Code For Broke

<p>Must Login is a lightweight, user-friendly plugin that allows you to require login for your entire site with just one click. Perfect for membership sites, private blogs, intranets, or any site that needs to restrict access to registered users only.</p>
<h4>Features</h4>
<ul>
<li><strong>One-Click Toggle</strong> – Enable or disable login requirement instantly from the admin bar</li>
<li><strong>REST API Protection</strong> – Configurable authentication requirement for REST API endpoints</li>
<li><strong>Automatic Cache Clearing</strong> – Automatically clears popular caching plugins when toggling protection</li>
<li><strong>Admin Bar Status Indicator</strong> – Always see at a glance whether login is required</li>
<li><strong>Simple Settings Page</strong> – Easy-to-use settings interface</li>
<li><strong>Admin Override</strong> – Administrators always have access, even when login is required</li>
<li><strong>Smart Redirects</strong> – Users are redirected to login and then back to their intended page</li>
<li><strong>Selective Endpoint Access</strong> – Allow specific REST API endpoints for forms and authentication</li>
<li><strong>Cache Compatibility</strong> – Works with WP Super Cache, W3 Total Cache, WP Rocket, and more</li>
<li><strong>No Configuration Needed</strong> – Works perfectly out of the box</li>
<li><strong>Lightweight</strong> – Minimal impact on site performance</li>
<li><strong>Translation Ready</strong> – Fully internationalized and ready for translation</li>
</ul>
<h4>How It Works</h4>
<ol>
<li>Install and activate the plugin</li>
<li>Click the lock icon in the admin bar to toggle login requirement</li>
<li>That’s it! Your site is now protected</li>
</ol>
<p>When enabled, all visitors must log in to view any page on your site. Administrators can quickly toggle this on or off from anywhere on the site using the admin bar.</p>
<h3>Developer Documentation</h3>
<h4>Filters</h4>
<p><strong>cfb_must_login_redirect_url</strong> – Customize the login redirect URL</p>
<pre><code>add_filter('cfb_must_login_redirect_url', function($redirect_url, $redirect_to) {
    return 'https://example.com/custom-login';
}, 10, 2);
</code></pre>
<p><strong>cfb_must_login_allowed_rest_routes</strong> – Allow additional REST API endpoints</p>
<pre><code>add_filter('cfb_must_login_allowed_rest_routes', function($routes) {
    $routes[] = '/my-plugin/v1/public';
    return $routes;
});
</code></pre>
<h4>Actions</h4>
<p><strong>cfb_must_login_clear_cache</strong> – Triggered when cache is cleared</p>
<pre><code>add_action('cfb_must_login_clear_cache', function() {
    // Custom cache clearing logic
});
</code></pre>
<h4>Capabilities</h4>
<p>The plugin uses the <code>cfb_must_login_manage</code> capability, which is mapped to <code>manage_options</code> by default. You can customize this using the <code>map_meta_cap</code> filter.</p>


CFB Must Login

Require users to log in before viewing your site with easy admin toggle controls. Includes REST API protection and automatic cache clearing.

Sherpah_

<p>The Safe Private Plugin set up a members-only area on your WordPress and protect your content, pages and resources from public access.<br />
Only registered users will be able to browse your site. The plugin will redirect all others users to the login page of your blog.<br />
Deny access to unregistered users, perfect for a private website, helpful during a blog maintenance and useful for developers…</p>
<ul>
<li>Membrers-only area</li>
<li>Members only feed</li>
<li>No template modifications</li>
<li>Fast, Safe and secure…</li>
</ul>
<p>Author Plugin link page: <a href="http://www.sherpah.net/wordpress/plugin-safe-private/" rel="nofollow ugc">Safe Private</a></p>


Safe Private

A Private Wordpress, a Members-only Website, helpful during a site maintenance and useful for developers...

CFB Must Login vs Safe Private