NUCUTA

‘Nucuta Password Protect’ is a security plugin which password protects wordpress websites. Requires PHP 5.6.30 or Above.
The plugin uses a custom password, and therefore it’s completely independant from default wordpress password uses to access to the admin area of the site. Users can be restricted to access the site either based on their user group or altogether.
The available user groups are “editor”, “author”, “contributor”, “subscriber”. if a particular group is excluded from protecting from the custom password, users belong to that group won’t be asked the password. Clicking on the log off button logs off from the entire website, meaning the user has to enter the password to access the site again. By default, all users (both guests and registered logged in users) are required to enter the password before accessing the site, but by configuring, logged in users can be excluded. The plugins blocks not only visitors, but also bots, spiders, and all kind of crawlers.
Custom message can be set for both logged in/non-logged in users, A separate login page is provided to login purpose. Password is salted before storing in the database, and therefore security is top notch. The full documentation, and how to use guide can be found at this location. <a href="https://nucuta.com/how-to-password-protect-wordpress-site/" rel="nofollow ugc">Documentation, Help and Tutorial</a>

Nucuta Password Protect

works even on php 7

Secure your wordpress site with a password. Useful for private blogs.

Freemius

Shois WP

Privex Password Protect – Password Protect Pages, Posts, Categories & Your Entire WordPress Site
Privex Password Protect is the most powerful and flexible WordPress password protection plugin available. Whether you need to password protect a page, lock a WordPress post, restrict access by user role, or put your entire site behind a password wall – Privex gives you complete, granular control with a modern, beautiful UI.
Forget the limited built-in WordPress password system. Privex replaces it with a professional-grade content protection solution that supports multiple passwords per page, brute-force protection, CAPTCHA integration, cookie-based sessions, and stunning Glassmorphism password form templates.
<h4>Who Is This Plugin For?</h4>
<ul>
<li>Agencies building staging sites or client preview sites that need a site-wide password lock</li>
<li>Bloggers and content creators who want to restrict access to premium posts or pages</li>
<li>WooCommerce store owners who need to password protect products or shop pages</li>
<li>Membership site owners who want to lock content by user role</li>
<li>Developers who need a lightweight, developer-friendly content restriction plugin</li>
</ul>
<h4>Key Features: Password Protect Anything in WordPress</h4>
Per-Page & Per-Post Password Protection 
Set individual passwords for any page or post. Create multiple passwords per post – perfect for sharing different access keys with different clients. (Free: up to 5 passwords per post, Unlimited in PRO)
Site-Wide Password Protection (PRO) 
Lock your entire WordPress website behind a single global password. Ideal for staging environments, under-construction sites, client demos, and private membership portals.
WooCommerce Product & Shop Protection 
Fully compatible with WooCommerce. Password protect specific products, your entire shop page, or complete product categories. Restrict access to exclusive items and ensure only authorized customers can view or purchase them.
Category & Archive Protection (PRO) 
Restrict entire WordPress post categories or custom taxonomy archives with a single password. Useful for gating premium content sections on your blog or news site.
Child Page Inheritance 
Optionally inherit password protection from parent pages to child pages – no need to set passwords on every sub-page individually.
Custom Post Type Support 
Privex works with all registered Custom Post Types (CPTs). Protect portfolios, events, courses, directories, or any content type your theme or plugin creates.
Multiple Passwords per Post 
Generate several unique passwords for the same page or post. Each password can have its own label, expiry date, and maximum usage limit – ideal for client management and time-limited access.
Master Password 
Set a single master password that unlocks all protected content across your entire site – useful for site owners and administrators.
Admin Auto-Bypass 
Logged-in administrators automatically bypass all password locks, allowing seamless content editing and previewing without entering passwords.
Cookie-Based Session Management 
Visitors who unlock content are granted a secure cookie-based session so they do not need to re-enter passwords on every page visit. Session duration is fully configurable (persistent or session-only).
<h4>Beautiful Password Form Templates</h4>
Glassmorphism, Minimal, Dark & Custom Templates 
Choose from multiple professionally designed password form templates including Glassmorphism, Dark Mode, Minimal, and Minimal Dark. All templates are fully responsive and look stunning on any device or screen size.
AJAX-Powered Instant Unlock 
When a visitor enters the correct password, the protected content fades in instantly without any page reload. This delivers a seamless, app-like user experience and avoids caching-related issues.
Custom Template Builder (PRO) 
Design your own password form from scratch using a drag-and-drop block editor. Add logo, background, custom colors, typography, animations, and more. Create unlimited custom templates.
Template Customization (Free) 
Even without PRO, you can customize accent colors, card background, button style, border radius, and toggle the icon or description text directly from the settings panel.
<h4>Advanced Security Features</h4>
Brute-Force Protection 
Built-in rate limiting tracks failed password attempts per IP address. After exceeding the allowed attempts, the IP is temporarily locked out for a configurable number of minutes – protecting your site from automated password-guessing attacks.
CAPTCHA Integration – Google reCAPTCHA, hCaptcha & Cloudflare Turnstile (PRO) 
Optionally require visitors to complete a CAPTCHA challenge before submitting a password. Supports Google reCAPTCHA v2, Google reCAPTCHA v3 (invisible), hCaptcha, and Cloudflare Turnstile – all configurable from the Security settings panel.
IP Whitelisting & Blacklisting (PRO) 
Define specific IP addresses or CIDR ranges that should always bypass protection (whitelist) or always be denied access (blacklist). Supports Cloudflare and proxy-forwarded IPs.
Concurrent Session Limits (PRO) 
Control how many simultaneous devices or browsers can use the same password at the same time. Automatically invalidate older sessions when the limit is exceeded – preventing password sharing.
User Role-Based Access (PRO) 
Grant access to specific WordPress user roles (e.g. Editor, Subscriber, Customer) without requiring them to enter a password at all. Combine role-based access with per-post or global password protection.
<h4>True Privacy & SEO Controls</h4>
Hide Protected Content from WordPress Search 
Optionally exclude password-protected posts and pages from WordPress internal search results, so visitors cannot discover protected content through the search bar.
RSS Feed Exclusion 
Automatically block password-protected content from appearing in your RSS feed. Subscribers only see content they are authorized to access.
Noindex Meta Tag for Protected Posts 
Add <code>noindex, nofollow</code> robots meta tags to protected posts and pages so that search engines like Google do not crawl or index your private content – keeping your sensitive data off search engine results pages (SERPs).
Excerpt & Snippet Hiding 
Prevent WordPress from displaying text excerpts or archive snippets of locked content in category pages, tag archives, and post grids – ensuring no content leakage.
<h4>Performance & Compatibility</h4>
Zero Bloat Architecture 
Privex loads scripts and stylesheets only on pages where password protection is active. On all other pages, nothing loads. This keeps your site lightweight and fast.
Transient Caching 
Access control checks use the WordPress transient API for lightning-fast performance, even on large sites with many protected posts.
Works with Popular Page Builders 
Fully compatible with Elementor, Divi, Beaver Builder, Oxygen, Bricks, Visual Composer, and the native WordPress Block Editor (Gutenberg).
Caching Plugin Compatible 
Designed to work alongside WP Rocket, LiteSpeed Cache, W3 Total Cache, and other popular caching solutions. The AJAX-based unlocking mechanism bypasses cache-related conflicts.
Translation Ready 
100% compatible with WPML, Polylang, and Loco Translate. All user-facing strings are internationalized and ready for translation into any language.
Works with Popular Themes 
Tested and compatible with Astra, Hello Elementor, OceanWP, GeneratePress, Kadence, and all other standard WordPress themes.
<h4>Use Cases for Privex Password Protect</h4>
<ul>
<li>Staging & Development Sites: Put your entire WordPress site behind a password so only your client or team can view it before launch.</li>
<li>Premium Content Gates: Lock blog posts, tutorials, or resources behind a password and share the key only with paying customers.</li>
<li>Private Membership Areas: Restrict access to members-only pages without needing a full membership plugin.</li>
<li>Client Portals: Create individual password-protected pages for each client with unique access keys.</li>
<li>Restricted WooCommerce Products: Hide products from the public and share a password-protected link only with specific buyers.</li>
<li>Internal Team Resources: Protect internal documentation, onboarding pages, or HR resources from the general public.</li>
<li>Under Construction Pages: Keep your redesigned website hidden from the public with a site-wide password lock until you are ready to launch.</li>
</ul>
<h3>External Services</h3>
This plugin optionally connects to third-party CAPTCHA services to protect password forms from automated bot attacks. These services are only used when the site administrator explicitly enables and configures them in the plugin settings (Pass Protect -> Security -> CAPTCHA Integration). No data is sent to any external service unless the administrator actively chooses a CAPTCHA provider and enters valid API keys.
<h4>Google reCAPTCHA (v2 and v3)</h4>
When Google reCAPTCHA is selected as the CAPTCHA provider, this plugin loads the reCAPTCHA JavaScript library from Google’s servers on frontend password-protected pages. Upon form submission, the CAPTCHA response token is sent to Google’s verification API along with your site’s secret key and the visitor’s IP address for validation.
<ul>
<li>Service provider: Google LLC</li>
<li>What data is sent: CAPTCHA response token, site secret key, visitor IP address</li>
<li>When data is sent: Each time a visitor submits a password form on a protected page (only when reCAPTCHA is enabled)</li>
<li>Service terms of use: <a href="https://policies.google.com/terms" rel="nofollow ugc">https://policies.google.com/terms</a></li>
<li>Privacy policy: <a href="https://policies.google.com/privacy" rel="nofollow ugc">https://policies.google.com/privacy</a></li>
</ul>
<h4>hCaptcha</h4>
When hCaptcha is selected as the CAPTCHA provider, this plugin loads the hCaptcha JavaScript library from hCaptcha’s servers on frontend password-protected pages. Upon form submission, the CAPTCHA response token is sent to hCaptcha’s verification API along with your site’s secret key for validation.
<ul>
<li>Service provider: Intuition Machines, Inc.</li>
<li>What data is sent: CAPTCHA response token, site secret key</li>
<li>When data is sent: Each time a visitor submits a password form on a protected page (only when hCaptcha is enabled)</li>
<li>Service terms of use: <a href="https://www.hcaptcha.com/terms" rel="nofollow ugc">https://www.hcaptcha.com/terms</a></li>
<li>Privacy policy: <a href="https://www.hcaptcha.com/privacy" rel="nofollow ugc">https://www.hcaptcha.com/privacy</a></li>
</ul>
<h4>Cloudflare Turnstile</h4>
When Cloudflare Turnstile is selected as the CAPTCHA provider, this plugin loads the Turnstile JavaScript library from Cloudflare’s servers on frontend password-protected pages. Upon form submission, the CAPTCHA response token is sent to Cloudflare’s verification API along with your site’s secret key and the visitor’s IP address for validation.
<ul>
<li>Service provider: Cloudflare, Inc.</li>
<li>What data is sent: CAPTCHA response token, site secret key, visitor IP address</li>
<li>When data is sent: Each time a visitor submits a password form on a protected page (only when Turnstile is enabled)</li>
<li>Service terms of use: <a href="https://www.cloudflare.com/terms/" rel="nofollow ugc">https://www.cloudflare.com/terms/</a></li>
<li>Privacy policy: <a href="https://www.cloudflare.com/privacypolicy/" rel="nofollow ugc">https://www.cloudflare.com/privacypolicy/</a></li>
</ul>
<h3>Developer Instructions</h3>
This plugin does not use any build tools. All source code is provided as-is. No compilation or bundling is required.

Privex Password Protect – Lock Pages, Posts & Categories

Password protect pages, posts, categories, and your entire WordPress site. Restrict access with multiple passwords, user roles, CAPTCHA, and brute-for …

Nucuta Password Protect vs Privex Password Protect – Lock Pages, Posts & Categories