Protect your wp-login.php page with HTTP Digest Authentication without the need of adding web server modules or changing config files.
As of April 2026, HTTP Digest Authentication is a WordPress auth plugin with 10 active installations and a 4/5 rating from 5 reviews. It has been downloaded 5.0K+ times in total. Requires WordPress 3.1.0+ and PHP false+. Available on WordPress.org since 2013. Last updated 8 years ago — may have compatibility concerns. Top alternative: authLdap.
This plugin adds an additional layer of protection for the wp-login.php page using HTTP Digest Authentication with the PHP header() function.
So it doesn’t require configuring web server files like .htaccess or .htdigest and works on all web hosting environments.
Important: If you already have a plugin which does HTTP Authentication please deactivate it before activating this plugin. Similarly if you have configured your web server to do HTTP authentication on the wp-login.php file please remove it before using this plugin.
If you are using FastCGI PHP this plugin may keep prompting for the credentials even if you enter the right pair, in this case use the following in your .htaccess file
<IfModule mod_setenvif.c>
SetEnvIfNoCase ^Authorization$ "(.+)" PHP_AUTH_DIGEST=$1
</I…| WordPress | 3.1.0+ requiredTested up to 4.9.29 |
| PHP | false+ required |
line-height styling on input boxesPlugin data sourced from WordPress.org. Analysis and metrics by PluginSift.