Every setting, with its default and range.
| Setting | Screen | Default | Range / values |
|---|---|---|---|
| Enable global protection | Settings | Off | On / Off |
| Global password | Settings | — | Any text |
| Role bypass | Settings | Administrator, Editor | Any roles |
| Bypass for all logged-in users | Settings | Off | On / Off |
| Protect RSS feeds | Settings | On | On / Off |
| Protect the REST API | Settings | On | On / Off |
| Allowed IP addresses | Settings | Empty | IP, CIDR or wildcard, one per line |
| Stay unlocked for (days) | Settings | 1 | 0–365 (0 = browser session) |
| Show “Remember me” checkbox | Settings | Off | On / Off |
| Remember me duration (days) | Settings | 14 | 1–365 |
| Failed attempts allowed | Settings | 5 | 0–20 (0 = disabled) |
| Lockout duration (minutes) | Settings | 30 | 1–1440 |
| Incorrect password message | Settings | Built-in wording | Any text |
| Lockout message | Settings | Built-in wording | Any text, supports {minutes} |
| Authentication type | Settings | Standard cookie | Cookie / Transient |
| Password form layout | Settings | Default (native) | Default / Customized |
| Theme assets on form | Settings | Default (new installs) | Default / Include |
| CAPTCHA type | Settings | None | None / reCAPTCHA v2 |
| Send activity report by email | Settings | Off | On / Off |
| Report frequency | Settings | Weekly | Daily / Weekly |
| Report recipient | Settings | Site admin email | Any email |
| Page cache compatibility | Settings | Off | On / Off |
| Show status in admin bar | Settings | On | On / Off |
| Protect entire store | WooCommerce | Off | On / Off |
| Force products unpurchasable | WooCommerce | Off | On / Off |
| Text below the form | Appearance | Empty | Basic HTML |