Password Protected Review Summary

Field	Detail
Tool	Password Protected (passwordprotectedwp.com)
Category	WordPress content protection plugin, password gating rather than membership
Best use case	Locking a staging site, a client portfolio, or a handful of premium pages without building a membership system
Price	Free version on WordPress.org: yes. Pro from $59.99/year (1 site), $79.99/year (3 sites), $99.99/year (10 sites), $599.99 lifetime for unlimited sites. No free trial, 14-day refund. Checked August 16, 2026
Verdict	Install the free version today, and buy Pro only if sitewide locking is genuinely not enough

Quick Answer: What Is Password Protected?

Password Protected is a WordPress plugin that locks a whole site, individual posts, pages, categories, WooCommerce products, or part of a single page behind a password. The free version handles sitewide protection and has more than 300,000 active installs on WordPress.org. Paid plans start at $59.99 per year. A shared password is not real access control, so it identifies nobody and cannot be revoked for one person. Verdict: install the free version first and upgrade only if sitewide locking is not enough.

How Does Password Protected Work for WordPress Content Gating?

Password Protected works by intercepting the page request before WordPress renders the content, checking for a valid password cookie, and serving a lock screen instead of the page when that cookie is missing.

The flow runs like this:

You choose a scope. Sitewide is the free option. Pro adds individual posts and pages, custom post types including WooCommerce products, categories and taxonomy archives, the WordPress admin area, and partial sections inside a page.
You create one or more passwords for that scope. Pro allows multiple passwords for the same content, each with its own expiry date and usage limit, which is how you give one password to a client and a different one to a reviewer.
A visitor hits the protected URL and gets the lock screen. Pro includes a real-time customizer for the background, logo and colours, plus optional Google reCAPTCHA v2 and v3, hCaptcha or Cloudflare Turnstile on the form.
A correct password sets a cookie and unlocks the scope. Whitelisted user roles and whitelisted IP addresses skip the screen entirely, and administrators can be given passwordless access so they never lock themselves out.
Everything is logged. The activity log records IP address, browser and timestamp for each attempt, exports to CSV, and Pro emails a weekly summary of login attempts.
Bypass links let you skip step 3. Pro generates a unique URL that unlocks a post, page, product, category or the whole site without typing anything, which is what you send to a client who will not remember a password.

Partial content protection is the one mechanism worth understanding properly. It works through a shortcode that wraps the section you want gated, so the teaser stays public and indexable while the locked part sits behind the form. Pro also exposes this as native controls inside Elementor, Gutenberg and Beaver Builder, so you can lock a widget or a block without breaking the layout. Gravity Forms integration extends the same idea to lead capture and payment: a visitor fills the form or pays, and the plugin sends the bypass link automatically.

Who Is Password Protected Best For (and Not For)?

Password Protected is best for:

Agencies and freelancers showing work in progress. A staging site or an unfinished client build needs one password and nothing else. The free version does this in about two minutes, and passwordless admin access means you never fight your own lock screen.
Anyone gating a small number of premium pages. A pricing sheet, a research PDF, a members-only guide. Multiple passwords with expiry dates give you enough control without a membership plugin and its database of user accounts.
WooCommerce stores running private or wholesale catalogues. Custom post type and category protection covers products and product categories, which is the specific thing generic password plugins tend to miss.
Site owners who want an audit trail. The activity log with IP, browser and timestamp, plus CSV export, is more than most plugins in this category bother to ship, and it is the difference between suspecting a password leaked and proving it.
People who want to try before paying. The free version is not a crippled demo. Sitewide protection, reCAPTCHA, IP whitelisting and activity logs are all in it.

Password Protected is not for:

Selling recurring access to content. There are no user accounts, no subscriptions, no drip scheduling and no per-member billing. That is a membership plugin’s job, not this one’s.
Anything that needs real security guarantees. A password shared with 40 people is a password shared with the internet. If the content genuinely must not leak, gating it behind a shared string is the wrong control.
Large agencies on the annual plans. Site limits of 1, 3 and 10 are tight for the price. Past roughly 10 sites the maths pushes you straight to the $599.99 lifetime, which is a different size of decision.
Content you still want ranking in Google. Locking a page removes it from search. If the page currently earns traffic, protecting it costs you that traffic, and no plugin setting changes that.

What Are the Limitations of Password Protected?

A password is not an identity. Everyone who gets in is anonymous, and revoking access for one person means changing the password for everyone. The activity log records IP addresses, which narrows an investigation but does not prevent the leak.
The vendor site’s numbers run slightly ahead of the public ones. passwordprotectedwp.com advertises “400K+ website owners” and “4.5/5 stars on wordpress.org”. WordPress.org shows 300,000 or more active installs and 4.4 out of 5. Both figures are impressive, and neither needed rounding up.
The review base is thin for a plugin this size. 139 ratings against 300,000 active installs, with 11 of those at one star. That is not damning, but it is a small evidence base to lean on, and the support forum showed only 2 threads at the time of checking.
The features page and the pricing table disagree about tiers. The features page marks several items “Free & Pro” that the WordPress.org readme marks Pro-only, and the pricing table gates bypass links to Professional and category protection to Business. Read the pricing table, not the features page, before you buy the tier you think you need.
The lifetime discount anchor is theatrical. $599.99 shown against a struck-through $4,499.99 is not a real historical price, and the homepage advertises “up to 75% off” while the pricing page says “save up to 87%”. The $599.99 figure may well be fair for unlimited sites. The framing around it is marketing.
Bypass links are secret URLs, with the usual failure mode. Anything that unlocks content by being visited will eventually be forwarded, pasted into a shared inbox, or leak through a referrer header. Set expiry dates and usage limits on them rather than treating them as permanent.
Previously public content stays cached. If you lock a page that Google already indexed, the snippet and any cached copy persist for a while after the lock goes up. Plan for a delay between switching protection on and the content actually disappearing from search results.

What Are Password Protected’s Alternatives?

Alternative	Price	Pick it instead when
WordPress built-in password protection	Free, already in core	You need to lock one or two posts, accept the default form, and want no plugin at all
Passster	Free core plugin on WordPress.org, paid from $49/year for 1 site or $149 lifetime	You want partial content locking on a single site at the lowest paid entry price
MemberPress	From $199.50/year, no free version	You are selling recurring access and need real user accounts, drip content and billing
SeedProd	Free core plugin on WordPress.org, paid from $79/year for 1 site	The actual job is a coming soon or maintenance page during a build, not ongoing content gating

The honest framing here is that only Passster is a direct competitor. WordPress core is the free floor you should check first, MemberPress is the ceiling you graduate to when passwords stop being enough, and SeedProd solves an adjacent problem that people often try to solve with a password plugin.

Most WordPress content protection plugins want to sell you a membership platform. You arrive wanting to hide one staging site, and you leave with user accounts, subscription levels, drip schedules, and a database of members you never asked for.

Password Protected does not do that, and it is the main reason I ended up liking it.

I work on WordPress every day. I have owned and managed 100+ websites, and I am a Senior Digital Marketing Manager at Brainstorm Force, the team behind Astra with its 7M+ active installs, so I have watched a lot of plugins try to be more than the job requires. This one stays on the narrow problem: put a password in front of something, log who tried, and get out of the way. In this Password Protected review I will cover what the free version actually gives you, what the $59.99 to $599.99 paid tiers add, where the marketing overstates the case, and how I would decide between the two in an afternoon.

Disclosure: I have not run a full deployment of the Pro version on a production site. Everything below comes from the plugin’s public pages, its pricing page, its WordPress.org listing and readme, and competitor pricing pages, all checked on August 16, 2026. Where a number is the vendor’s own claim rather than something publicly verifiable, I say so. If you want the broader picture of what else is worth installing, our data report on the best AI WordPress plugins ranks 119 of them on installs, maintenance and a real CVE audit.

Password Protected WordPress plugin homepage showing full site protection, partial content protection and password activity logs

Key Takeaways

The free version is genuinely useful, not a demo. Sitewide password protection, passwordless admin access, Google reCAPTCHA v2 and v3, IP whitelisting, and full activity logs with weekly reporting are all free on WordPress.org.

Pro is about granularity, not about unlocking a basic feature. Per-post protection, partial content shortcodes, category and taxonomy locking, WP-Admin protection, bypass links and the lock screen customizer are what you pay for.

The pricing is mid-market and the site limits are tight. $59.99 for one site up to $99.99 for ten, or $599.99 once for unlimited. Cheaper than MemberPress, more expensive than Passster.

The adoption is real and the review base is thin. 300,000 or more active installs is a serious number. 139 ratings behind it is not, and the vendor site rounds both the install count and the star rating up.

This is content gating, not access control. Understand that distinction before you buy, because it decides whether this plugin is the right category of tool at all.

What Is Password Protected?

Password Protected is a WordPress plugin that restricts access to your site, or to specific parts of it, behind one or more passwords. It covers full site protection, individual posts and pages, categories and taxonomies, custom post types including WooCommerce products, the WordPress admin area, and partial sections inside a single page.

The free version on WordPress.org sits at more than 300,000 active installs with a 4.4 out of 5 rating from 139 reviews. Version 2.8.4 shipped on July 30, 2026, tested against WordPress 7.0.4, requiring WordPress 4.9.6 and PHP 5.6 as a floor. Those are the numbers that matter for a plugin decision: it is widely deployed, and it is actively maintained rather than parked.

Who is behind it?

The plugin is published by Saad Iqbal and maintained commercially by WPExperts.io, with the paid product sold through passwordprotectedwp.com. Support links on the marketing site point to Objects WS, which is the same commercial operation under a different entity name. There is a published roadmap and public documentation, both of which are better signals than most plugin vendors at this price offer.

What the Free Version Actually Gives You

This is the part most reviews skip, and it is the part that decides whether you spend anything at all.

The free plugin includes:

Sitewide password protection with a master password
Passwordless admin access, so administrators are never locked out
Google reCAPTCHA v2 and v3 on the password form
IP address whitelisting
Detailed activity logs with IP, browser and timestamp
Weekly password attempt reporting
Feed access options and an allow-administrators toggle

For the single most common use case in this category, hiding a site during a build or a redesign, that list is complete. You do not need the paid version, and you should not buy it until the free one has failed you at something specific.

How Much Does Password Protected Cost?

Password Protected costs $59.99 per year for one site, $79.99 for three, and $99.99 for ten, with a $599.99 one-time payment for unlimited sites. All prices were checked directly on the pricing page on August 16, 2026.

Plan	Price	Sites	What it adds
Free	$0	Unlimited	Sitewide protection, passwordless admin access, reCAPTCHA, IP whitelisting, activity logs
Basic	$59.99/year	1	Post type protection, user role whitelisting, login attempt limits, weekly activity reports
Professional	$79.99/year	3	Everything in Basic plus bypass links, individual page and post protection, page exclusions, hCaptcha and Turnstile
Business	$99.99/year	10	Everything in Professional plus partial content protection, Gravity Forms, category and taxonomy protection, WP-Admin protection, multiple passwords, multisite, lock screen customizer
Lifetime	$599.99 one-time	Unlimited	All Business features, no renewal

Annual plans include one year of updates and priority support. There is no free trial on the paid version, only a 14-day money-back guarantee, which is the same window MemberPress and Passster both offer.

The headline prices make Basic look like the cheap option, but the number that actually matters is what each plan costs per site:

Business costs 67 percent more per year than Basic and 83 percent less per site. The $599.99 lifetime plan has no site limit, so it has no per-site figure. Prices checked on the vendor pricing page on August 16, 2026.

Two things about this table are worth saying plainly. First, the features most people upgrade for, partial content protection and category locking, sit in the top annual tier at $99.99 rather than in Basic. Second, if you manage more than ten sites, the annual ladder stops helping you and the $599.99 lifetime becomes the only sensible option. Whether a one-time payment beats a yearly one depends entirely on how long you will keep using it, and you can run those numbers yourself with our free SaaS vs lifetime deal calculator.

The Features That Justify the Pro Upgrade

Not all of the Pro list earns its money. Three parts of it do.

Partial content protection. The shortcode wraps a section rather than a page, so the teaser stays public and indexable while the paid part is gated. This is the feature that turns a blog post into a lead magnet without splitting it into two URLs, and it is the strongest single reason to go to Business. Native support inside Elementor, Gutenberg and Beaver Builder means you can lock a block or widget without your layout collapsing around the gap.

Bypass links. A unique URL that unlocks content with no password entry. In practice this is the feature you will use most with clients, because clients lose passwords and do not lose links. Pair it with an expiry date and a usage limit and it stops being a permanent backdoor.

Multiple passwords with expiry and usage limits. One password for the client, one for their legal reviewer, one for the contractor, each expiring on its own schedule. This is the closest the plugin gets to real access control, and it is the honest workaround for the fact that passwords do not identify anyone.

The Gravity Forms integration deserves a mention too, because it is the piece that quietly turns the plugin into a commercial tool: collect an email or take a payment, and the bypass link goes out automatically. If your WooCommerce store is the thing you are gating, our roundup of WordPress plugins every store owner should know about covers what else should be running alongside it.

Everything else, the lock screen customizer, the CSV import and export of passwords, the multisite network controls, is competent and not decisive.

Where the Marketing Runs Ahead of the Data

I like this plugin, so I want to be precise about the parts I do not like.

The homepage says “4.5/5 stars on wordpress.org” and “Trusted by 400K+ website owners”. WordPress.org says 4.4 out of 5 and 300,000 or more active installs. The gap is small, and it is entirely unnecessary. 300,000 installs and a 4.4 rating is a strong position to argue from. Rounding it makes a reader who checks trust the rest of the page slightly less, which is a bad trade for a tenth of a star.

The lifetime anchor price is the other one. $599.99 struck through against $4,499.99 is not a price anyone has paid, and the discount percentage disagrees with itself between the homepage and the pricing page. Judge the $599.99 on whether unlimited sites forever is worth $599.99 to you, and ignore the number next to it.

Finally, the tier documentation. The features page labels several capabilities “Free & Pro” that the WordPress.org readme marks as Pro-only, and the pricing table splits them across three paid tiers. If you are buying for one specific feature, confirm it against the pricing table and be ready to use the 14-day refund if it lands in a tier above the one you bought.

None of that changes the verdict. It does change how much of the marketing copy I would take at face value.

Password Protection Is Not the Same as Access Control

This is the distinction that decides whether you should be looking at this plugin at all, and almost no review in this category states it clearly.

A password gate answers one question: does this visitor know the string? It does not know who they are, cannot tell two people apart, cannot revoke one person’s access, and cannot stop the string being forwarded. Once you share a password with a group, you have shared it with everyone that group will ever talk to.

An access control system answers a different question: is this specific account allowed? That needs user accounts, which means a membership plugin, which means more setup, more surface area and more money.

Password Protected is firmly in the first category, and it is honest about that. Multiple passwords, expiry dates, usage limits and IP whitelisting all narrow the blast radius, but they do not change the model. So the buying question is not “is this plugin good”, it is “is a password the right control for this content”. For a staging site, a client preview, a portfolio, or a lead magnet, it clearly is. For anything you would be genuinely damaged by leaking, it is not, and no amount of plugin features fixes that.

How I Would Test It in an Afternoon

If you want an answer rather than an opinion, this takes about two hours.

Install the free version on a staging site and turn on sitewide protection. Time how long it takes to get a working lock screen. If the free version solves your problem here, stop. You are done and it cost nothing.
Log out completely and try to reach the site three ways. Direct URL, a Google cached result, and the RSS feed. The feed is the one people forget, and the free version has a setting for it.
Check the activity log after those attempts. Confirm it captured your IP, browser and timestamp, and export the CSV. If the log is the reason you are buying, verify it before you pay.
Write down the one feature that made you consider Pro. Partial content, category locking, bypass links, WP-Admin protection. One feature, named.
Find that feature in the pricing table, not the features page. Confirm which tier it is actually in. This is where the tier documentation mismatch will cost you money if you skip it.
Buy that tier and test the feature within 14 days. The refund window is your trial. Use it deliberately rather than discovering on day 20 that the shortcode does not do what you assumed.

That sequence answers the only two questions that matter: is free enough, and is the paid feature you want in the tier you were about to buy.

Final Verdict: Is Password Protected Worth It?

Verdict: yes for the free version, and yes for Business if you specifically need partial content or category locking.

I came to this expecting a thin freemium wrapper around a WordPress core feature, and that is not what it is. The free version does a complete job of the most common use case. The paid version adds granularity that genuinely does not exist in core, and the partial content shortcode in particular solves a real content marketing problem rather than an invented one. 300,000 or more active installs and a July 2026 update tell you it is maintained and widely trusted, which is most of what you need to know about plugin risk.

The reservations are about presentation rather than product. The install count and star rating are rounded up, the lifetime anchor price is theatre, and the tier documentation contradicts itself. Those are the reasons this is a warm recommendation rather than an unqualified one, and they are all things you can work around by reading the pricing table carefully and using the 14-day window as a trial.

My actual advice: install the free version this week. If it does everything you needed, you have saved $59.99 and I have saved you a purchase. If you hit a wall at partial content or category locking, the Business tier at $99.99 is fairly priced for what it adds, and the lifetime at $599.99 only makes sense if you are running more than ten sites and plan to keep doing so for several years.

For more verdicts made this way before you spend, browse our library of tested tool reviews, or check the current AI deals and lifetime offers if you are trying to cut what you pay for software every month.

Frequently Asked Questions

Is Password Protected free?

Yes. The free version on WordPress.org includes sitewide password protection, passwordless admin access, Google reCAPTCHA v2 and v3, IP address whitelisting, and full activity logs with weekly reporting. Paid plans start at $59.99 per year and add per-post protection, partial content locking, category protection, bypass links and page builder integrations.

How much does Password Protected Pro cost?

Basic is $59.99 per year for one site, Professional is $79.99 per year for three sites, and Business is $99.99 per year for ten sites. A lifetime licence for unlimited sites is $599.99 as a one-time payment. Annual plans include one year of updates and priority support, and every plan carries a 14-day money-back guarantee. Prices checked August 16, 2026.

Can Password Protected lock only part of a page?

Yes, on the Business tier. Partial content protection uses a shortcode that wraps the section you want gated, leaving the rest of the page public and indexable. Pro also exposes the same control natively inside Elementor, Gutenberg and Beaver Builder, so you can lock an individual block or widget without breaking the page layout.

Does Password Protected work with WooCommerce?

Yes. Custom post type protection covers WooCommerce products, and category and taxonomy protection covers product categories, so you can run a private or wholesale catalogue behind a password. Category protection sits in the Business tier rather than Basic, so check the pricing table before buying if this is your reason for upgrading.

Is Password Protected secure enough for confidential content?

It is content gating, not access control. A shared password identifies nobody, cannot be revoked for one person, and travels wherever the people you gave it to send it. Expiry dates, usage limits and IP whitelisting narrow the exposure, but for genuinely confidential material you want user accounts and a membership or access control system instead.

Will password-protecting a page hurt my SEO?

Protected content is removed from search results, so any page that currently earns organic traffic will lose it once you lock it. Previously indexed snippets and cached copies also persist for a period after protection goes up. Partial content protection is the safer option for SEO, because the public teaser stays crawlable while only the gated section is hidden.

What is the difference between Password Protected and a membership plugin?

Password Protected gates content behind passwords with no user accounts, no subscriptions and no billing. A membership plugin such as MemberPress creates real accounts, handles recurring payments and drip scheduling, and can revoke one member without affecting anyone else. Password Protected is simpler and cheaper. A membership plugin is what you move to when a shared password stops being enough.

Transparency note: Password Protected did not pay for or review this article, and the links to their site and to competitor sites are not affiliate links. I have not run the Pro version on a production site, so every claim above is sourced from the plugin’s public pages, its WordPress.org listing and competitor pricing pages as checked on August 16, 2026, or clearly labelled as the vendor’s own marketing. If I deploy it properly, I will update this review with the real numbers. Found something out of date? Tell me and I will fix it.