H
by Jesin A 4 (5 reviews)

HTTP Digest Authentication

Protect your wp-login.php page with HTTP Digest Authentication without the need of adding web server modules or changing config files.

HTTP Digest Authentication ranks #32,037 among WordPress.org plugins with 10+ active installations, is #637 of 1,590 in the Authentication category, a 4/5 rating from 5 reviews, and was last updated Nov 25, 2017. Data from WordPress.org, refreshed twice daily — see methodology.

Tested up to WP 4.9 (Current: 7.1.1)
v1.2.1 Current Version v1.2.1
Updated 8 years ago Last Update on 25 Nov, 2017
Refreshed 6 hours ago Last Refreshed on
#637 of 1,590 in Authentication Top 50% by installs No update in over a year
View on WordPress.org
Rank
#32,037
-329 this week
Active Installs
10+
-33.3%
KW Avg Position
90.5
No change
Downloads
5K
+1 today
Support Resolved
0%
No change
Rating
80%
Review 4 out of 5
4 (5 reviews)

Next Milestone 20

Total Progress 40%
10+ 20+
18,775
Ranks to Climb
-
Growth Needed
8,000,000
Active Installs
Pro

Unlock Exact Install Count

See the precise estimated active installs for this plugin, calculated from real-time ranking data.

  • Exact install estimates within tiers
  • Track install growth over time
  • Milestone progress predictions
Upgrade to Pro
Need 6 more installs to reach 20+

Rank Changes

31,616 31,816 32,016 32,216 32,416 15-09-2026 16-09-2026 17-09-2026 18-09-2026 19-09-2026 20-09-2026 21-09-2026 22-09-2026
31,616 31,816 32,016 32,216 32,416 07-09-2026 08-09-2026 09-09-2026 10-09-2026 11-09-2026 12-09-2026 13-09-2026 14-09-2026 15-09-2026 16-09-2026 17-09-2026 18-09-2026 19-09-2026 20-09-2026 21-09-2026 22-09-2026
Current #32,037
Change
Best #

Upgrade to Pro

Unlock 30-day and 90-day rank history charts with a Pro subscription.

Upgrade Now

Active Installs Growth

Active Installs 0,000,000+
Growth +0.0%
Peak 0,000,000

Downloads Growth

0 10 15-09-2026 16-09-2026 17-09-2026 18-09-2026 19-09-2026 20-09-2026 21-09-2026 22-09-2026
0 10 07-09-2026 08-09-2026 09-09-2026 10-09-2026 11-09-2026 12-09-2026 13-09-2026 14-09-2026 15-09-2026 16-09-2026 17-09-2026 18-09-2026 19-09-2026 20-09-2026 21-09-2026 22-09-2026
Downloads
Growth
Peak

Upgrade to Pro

Unlock 30-day, 90-day, and yearly download history charts with a Pro subscription.

Upgrade Now

Reviews & Ratings

4.0
5 reviews
Overall 80%
5
3 (60%)
4
1 (20%)
3
0 (0%)
2
0 (0%)
1
1 (20%)

Frequently Asked Questions

Common questions about HTTP Digest Authentication

The username is stored in the wp_usermeta table in plain-text. The password is stored in a two-way encryption format in the same table. It is encrypted and decrypted with the mcrypt_encrypt() and mcrypt_decrypt() functions. But I saw the plain-text password in my database That means your PHP installation doesn't have the mcrypt extension. To check if this is the case go to your <?php phpinfo(); ?> and check if there is a section called mcrypt. If there isn't one in your VPS/Dedicated server install it on Debian/Ubuntu apt-get install php5-mcrypt on Centos/Fedora yum install php5-mcrypt After installation change the password (or enter the same password in Your Profile) to encrypt it. Shared hosting users needn't worry about this as any decent host should already have this installed. Help! I forgot my HTTP Digest credentials You can find your username by executing the following MySQL query. SELECT meta_value FROM `wp_usermeta` WHERE meta_key = 'http-digest-auth_username' and user_id = (SELECT ID from wp_users where user_login = 'WordPress_Username'); Remember to replace wp_ with your actual database prefix and WordPress_Username with your login name. The password can be reset with the following query UPDATE `wp_usermeta` SET meta_value = 'password' WHERE meta_key = 'http-digest-auth_password' and user_id = (SELECT ID from wp_users where user_login = 'admin'); This will set the HTTP password to password. Login and change it immediately.
By default if you access the wp-login.php page using your HTTP credentials, only YOUR WordPress username can login. This security measure can be disabled by ticking this option.
Deactivating this plugin doesn't affect the credentials but deleting the plugin erases all HTTP user credentials leaving no trace of it in the database.

Sign In / Register

You need to sign in or register to use this feature.