How to restrict WordPress administrator access through IP address

Do you want to limit access to WordPress admin zones for security reasons?

If you have a small team, a good solution is to limit access to only IP addresses used by team members.

In this article, we will show you how to restrict WordPress administrator access through an IP address.

Why restrict WordPress administrator access through IP addresses?

If you are running a WordPress website, you need to take the security of your website seriously. While WordPress core software is very secure, there are more you can do to protect yourself from hackers.

Hackers can shut down your website and damage your income and reputation. They can steal data, even distribute malware to your website visitors, and blacklist your domain by Google and others.

A wise way to stop hackers is to protect your WordPress admin area from unauthorized access.

If only you or a few trusted users need access to the administrative area, a good way is to restrict access to wp-admin to your team's IP address.

Each team member will connect to your website using a specific IP address for each location. If you block access to all other IP addresses, even if the hacker discovers your username and password, they will not be able to access your website.

Instead, they will see the error message: "Forbidden". You do not have access to this resource. ”

Let's see how to restrict WordPress administrator access through IP addresses.

How to limit WordPress administrator access through IP address

The first thing you need to do is list the IP addresses that everyone needs to log into the WordPress website. If someone works in multiple locations, you will need to collect the IP address for each location.

They can learn about their IP addresses by visiting websites such as SupportAlly.

After you have created your list, you will need to edit the files on the website. You must use the FTP client or hosting provider's file manager application. If you haven't used FTP before, you may want to check out our guide on how to upload files to WordPress using FTP.

You will need to use the software to navigate to your website's /wp-admin/ folder. Once you get there, you should look for that .htaccess file. This is a hidden file, so if you can't see it, you may need to enable the "Show hidden files" option in your software.

.htaccess If the file does not exist in that folder, you should create a new file and save it with the name in the folder /wp-admin/.

Warning : Do not edit your root .htaccess file, or you will not be able to access the front end of your website! Make sure you are editing /wp-admin/.htaccess.

You should first download a copy of the file to your computer as a backup. Once you have done this you will need to edit the .htaccess and paste the following code:

 AuthUserFile /dev/nullAuthGroupFile /dev/nullAuthName "WordPress Admin Access Control"AuthType Basic<limit get>order deny,allowdeny from all# whitelist Syed's IP addressallow from xx.xx.xx.xxx# whitelist David's IP addressallow from xx.xx.xx.xxx# whitelist Amanda's IP addressallow from xx.xx.xx.xxx# whitelist Muhammad's IP addressallow from xx.xx.xx.xxx# whitelist Work IP addressallow from xx.xx.xx.xxx</limit>

Continue editing the file to match the names of your own team members, and paste the IP address you collected earlier to replace the location where it appears xx.xx.xx.xxx.xxx.

After saving the file, only these IP addresses can access the WordPress administrator.

Remember that if your IP address changes or you try to access your website from a new location, you will be locked out of the WordPress admin area. You need to add the new IP address to the file /wp-admin/.htaccess .

We hope this tutorial helps you understand how to limit access to WordPress administrators with IP addresses. You may also want to learn how to get a free SSL certificate for your website, or check out our list of must-have plugins to grow your website.

The above is the detailed content of How to restrict WordPress administrator access through IP address. For more information, please follow other related articles on the PHP Chinese website!