🔒 Password Protect Any WordPress Page or Post — Without a Membership Plugin Most solutions to content protection are overkill. You don't need a full membership plugin just to lock down one page. PageBlocker does exactly one thing and does it perfectly: add a password to any individual page or post, right from the WordPress editor. No settings pages. No shortcodes. No extra accounts. Just a clean password form — and your content stays hidden until the right password is entered. ✏️ Set a Password Right in the Editor PageBlocker adds a simple metabox to every page and post. Type a password, hit save — that's it. Anyone who visits the page sees a polished password form instead of your content. Unlock it once and a secure cookie keeps access open for 12 hours. ✅ Works on pages and posts — protect as many as you like ✅ Each page/post gets its own independent password ✅ Remove the password anytime by clearing the field and saving ✅ No settings page to navigate — control lives in the editor where you already work 💡 Optional Hint Callout Need to give visitors a clue? Add an optional hint in the metabox and it appears above the form in a styled callout box — clearly labelled "HINT" so it doesn't get missed. Useful for client portals, course content, and member-only pages where you've already shared the password by email or in another channel. 🛡️ Built-in Brute Force Protection PageBlocker automatically blocks repeated wrong-password attempts. After 5 failed tries, the form locks for 15 minutes — per IP address, per post. A lockout banner appears and the form disables so bots and guessers can't keep hammering. 🔹 5 attempts allowed before lockout 🔹 15-minute cooldown per IP, per post 🔹 Failing on one page does not affect other protected pages 🔹 Lockout clears immediately on correct password 🍪 Secure Session Cookie Once a visitor enters the correct password, a secure cookie keeps them in for 12 hours — no re-entering passwords on every visit. ✅ Cookie stores a hashed value, never the raw password ✅ HttpOnly — not accessible via JavaScript ✅ SameSite=Strict — protected against CSRF ✅ Secure flag set automatically on HTTPS sites 🎨 Clean, Polished Form Design The password form is designed to look intentional, not generic. It fits naturally on any WordPress site without clashing with your theme. 🔹 Indigo/purple gradient accent bar — distinctive and modern 🔹 Centred white card, max 440 px wide — clean on all screen sizes 🔹 Lock icon with purple-tinted background — clear visual signal 🔹 Styled error banner (red) and lockout banner (amber) — clear feedback 🔹 CSS scoped to #pb-root with !important guards — no theme interference 🔒 Built with Security Best Practices ✅ All inputs sanitized, all outputs escaped ✅ Nonce verification on form submission ✅ Capability checks on all admin metabox saves (edit_post) ✅ Brute force throttling per IP, per post ✅ Secure, HttpOnly, SameSite cookies — raw password never stored ✅ Direct file access blocked on all PHP files ✅ Clean uninstall — removes all post meta on plugin deletion ⚙️ Requirements 🔹 WordPress 5.8 or higher 🔹 PHP 7.4 or higher 🔹 Works with any WordPress theme 🔹 No page builder required 🔹 No external API dependencies 📦 What You Get 📁 pageblocker.zip — ready to upload via WordPress Admin → Plugins → Add New 📄 Installation instructions included inside the ZIP Install. Activate. Open any page, set a password in the metabox, save. Done — in under 60 seconds. ❓ Frequently Asked Questions Does it work with custom post types? PageBlocker protects standard WordPress pages and posts. Custom post types are not currently supported. Can I set different passwords for different pages? Yes. Every page and post has its own independent password. They have nothing to do with each other. Does it replace WordPress's built-in password protection? Yes. PageBlocker intercepts content via the the_content filter before WordPress's own password feature would apply, and provides a much more polished and secure replacement. Will it break my theme or page builder? No. The form CSS is fully scoped and uses !important guards to prevent theme styles from leaking in. It has been designed to work cleanly alongside any theme. Is this a subscription? No. One-time purchase. No license key, no annual renewal, no phone-home checks. Where is the password stored? Passwords are stored in your WordPress post meta table. The cookie stores only a salted hash — the raw password is never written to the browser. Built by Scriptpeakk — questions? Reach out at scriptpeakk@gmail.com