htaccess wordpress plugin

WordPress Access Control Plugin – Restrict by IP & Hostname

Protect your WordPress site by allowing or blocking access based on IP addresses, hostnames, and more. Simple .htaccess control with no coding.


39,000 +
downloads
Version 1.8.6
Last updated 1 year ago
Requires WP 5.6

Upgrade to Htaccess Pro...

Protect your WordPress site by allowing or blocking access based on IP addresses, hostnames, and more. Simple .htaccess control with no coding.
$19/year Per domain, per year
  • All Premium Features
  • Updates for One Year
  • Renews Until Canceled
  • Top Priority Support
$190/lifetime Per domain, forever
  • All Premium Features
  • Lifetime Updates
  • One-Time Payment
  • Premium Personal Support
or
Get Full Access to All
Plugins & Themes
From $40/month
  • All Premium Plugins
  • Access to All Updates
  • Renews Until Canceled
  • Premium Personal Support

Description

Htaccess is a simple and powerful WordPress plugin that helps you control and secure access to your website. Easily allow or deny visitors based on IP address, hostname, or IP range. Disable hotlinking and restrict access to sensitive files like xmlrpc.php to protect your site from unwanted visitors.

Why Choose Our WordPress Htaccess Plugin?

  • Flexible Access Control: Set rules to allow or deny access by IP addresses, hostnames, or IP ranges with customizable order settings.
  • Hotlink Protection: Enable or disable hotlinking, whitelist trusted domains, and prevent unauthorized usage of your media files.
  • Control Access to Sensitive Files: Restrict access to xmlrpc.php by denying or redirecting requests to enhance security.
  • Backup and Restore: Easily create backups of your .htaccess file and restore it in case of errors or misconfigurations.
  • Multisite Network Support: Configure access settings across all subsites within your WordPress multisite network (Pro version).
  • Multilingual and RTL Ready: Fully compatible with multiple languages and right-to-left text layouts.
  • Simple and User-Friendly: Intuitive interface designed for fast setup without coding knowledge.
  • Compatible with Latest WordPress Versions: Regular updates ensure seamless compatibility and security.

How to Secure Your WordPress Site with Htaccess Plugin

  1. Install and Activate the Plugin: Go to your WordPress dashboard → Plugins → Add New, search for “Htaccess by BestWebSoft,” then install and activate.
  2. Set Access Rules: Choose order (Allow, Deny or Deny, Allow) and add IPs, hostnames, or IP ranges to allow or block.
  3. Configure Hotlink Protection: Enable hotlinking protection and whitelist trusted domains to prevent resource theft.
  4. Control Sensitive File Access: Enable restrictions for xmlrpc.php by denying or redirecting access.
  5. Backup Your Settings: Use the backup feature to save current .htaccess state before making changes.
  6. Apply Settings Across Network: (Pro) Manage access control for all sites if you run a multisite network.

With these simple steps, your WordPress website will be better protected from unwanted access and resource abuse.

Documentation & Videos

User Guide
Installation
Brief Overview
Installation Instruction

3 Translations Available

We are constantly update the existing translations and add new to the list.

Htaccess Free vs Pro – Protect Your WordPress Website with Flexible Access Control

Compare the free and premium versions of the Htaccess plugin by BestWebSoft. Choose the right level of security and control for your WordPress site.

Main Features – Free vs Pro

Feature Free Version Pro Version
Set Access Order (Allow, Deny or Deny, Allow) ✔️ ✔️
Allow or Deny by IP, Hostname, or IP Range Basic support Advanced with regex and wildcards
Customize .htaccess File ✔️ ✔️
Backup and Restore .htaccess File Manual backup and restore Automatic backup scheduling
Control Access to xmlrpc.php (Deny or Redirect) ✔️ ✔️
Enable/Disable Hotlinking ✔️ ✔️ with hostname whitelist
Block Domains with .htaccess ✔️
Configure All Subsites on Multisite Network ✔️
Compatibility with Latest WordPress Version ✔️ ✔️
Multilingual and RTL Ready ✔️ ✔️
Premium Support Community only ✔️ 1 business day reply (Support Policy)

Secure and Control Your WordPress Website Access

The Htaccess plugin by BestWebSoft provides an easy and reliable way to protect your WordPress site by managing access rules. Whether you need basic control or advanced features across multisite networks, the Pro version gives you full flexibility and peace of mind.

Take control of your site’s security with a simple plugin that delivers powerful access management options.

Pro Features

  • Control Access to xmlrpc.php:
    • Deny access completely
    • Redirect to the main page
  • Enable or Disable Hotlinking: Protect your images and media from unauthorized use.
  • Allow Hotlinking by Hostnames: Specify which domains are allowed to hotlink your files.
  • Block Domains via .htaccess: Add domain blocks easily through the plugin interface.
  • Multisite Network Support: Apply settings and rules to all subsites in your WordPress network.
  • Premium Support: Get answers from our support team within one business day (Support Policy).
easy to use
Easy To Use and Powerful

Simple settings for fast setup without modifying code.

save money
30-Days Money-Back Guarantee

We honor all refund requests within 30 days after your purchase. If you are not happy then it’s our fault.

premium support
Premium Support

The support team that is passionate about their job is here to stay and solve all the questions you have!

FAQ

You can add IP addresses, hostnames, or IP ranges to the allow or deny lists to control access to your website easily through the plugin interface.

Yes, the Pro version includes hotlink protection, allowing you to block unauthorized usage of your images and media files.

Yes, the Pro version lets you deny access or redirect attempts to access the xmlrpc.php file to improve your site’s security.

Yes, the Pro version supports configuring rules across all subsites in a WordPress multisite network.

Pro users receive support with responses within one business day according to our Support Policy.


Still have questions? Submit a request