Hide and Secure WP paths with the complete WP security suite for Site Hardening. Includes 8G Firewall, Brute Force protection, and Passkeys.
As of April 2026, WP Ghost (Hide My WP Ghost) is a WordPress login plugin with 100K+ active installations and a 4.5/5 rating from 371 reviews. It has been downloaded 2.5M+ times in total. Requires WordPress 5.8+ and PHP 7.4+. Available on WordPress.org since 2016. Actively maintained — updated within the last month. Downloads are up 20% this week. Support resolution rate: 86%. Top alternative: WPS Hide Login.
WP Ghost (formerly known as Hide My WP Ghost) is a professional-grade, comprehensive hack-prevention security solution for WordPress. Built for speed and engineered for maximum defense, WP Ghost provides a multi-layered security architecture designed to block hacker bots, neutralize automated scanners, and stop the hack before the reconnaissance even begins.
While traditional security tools focus on Detection (scanning for malware after a breach) or Signature-Filtering (blocking known exploits), WP Ghost focuses on Architecture. By implementing Paths Security and Site Hardening, we remove the digital footprints that make your site a target for automated botnets, providing a proactive foundation that secures your site before it can even be identified as a target.
WP Ghost Global Stats:
A truly fantastic addition!
And the technical support team is incredibly helpful. Every day we see new and improved updates that, with God’s grace, help the website achieve complete protection. Thank you, wpghost team!
O Hide My WP Ghost é fácil de usar e possui praticamente todos os recursos para proteger seu site WordPress. Continuem assim, vocês estão fazendo um ótimo trabalho!
Hide My WP Ghost is easy to use with great, has almost ever feature to protect your WordPress website. Keep moving guys you are doing great.
WP Ghost is a really good plugin. I used Lite mode on most of my websites but now use a paid Pro Version of my main four websites that was getting attacked by rogue bots. The pro verson allows me to see a log and what the bots are with an IP Address. I noticed the rogues are using Cloudflare so it can be difficult to tell at first. Support is really good because I was help with a compatiblity problem with Windows Internet Information services and the URL Rewrite duplicating lines of code in the web.config file causing a 500 internal error. I do reccomend this plugin if you want to protect your websites against rogue bots.
Once you set up a WordPress site, you’ll begin attracting visitors, not to buy, but to your login page and access like XML-RPC from automated servers worldwide, all aiming to access your WordPress dashboard. You may not even notice if they succeed, but your paid campaigns could inadvertently redirect your clients elsewhere.
This tool helps ghost your WordPress site, changing you loging page, even making it more challenging for competitors to discover and replicate your strategies, or make it more professional like changing wp-content path to content o anything you like like files, so make your site looks is custom made.
The support team is excellent; I recently raised an issue regarding compatibility between aaPanel, multi-server Nginx + LiteSpeed, and they promptly provided a solution along with compatibility details. Their support is excellent, you fell like talking to people no those support that just blame others.
I’ve been using WP Ghost for over three years.
I’ve used other paid plugins, but they’ve caused various issues, including speed issues, on my site.
However, WP Ghost, along with the caching and SEO plugins, has always worked flawlessly. The customer service is also excellent.
| WordPress | 5.8+ requiredTested up to 7.0 |
| PHP | 7.4+ required |
Major Release: Security Score, Login Page Designer, Passkey 2FA, Security Threats Log, User Events Log, GEO Threats Map, and expanded 7G/8G Firewall rules. Free update for all users.
…and 31 more changes
Plugin data sourced from WordPress.org. Analysis and metrics by PluginSift.