by Shawn Parker 4.9 (7 reviews)

Post Password Token

Name: Post Password Token
Rating: 4.9 (7 reviews)
Author: Shawn Parker

The Post Password Token plugin allows readers to access protected posts without having to enter a password by creating secret token urls for the post.

Post Password Token ranks #8,503 among WordPress.org plugins with 600+ active installations, is #516 of 4,499 in the Security category, a 4.9/5 rating from 7 reviews, and was last updated Jul 6, 2023. Data from WordPress.org, refreshed twice daily — see methodology.

Tested up to WP 6.2 (Current: 7.1)

v2.0.3 Current Version v2.0.3

Updated 3 years ago Last Update on 06 Jul, 2023

Refreshed 7 hours ago Last Refreshed on

#516 of 4,499 in Security Top 25% by installs No update in over a year

View on WordPress.org

Rank

#8,503

-4 this week

Active Installs

600+

-7.3%

KW Avg Position

N/A

— No change

Downloads

17.8K

+3 today

Support Resolved

— No change

Rating

98%

Review 4.9 out of 5

4.9 (7 reviews)

Next Milestone 700

Total Progress 36%

600+ 700+

631

Ranks to Climb

Growth Needed

8,000,000

Active Installs

Pro

Unlock Exact Install Count

See the precise estimated active installs for this plugin, calculated from real-time ranking data.

Exact install estimates within tiers
Track install growth over time
Milestone progress predictions

Upgrade to Pro

Need 64 more installs to reach 700+

Rank Changes

Current #8,503

Change

Best #

Upgrade to Pro

Unlock 30-day and 90-day rank history charts with a Pro subscription.

Upgrade Now

Active Installs Growth

Upgrade to Pro

Active Installs 0,000,000+

Growth +0.0%

Peak 0,000,000

Downloads Growth

Downloads

Growth

Peak

Upgrade to Pro

Unlock 30-day, 90-day, and yearly download history charts with a Pro subscription.

Upgrade Now

Reviews & Ratings

4.9

7 reviews

Overall 98%

6 (86%)

1 (14%)

0 (0%)

Security History

Source: WPVulnerability

No known vulnerabilities on record for Post Password Token. Checked 1 month ago.

Track This Plugin

Get detailed analytics, keyword tracking, and position alerts delivered to your inbox.

Start Tracking Free

Plugin Details

Version: 2.0.3
Last Updated: Jul 06, 2023
Requires WP: 5.7+
Tested Up To: 6.2
PHP Version: 7.4 or higher
Author: Shawn Parker

Support & Rating

Rating: ★ ★ ★ ★ ★ 4.9
Reviews: 7
Support Threads: 0
Resolved: 0%

Keywords

guest pass password post token

Upgrade to Pro

Unlock keyword rankings, search positions, and detailed analytics with a Pro subscription.

Upgrade Now

Similar Plugins

Adminify – White Label, Admin Menu Editor, Login Customizer

6K+ installs

#2,751

Master Addons for Elementor – Elementor Addons, Widgets, Mega Menu Builder, Popup Builder, Widget Builder & Template Kits

Akismet Anti-spam: Spam Protection

5M+ installs

Wordfence Security - Firewall, Malware Scan, and Login Security

5M+ installs

#11

Really Simple Security - Simple and Performant Security (formerly Really Simple SSL)

Limit Login Attempts Security – Login Security, 2FA, Firewall, Brute Force Prevention

View all Security-and-spam-protection plugins

TL;DR

AI summary of the plugin's readme

This plugin is for site owners who password-protect posts and want to share them with select friends or family without those people using a login form. It solves the problem of visitors being confused or scared off by password prompts by generating secret token URLs that grant access without entering a password.

Secret token URLs for posts
Bypasses password entry form
Revoke secret URLs anytime
Encodes post-name and post-password
Admin salt configuration option
Hides content from search spiders

Frequently Asked Questions

Common questions about Post Password Token

Not much. After you install the plugin all you have to do is set a password on a post using WordPress' standard Password Protection Functionality. After the password is set and you've saved the post there will be a new meta box on the post edit screen (in the center content area, below the post-content editor) that will present you with a full URL to the post including the token. Distribute this URL to give people automatic access to your post.

Yes, this still functions as normal. Accessing a password-protected post by its standard url will still show the expected password dialog, but when a reader accesses a password-protected post by its secret Password Token url, they will be automatically authenticated and be able to see the full content.

No. Since the tokens aren't stored but instead generated when needed there's no need to to do anything but navigate to the post edit page for your protected post to retrieve your token.

The url itself lasts forever, unless you change it. Additionally, accessing a post by its secret url will set an authentication cookie for the user that lasts for 10 days.

If you want to deep link in to a page, you can manually add the page anchor id to the end of the url before sending out your link, ie: https://example.com/?p=5&ppt=04aa063124b672a0086fc68549a470a153b8324b776c265ff50c16640301a1f0#page-anchor

Not yet.

If you need to revoke the secret urls for an individual post, you can simply change the post password. Once you save the post it will create new secret urls and invalidate the old ones: the old url will no longer automatically log readers in and they'll be asked to enter a password if they use that URL. You can also revoke all secret urls site-wide (the "nuclear" option). To do so, go to the plugin admin page and change the password salt.

Yes. The token in the URL triggers a unique cache. Be aware that this does create a potential security risk. Not huge, but potential. If you don't want these pages cached then use the settings in your caching plugin to keep urls with ppt= in the url from being cached.

If you've run into unexpected behavior while using the plugin, please file a bug report at https://wordpress.org/support/plugin/post-password-plugin/.