Code For Broke

<p>Must Login is a lightweight, user-friendly plugin that allows you to require login for your entire site with just one click. Perfect for membership sites, private blogs, intranets, or any site that needs to restrict access to registered users only.</p>
<h4>Features</h4>
<ul>
<li><strong>One-Click Toggle</strong> – Enable or disable login requirement instantly from the admin bar</li>
<li><strong>REST API Protection</strong> – Configurable authentication requirement for REST API endpoints</li>
<li><strong>Automatic Cache Clearing</strong> – Automatically clears popular caching plugins when toggling protection</li>
<li><strong>Admin Bar Status Indicator</strong> – Always see at a glance whether login is required</li>
<li><strong>Simple Settings Page</strong> – Easy-to-use settings interface</li>
<li><strong>Admin Override</strong> – Administrators always have access, even when login is required</li>
<li><strong>Smart Redirects</strong> – Users are redirected to login and then back to their intended page</li>
<li><strong>Selective Endpoint Access</strong> – Allow specific REST API endpoints for forms and authentication</li>
<li><strong>Cache Compatibility</strong> – Works with WP Super Cache, W3 Total Cache, WP Rocket, and more</li>
<li><strong>No Configuration Needed</strong> – Works perfectly out of the box</li>
<li><strong>Lightweight</strong> – Minimal impact on site performance</li>
<li><strong>Translation Ready</strong> – Fully internationalized and ready for translation</li>
</ul>
<h4>How It Works</h4>
<ol>
<li>Install and activate the plugin</li>
<li>Click the lock icon in the admin bar to toggle login requirement</li>
<li>That’s it! Your site is now protected</li>
</ol>
<p>When enabled, all visitors must log in to view any page on your site. Administrators can quickly toggle this on or off from anywhere on the site using the admin bar.</p>
<h3>Developer Documentation</h3>
<h4>Filters</h4>
<p><strong>cfb_must_login_redirect_url</strong> – Customize the login redirect URL</p>
<pre><code>add_filter('cfb_must_login_redirect_url', function($redirect_url, $redirect_to) {
    return 'https://example.com/custom-login';
}, 10, 2);
</code></pre>
<p><strong>cfb_must_login_allowed_rest_routes</strong> – Allow additional REST API endpoints</p>
<pre><code>add_filter('cfb_must_login_allowed_rest_routes', function($routes) {
    $routes[] = '/my-plugin/v1/public';
    return $routes;
});
</code></pre>
<h4>Actions</h4>
<p><strong>cfb_must_login_clear_cache</strong> – Triggered when cache is cleared</p>
<pre><code>add_action('cfb_must_login_clear_cache', function() {
    // Custom cache clearing logic
});
</code></pre>
<h4>Capabilities</h4>
<p>The plugin uses the <code>cfb_must_login_manage</code> capability, which is mapped to <code>manage_options</code> by default. You can customize this using the <code>map_meta_cap</code> filter.</p>


CFB Must Login

Require users to log in before viewing your site with easy admin toggle controls. Includes REST API protection and automatic cache clearing.

Kevin Vess

<p>Easily hide your WordPress site from public viewing by requiring visitors to log in first. As simple as flipping a switch.</p>
<p>Make your website private until it’s ready to share publicly, or keep it private for members only.</p>
<p><strong>Features</strong></p>
<ul>
<li>WordPress Multisite compatible.</li>
<li>Login redirects visitors back to the url they tried to visit.</li>
<li>Extensive Developer API (hooks & filters).</li>
<li>Customizable. Set a specific URL to always redirect to on login.</li>
<li>Filter exceptions for certain pages or posts.</li>
<li>Restrict REST API to authenticated users.</li>
<li>Translation Ready & WPML certified.</li>
</ul>
<p><strong>Bug Reports</strong></p>
<p>Bug reports for <a href="https://github.com/kevinvess/wp-force-login" rel="nofollow ugc">Force Login are welcomed on GitHub</a>. Please note that GitHub is <em>not</em> a support forum.</p>


Force Login

I can access PDF and image without login, I'm expected this plugin lock all url without login 

I can access PDF and image without login

¡Esto es exactamente lo que quiero! Solo quiero bloquear la vista pública antes de que el sitio esté listo. No necesita otras funciones. ¡Muchas gracias por hacerlo simple!

Plugin super simple pero muy funcional.

Merci pour ce plugin.
Il est simple, léger et très efficace.

Simple et efficace

perfect fit for my needs.
so rare to find lightweight plugins.
even needs no configuration.
goodby "Members" plugin >.<

so rare


So simple and so clever! As a plugin developer, a big part of my job is creating admin settings screens. So I spent a good few minutes trying to find the settings screen to fully enable this plugin. Then it dawned on me, there wasn't one. You just install, and the rest of the world is locked out. Genius! Fantastic work Kevin.Ben Roberts


Absolutely Perfect


This plugin is fantastic. We use it on all the sites we have in development to keep clients from peaking at their sites before they are ready.


Just what the doctor ordered

Force Login is a simple lightweight plugin that requires visitors to log in to interact with the website.

CFB Must Login vs Force Login