Code For Broke

<p>Must Login is a lightweight, user-friendly plugin that allows you to require login for your entire site with just one click. Perfect for membership sites, private blogs, intranets, or any site that needs to restrict access to registered users only.</p>
<h4>Features</h4>
<ul>
<li><strong>One-Click Toggle</strong> – Enable or disable login requirement instantly from the admin bar</li>
<li><strong>REST API Protection</strong> – Configurable authentication requirement for REST API endpoints</li>
<li><strong>Automatic Cache Clearing</strong> – Automatically clears popular caching plugins when toggling protection</li>
<li><strong>Admin Bar Status Indicator</strong> – Always see at a glance whether login is required</li>
<li><strong>Simple Settings Page</strong> – Easy-to-use settings interface</li>
<li><strong>Admin Override</strong> – Administrators always have access, even when login is required</li>
<li><strong>Smart Redirects</strong> – Users are redirected to login and then back to their intended page</li>
<li><strong>Selective Endpoint Access</strong> – Allow specific REST API endpoints for forms and authentication</li>
<li><strong>Cache Compatibility</strong> – Works with WP Super Cache, W3 Total Cache, WP Rocket, and more</li>
<li><strong>No Configuration Needed</strong> – Works perfectly out of the box</li>
<li><strong>Lightweight</strong> – Minimal impact on site performance</li>
<li><strong>Translation Ready</strong> – Fully internationalized and ready for translation</li>
</ul>
<h4>How It Works</h4>
<ol>
<li>Install and activate the plugin</li>
<li>Click the lock icon in the admin bar to toggle login requirement</li>
<li>That’s it! Your site is now protected</li>
</ol>
<p>When enabled, all visitors must log in to view any page on your site. Administrators can quickly toggle this on or off from anywhere on the site using the admin bar.</p>
<h3>Developer Documentation</h3>
<h4>Filters</h4>
<p><strong>cfb_must_login_redirect_url</strong> – Customize the login redirect URL</p>
<pre><code>add_filter('cfb_must_login_redirect_url', function($redirect_url, $redirect_to) {
    return 'https://example.com/custom-login';
}, 10, 2);
</code></pre>
<p><strong>cfb_must_login_allowed_rest_routes</strong> – Allow additional REST API endpoints</p>
<pre><code>add_filter('cfb_must_login_allowed_rest_routes', function($routes) {
    $routes[] = '/my-plugin/v1/public';
    return $routes;
});
</code></pre>
<h4>Actions</h4>
<p><strong>cfb_must_login_clear_cache</strong> – Triggered when cache is cleared</p>
<pre><code>add_action('cfb_must_login_clear_cache', function() {
    // Custom cache clearing logic
});
</code></pre>
<h4>Capabilities</h4>
<p>The plugin uses the <code>cfb_must_login_manage</code> capability, which is mapped to <code>manage_options</code> by default. You can customize this using the <code>map_meta_cap</code> filter.</p>


CFB Must Login

Require users to log in before viewing your site with easy admin toggle controls. Includes REST API protection and automatic cache clearing.

roehler

<p><strong>Private Website – Login Required</strong> is a simple and straightforward WordPress plugin designed to restrict access to your website. By activating this plugin, users must be logged in to view any content on your site. This is ideal for websites that host sensitive or exclusive content and want to ensure that only authenticated users can access it.</p>
<p>There are no complicated settings to configure. Simply activate the plugin to enforce the login requirement and deactivate it to remove the restriction.</p>
<p>This plugin was developed by <a href="https://roehler.nrw" rel="nofollow ugc">Robin Oehler</a>.</p>
<h3>Privacy Policy</h3>
<p>Private Website – Login Required uses <a href="https://appsero.com" rel="nofollow ugc">Appsero</a> SDK to collect some telemetry data upon user’s confirmation. This helps us to troubleshoot problems faster & make product improvements.</p>
<p>Appsero SDK does not gather any data by default. The SDK only starts gathering basic telemetry data when a user allows it via the admin notice. We collect the data to ensure a great user experience for all our users.</p>
<p>Integrating Appsero SDK DOES NOT IMMEDIATELY start gathering data, without confirmation from users in any case.</p>
<p>Learn more about how <a href="https://appsero.com/privacy-policy/" rel="nofollow ugc">Appsero collects and uses this data</a>.</p>
<h3>Bugs & Feedback</h3>
<p>Your feedback is important to me. If you find mistakes, have wishes, ideas, or suggestions, please send an email to <a href="mailto:mail@roehler.nrw" rel="nofollow ugc">mail@roehler.nrw</a>.</p>
<p>Legal notice (German): <a href="https://roehler.nrw/impressum/" rel="nofollow ugc">https://roehler.nrw/impressum/</a></p>
<p>You are free to use it on any website across countries to protect the privacy of your users.</p>
<p>Note: Activating this plugin cannot guarantee that your website is completely compliant with GDPR. When using Google Analytics, Facebook pixels, or other similar tools, additional measures may need to be taken.</p>


Private Website – Login Required

This plugin requires users to be logged in to view the website. Activate the plugin to enforce login, and deactivate it to remove the restriction.

CFB Must Login vs Private Website – Login Required