Protecting content

Manage passwords

Updated October 4, 2026 2 min read Plugin v1.1.0

Per-password role bypass

Each password can have its own list of roles that skip it. This is separate from the global role bypass in Settings, and adds to it.

Example: you protect a page with a client password, and tick Shop Manager on that password. Shop managers see the page without typing anything; everyone else needs the password.

Ordering and duplicating

  • Drag to reorder — grab the handle at the left of any row in the Passwords list and drag. The order is saved immediately.
  • Duplicate — copies a password’s scope, role bypass and schedule into a new entry.

Important: a duplicated password is created Inactive and with a new, unusable password value. Stored passwords are hashed and cannot be read back, so the copy cannot reuse the original’s value. Set a new password and activate it.

Ordering affects how the list is displayed and organised. It does not change which password wins — that is decided by scope specificity, as described in How the plugin decides what to protect.

Password Usage Limits (PRO)

You can cap how many times a password may be used in total.

When creating or editing a password, enter a number in the Usage Limit field. Once the limit is reached, the password will automatically expire and stop working.

Still stuck? Free support runs in the WordPress.org forum so answers help everyone.
Open a support thread