating
- Rating
- ★ ★ ★ ★ ★ 4.5
- Reviews
- 371
- Support Threads
- 0
- Resolved
- 0%
Keywords
Upgrade to Pro
Unlock keyword rankings, search positions, and detailed analytics with a Pro subscription.
Upgrade NowSimilar Plugins
Adminify – White Label, Admin Menu Editor, Login Customizer
7K+ installs
#2,724
Master Addons for Elementor – Elementor Addons, Widgets, Mega Menu Builder, Popup Builder, Widget Builder & Template Kits
30K+ installs
#988
WPForms - AI Form Builder for WordPress - Contact Forms, Payment Forms, Survey Form, Quiz & More
5M+ installs
#9
Wordfence Security – Firewall, Malware Scan, and Login Security
5M+ installs
#11
WPS Hide Login
2M+ installs
#27
Frequently Asked Questions
Common questions about WP Ghost (Hide My WP Ghost) - Security & Firewall
No. WP Ghost utilizes high-performance server rewrite rules (Nginx, Apache, IIS) to change the visible paths in your source code. Your actual WordPress files and directories remain exactly where they are, ensuring zero risk to your site’s stability and core updates.
For the vast majority of WordPress sites, Yes. By combining Architectural Hardening with an 8G Firewall and Automated IP Blocking, WP Ghost neutralizes the automated reconnaissance and brute-force attempts that account for over 90% of real-world attacks. It provides a foundational defense that is often statistically sufficient on its own, while remaining fully compatible with "Defense in Depth" strategies involving malware scanners or file-integrity monitors.
Yes! WP Ghost is designed as your "Outer Perimeter" defense. It works perfectly alongside malware scanners and reactive security tools like Wordfence, Sucuri, or Solid Security. By implementing Paths Security first, WP Ghost stops bots before they even get close enough to be scanned by other plugins.
Not at all. WP Ghost handles Sitemap.xml and Robots.txt mapping automatically. This ensures that Google and other search engines can still index your content perfectly, while malicious bots receive a 404 error when attempting to probe your system paths.
Obscurity is simply hiding a key under a mat. Paths Security is an architectural hardening strategy—like moving the door to a secure, unique location and changing the lock. It is a recognized technical hardening standard used by enterprise-grade sites to prevent Bot Reconnaissance.
Yes. The plugin is fully compatible with WP Multisite (Network-wide configuration) and supports Apache, Nginx, IIS, and LiteSpeed servers.
WP Ghost fully supports Nginx. Because Nginx does not use .htaccess, you will be guided to add the generated rewrite rules to your nginx.conf file manually. We provide specific tutorials for Kinsta, RunCloud, CloudPanel, CWP7, AAPanel, and Ploi.io.
This usually happens if the server rewrite rules are not yet active. Purge Cache: Clear your WordPress cache and any server-side caching (Varnish, Nginx FastCGI). Manual Rewrites: If your server config file is not writable, copy the rules from WP Ghost and add them manually to your .htaccess or nginx.conf. Restart Nginx: If on Nginx, you must reload/restart the service after saving settings. Free Support: If the issue persists, contact us and we will set up the plugin for you for free.
Safe URL: Use the "Safe URL" text file that was automatically generated and downloaded when you saved your settings. Manual Reset: Access your server via FTP/SFTP and rename the folder /wp-content/plugins/hide-my-wp to something else. This temporarily disables the path changes so you can login via the default wp-login.php.
Due to the restricted infrastructure of WordPress.com managed hosting, changes to the administrative and login paths are not allowed. However, you can still use WP Ghost for Site Hardening, the 8G Firewall, Passkey Authentication, and other Hack Prevention features.