How to Password Protect a WordPress Site: Every Method (2026) 

Password protecting a WordPress site is one of those things you don’t think about until you need it in a hurry. A client follows a link before you’re ready. A WooCommerce store goes live during testing.

I’ve run into both. The right method depends on what you’re protecting: the whole site, individual pages, WooCommerce products, membership content, or forms.

To password protect a WordPress site, you can use a plugin like SeedProd for coming soon or maintenance mode, WordPress’s built-in visibility settings for individual pages and posts, or a dedicated plugin like Password Protected for site-wide access control.

This guide covers 9 methods including WooCommerce stores, forms, membership content, and how to hide protected pages from Google.

How to Password Protect Your Entire WordPress Site

The most common way to password protect your entire WordPress site is with a coming soon page. It replaces every page visitors try to reach with a single locked landing page until you’re ready to go live.

I’ve used this when building new client sites, running private training portals, and keeping draft content hidden until it’s ready. For all three, I use SeedProd.

SeedProd is a WordPress website builder plugin with a built-in coming soon mode and maintenance mode. Both modes support optional password protection, letting you allow access only to visitors who enter the correct password.

Many website owners add other features to a coming soon page, like a sign-up form or a call-to-action (CTA) button to collect email addresses. That way, you can grow your email list before your site goes live.

The drag-and-drop builder offers a fully visual interface where you can see the changes you make in real-time. That means you can customize your password protected page with the following:

• Email opt-in forms to collect email addresses before going live
• Timers counting down to when your site launches
• Social media widgets for visitors to follow you for updates
• And more.

You can even add a password form so people with specific user roles can bypass the coming soon page. That way, logged-in users can access your whole site and continue their work. See how other brands use them in these coming soon page examples.

Adding a coming soon page to WordPress is a great way to give your new site a head-start with its search engine optimization (SEO). Since search engines like Google can crawl your page, it can start indexing your site to appear in search results.

To help you get started with this, see our step-by-step guide on how to password protect a WordPress site while under development.

Pro tip: You can also use SeedProd to customize your homepage, create a custom WordPress theme, and much more.

How to Use Maintenance Mode with a Password

Maintenance mode lets you take your WordPress site down temporarily and show a password-protected page while you make changes. It’s the right choice when you’re updating a plugin, changing your WordPress theme, or fixing a few bugs.

You don’t want website visitors seeing errors while you work. A maintenance page tells them your site will be back soon, and unlike a coming soon page, it signals to Google that the downtime is temporary.

This is good news because Google bots will skip over indexing your site until you remove the maintenance message. As a result, you won’t face any penalties for having broken links.

Our favorite way to add a maintenance page to WordPress is, again, with SeedProd. Its built-in maintenance mode lets you create a custom maintenance page and turn it on and off with a single click.

To make building your page faster, SeedProd has a library of professional maintenance page templates that you can customize with its visual editor. It even offers visibility options, allowing you to tweak and hide certain elements on mobile screens so your page looks good on different devices.

Plus, getting started is super easy when you follow this tutorial on how to put WordPress in maintenance mode.

How to Password Protect a WordPress Page, Post, or Product

WordPress has a built-in visibility setting that lets you password protect individual pages, posts, and WooCommerce products without any plugin. Each piece of content gets its own password, so only visitors who know it can see that page.

Maybe you have a membership site with single posts you only want subscribers to access. Or, you may have product pages that you only want to show to V.I.Ps.

Follow these steps in WordPress to password protect pages, single posts, and WooCommerce products:

First, log into your WordPress admin, and from the WordPress dashboard, go to one of the following menus, depending on the type of content you want to restrict:

• Posts » All Posts
• Pages » All Pages
• Products » All Products

Now click edit to open the content in the WordPress editor, then find the ‘Summary’ heading in the right-hand sidebar.

In this panel, look for the ‘Visibility’ label and click Public. This will open a popup menu with different visibility options.

Choose the ‘Password protected’ option and enter a single password. From there, you can click the Update button to save your changes.

Now, anyone trying to view that specific post, page, or product will have to enter the correct password.

The only pitfall of using WordPress to password protect this content is you can’t easily customize it. Luckily, you can use SeedProd to customize a specific password protected page in WordPress.

All you have to do is create and edit a coming soon page, then visit the Page Settings tab. Here, you can click on the Access Controls tab and paste the URLs of your password protected content.

On the same page, you can also let visitors from certain IP addresses bypass your Coming Soon page. That way, you can still share your project’s progress with clients and other users who need access.

For all the steps, you can see our tutorial on how to customize a password protected page in WordPress.

How to Password Protect WordPress Categories

You can password protect an entire WordPress category using SeedProd’s Access Controls. This locks all posts in that category behind a single coming soon or maintenance page, without touching each post individually.

First, follow the steps in this guide to password protect a specific WordPress page. Then, from the SeedProd Settings Page tab, click the Include URLs toggle and enter the URLs for your protected categories.

Once you save your changes, anyone visiting that specific WordPress category will see your custom landing page.

How to Password Protect Part of a Post in WordPress

You can restrict part of a WordPress post so some content is public while the rest is members-only. Restrict Content Pro handles this using shortcode tags that wrap the sections you want to hide, with control over how much to preview, support for multiple membership levels, and compatibility with posts, pages, and custom post types.

To set this up, first install and activate the Restrict Content Pro WordPress plugin. After activating it, go to Restrict » Settings to configure the plugin.

When you scroll down the settings page, you’ll see an area for entering a message users will see if they don’t have permission to view your protected content.

Once you’ve entered your message, click the Save Options button to store your settings.

Now, you can create a new post or edit one you want to protect. Simply write the content you wish to display, then wrap the rest of the content you want to hide between the [restrict] [/restrict] shortcode tags.

You don’t need to change the post visibility options to password protected for this method. Instead, just click the checkbox for who is allowed to see your content in the ‘Restrict this content’ panel under the post editor.

After saving your changes, anyone trying to view this post will see the message you entered on the settings page.

How to Password Protect a WooCommerce Store or Products

WooCommerce stores can be password protected using SeedProd’s coming soon or maintenance mode. Both work natively with WooCommerce, giving you complete control over store access without installing additional plugins.

Some store owners use this before launching to build anticipation. Others use it while making major changes, so customers don’t hit a half-broken checkout.

Here are some step-by-step instructions on how to create a WooCommerce coming soon page. But if you only need to take your shop down temporarily, you can follow this guide on how to put WooCommerce in maintenance mode.

How to Password Protect a WordPress Form

You can add a password to any WordPress form using the Form Locker addon from WPForms. WPForms is a drag-and-drop form builder, and the best WordPress contact form plugin for most sites. The Form Locker addon lets you restrict form access by password, date, submission limit, or membership level.

You can also protect your forms by:

• Close form submissions on a specific date or time
• Restrict access to members only
• Set a submission limit per user
• Allow only one entry per person

What’s more, WPForms is beginner-friendly, so you won’t need knowledge of CSS, HTML, or PHP to get up and running. Simply check out their step-by-step tutorial on how to password protect WordPress forms.

How to Password Protect a WordPress Membership Site

A WordPress membership site restricts content behind a login or subscription, rather than a single shared password. MemberPress is the plugin I recommend for this. It lets you create membership levels with different access rules, so only the right members see the right content.

You can create rules based on different criteria like posts, pages, categories, or tags.

To view your protected content, members will have to log in with their membership details or register. You can add sign-up and registration forms using the MemberPress login form block.

See our guide on how to create a membership website for a full walkthrough.

How to Hide a Password-Protected Page from Google Search

Password-protecting a page does not automatically hide it from Google. Search engines can still crawl and index the page title and URL, so you need to add a noindex tag to prevent it from appearing in search results.

The easiest way to do this is with a WordPress SEO plugin. On SeedProd, we use AIOSEO Pro, and this is one of the features I reach for regularly when managing pages that shouldn’t be public-facing.

I recommend All in One SEO, which you can find in the WordPress plugin repository. Once it’s active, visit the page you want to hide and find the Advanced SEO Settings panel.

From there, you’ll need to set the ‘Use Default Settings’ toggle to the off position, then click the ‘No Index’ checkbox beneath it.

After saving your changes, All in One SEO will insert a line of code that prevents search engines from crawling and indexing that page.

If you need a more detailed guide, you can see their WordPress tutorial on how to hide a page in WordPress.

Alternatives to Password Protecting a WordPress Site

Password protection isn’t the only way to control who can see your WordPress site. Depending on your needs, there are other simple options that might be a better fit.

• IP Whitelisting: Limit access to your site by allowing only certain IP addresses. This works well for agencies who only want staff or clients to see a staging site.
• Private Pages: Use WordPress visibility settings to make a page private so only logged-in admins and editors can view it.
• Membership Plugins: Tools like MemberPress or Restrict Content Pro let you lock content behind a login or subscription, giving you more flexibility than a single site-wide password.
• Hosting-Level Security: Some web hosts let you restrict access to staging sites or directories with server-level authentication, so users need a username and password before WordPress even loads.

FAQs on Password Protecting WordPress

What’s the difference between a private page and a password-protected page in WordPress?

A private page in WordPress is visible only to logged-in admins and editors. No password is needed, but the page is completely hidden from everyone else, including subscribers. A password-protected page is visible to anyone who has the password, whether they’re logged in or not. Use private pages for internal drafts. Use password protection when you need to share content with specific people who don’t have WordPress accounts.

Can I password protect my WordPress site without a plugin?

Yes. WordPress has a built-in visibility setting for individual pages and posts that lets you add a password without any plugin. For site-wide protection, you can use HTTP authentication or .htaccess rules at the server level, though this requires access to your hosting control panel. The built-in method is faster for individual pages. For the whole site, a plugin like SeedProd gives you more control and a better user experience.

Does password protecting a page affect my SEO rankings?

Password-protecting a single page does not affect the rest of your site’s SEO. Google can still crawl and index your other pages normally. However, a password-protected page itself may still appear in search results unless you also add a noindex tag using an SEO plugin like AIOSEO. If you protect your entire site, Google cannot crawl it at all, which will stop any rankings from building while protection is active. Coming soon mode uses a 200 status code and is crawlable. Maintenance mode uses a 503 status code, which tells Google the downtime is temporary.

How do I remove password protection from a WordPress page?

Edit the page in the WordPress editor, go to the Visibility settings in the right-hand sidebar, and switch it from “Password Protected” back to “Public.” Click Update, and the page will be visible without a password. If you used SeedProd’s coming soon or maintenance mode, go to SeedProd in your WordPress dashboard and toggle the mode off with one click.

What’s the best way to password protect a WordPress staging site?

The easiest way is to use a coming soon or maintenance mode plugin like SeedProd. You can lock down your staging site with a password so only clients or team members you share it with can see it. Some hosting providers also offer staging environments with built-in access controls at the server level, which work independently of WordPress. Both approaches keep your staging site out of search results while you work.

Next Steps: Create a Custom WordPress Login Page

We hope this ultimate guide has helped you learn how to password protect your WordPress site. Why not take it further and make your site more welcoming for registered users?

Simply follow our guide on how to create a custom WordPress login page for the easy steps. You may also like our list of the best web hosting services to improve your site’s uptime and performance.

Thanks for reading! We’d love to hear your thoughts, so please feel free to join the conversation on YouTube, X and Facebook for more helpful advice and content to grow your business.