Allows securing files in WP's media library to be only accessible to users with specific roles, capabilities, or IP addresses.
As of April 2026, Htaccess Secure Files is a WordPress media plugin with 10 active installations and a 5/5 rating from 1 reviews. It has been downloaded 6.4K+ times in total. Requires WordPress 3.2.1+ and PHP false+. Available on WordPress.org since 2011. Last updated 13 years ago — may have compatibility concerns. Top alternative: Safe SVG.
The Htaccess Secure Files plugin can only be activated on Apache web servers with mod_rewrite enabled, and will automatically raise an error upon activation if this is not the case.
The Htaccess Secure Files plugin allows for setting files to be accessible only to visitors who have a specified IP address or WordPress role or capability. By using .htaccess files to secure the content instead of a separate directory outside the web root, WordPress’s native media library functionality can be used to upload secure files and link to them from within the visual editor.
By default all built-in WordPress roles will be allowed to access content that is marked as secure. The Settings -> Secure Files admin screen controls which roles, capabilities, and IP addresses are allowed to view or do…
| WordPress | 3.2.1+ requiredTested up to 3.3.2 |
| PHP | false+ required |
Plugin data sourced from WordPress.org. Analysis and metrics by PluginSift.