Support for Hide My WP - Amazing Security Plugin for WordPress!

Support for Hide My WP - Amazing Security Plugin for WordPress!

Cart 31,191 sales
Recently Updated

wpWave supports this item


This author's response time can be up to 1 business day.

Popular questions for this item

Does it physically change my WordPress folders and files?

No, everything remains in its default location and we just control access to them. This guarantees maximum compatibility.

I hide both wp-login and wp-admin but I still can see them. Why?

If you are logged in, please log out and check again. Don’t forget to save new login address somewhere.

What if I deactivate the plugin. Does it return everything back?

Absolutely ! Just deactivate it from admin panel and it will revert back. If you used ‘New WP-Admin Path’ make sure to remove or comment (//) related line in wp-config.php.

If you use a cache plugin you may need to flush it. If the plugin was deleted or renamed suddenly you need to visit Settings ->Permalink page (just visit nothing more!) and everything will revert back, too!

Since version 4, you can undo to previous saved settings whenever you want.

It breaks my entire site! CSS and JS file can’t be loaded anymore. What should I do?

First of all, WP permalinks (Settings > Permalink) should be enabled and “work” on your site. Following this, make sure you use Apache webserver and not Nginx, Windows (IIS) or Multi-site as they need manual configuration. If they are OK it means you have a customized htaccess. Open your htaccess via a FTP program and follow below check list:

  • Make sure you have only ONE WP block. Delete FIRST one if there are more. WP block is something like below:
    RewriteEngine On
    RewriteRule ^index\.php$ - [L]
    #[Probably HMWP LINES]
    RewriteCond %{REQUEST_FILENAME} !-f
    RewriteCond %{REQUEST_FILENAME} !-d
    RewriteRule . /index.php [L]
  • Make sure HMWP lines are right before:
    RewriteCond %{REQUEST_FILENAME} !-f
  • If you see below lines, comment them (i.e. add # before each line)
    RewriteCond [Something] 
    [One or more RewriteCond [Something]]
    RewriteRule .* index.php [L]
  • You may need to enable customized htaccess (in HMWP settings page) or change its permission to read-only to avoid WP updating htaccess frequently.

    I can’t login, what should I do now?

    When you hide wp-login.php you should add your admin key to login address:
    e.g. (1234 is our default key).
  • If you have any other problems simply use FTP or a file manage, rename the plugin folder to something else (in wp-content/plugins) and it will be deactivated.
  • Since v3: If you enabled New Admin Path you need to remove a line in wp-config.php (it starts with define( ‘ADMIN_COOKIE_PATH’)
  • If you see 500 Error message, it means there’s a problem with your htaccess. Remove it to solve the problem. In some cases you need to delete htaccess after each page request until you solve the problem.
  • Does it works with Nginx?

    Yes, Hide My WP supports Nginx. You need to have write access to Nginx config file. Please note, using Multi-site on Nginx is not officially supported yet but if you can convert htaccess rules to Nginx you may make it work.

    We do not officially support a mix of different web servers. (e.g. Apache alongside Nginx) but based on your knowledge and setup you may make it work. (Just several rewrite rules)

    Update: Multisite Nginx and IIS are in the plan.

    Does it works with other security plugins? (e.g. Better WP Security, Wordfence, BulletProof)

    Yes, it does :)

    Just make sure you don’t enable common features in both the plugins. For example, in case of Better WP Security: See this screenshot: (More details)

    Does it affect on my site speed? (probably because 30x redirects)

    Hide My WP doesn’t use any 30x redirect, instead it uses rewrite rule that is internal and doesn’t have any affect in speed! However speed may be decreased when you have lots of plugins and need to enable compatible modes. You can always choose between quick and compatible modes base on your needs. Anyway, disabling ‘Compress Page/Minify stylesheet’ or using a caching plugin (even a simple one!) is a “perfect solution” for any worry about performance.

    Does it work with multi-site and network?

    Yes, it does! It supports both sub-domain and sub-directory multi-sites. Site admin should use network admin panel to configure HMWP for the entire network.
    The only notable thing is that you need to access FTP to update htaccess manually. Also, for performance reasons we don’t hide theme names however you can simply rename theme folders using FTP.

    Does it affect SEO?

    If you’re not going to change main content URLs (post, category, tag or author and feed) the answer is no. You shouldn’t have any SEO problem.
    Please note HMWP just override the same WP default permalink settings for post, categories and tags. So even without this plugin if you change those settings it may affect your rank. Of course, you can use HMWP without changing any content URL.

    I still can see wp-login.php and hide_my_wp=1234 (admin key) in source code. Why?

    Well, this is our logic: If you link to those URLs and allow others to see ‘wp’-login.php and they know you use WordPress so there is no problem if they see your admin key, too. Admin key is not a Password. It just allows us to hide WordPress. You hided wp-login.php and link it in your site. Now, how users can login without admin key? Do you want to redirect them to a not found page?

    From another aspect, hiding login URL from public visitors increases security but it should be done by yourself. You should remove meta widget or any login links from your theme.

    You can also change login address to something else: Theme My Loginis a free plugin and works beside Hide My WP:

    Does it support IIS (Windows Servers) ?

    Since v4 HMWP officially supports IIS. Just save settings, go to Start tab click on IIS configuration button and follow guide to update web.config file. web.config located in WP root directory and you should use FTP to update it. Note that you may need to update this file whenever you change settings or install a new plugin or theme.

    Does it work with TimThumb image resizer?

    Sure, but please note you need to use “relative” URLs for it. You can use Replace in HTML feature to convert current image URLs to relative URLs. If timthumb.php location is similar to following pattern:

    wp-content/(themes OR plugins)/PLUGIN_OR_THEME_NAME/timthumb.php

    Using following rule for Replace in HTML should solve the problem (DELETE ALL SPACES).

  • timthumb.php?src [equal] = timthumb.php? src [equal] .. / ../ uploads

  • If timthumb file is located in a deeper path you need more ’.. /’ as an example for wp-content/themes/mytheme/includes/timbthumb.php you should have 3 ’.. /’ in your rule.

    - NEW_UPLOAD_PATH is your current upload path e.g. “file” - Base on locations and files name it may have little differences in your site. So check out your source code carefully.
    - Make sure you disabled avoid direct access to PHP files or added TimThumb file or theme folder to white list.

    Does it work with CDN services?

    Yes, it works and lots of our customers use it. We have different types of CDN: pulling and pushing. Here is the list of famous CDN companies:

    Pulling (recommended): Akamai, Amazon CloudFront, Cotendo (Akamai), AT&T, Generic Mirror, MediaTemple ProCDN / EdgeCast, NetDNA, MaxCDN.

    Pushing: Amazon CloudFront, Amazon Simple Storage (S3), Microsoft Azure, Rockspace Cloud files, any FTP based CDN.

    HMWP works well with ‘pulling’ method. You only need to change site URLs to their CDN versions:

    Just enter your CDN domain in CDN path field. (e.g.

    Pulling is a common and recommended method because it doesn’t need to upload files manually and also uses less disk space.

    It is also possible to make pushing CDNs work with HMWP but it needs more attempt: After changing file URLs with CDN URLs (like above) you should upload folders to CDN server base on HMWP structure (e.g. /template instead of wp-content/themes). Another possibility is uploading HMWP htaccess file to the CDN server without changing default WP structure but there’s no guarantee that your CDN company support this method.

    I use a Minify plugin to compress JS and CSS files but it doesn’t work with HMWP. What can I do?

    I recommend Better WP Minify, you just need enable Friendly Minify URL (from advanced tab) and that’s all!

    You can also enable Rename Plugins from HMWP settings page or change cache directory by BWPM (create those directories manually and set permission to 777). For example change wp-content/cache/minify to /cache/m/.

    For other plugins, it became even harder so we just suggest using one of the recommended plugins. Anyway, you should fix the problem by adding two (or more rules) to “Replace URLs” (one for each minified URL). You need to find old URLs so first DISABLE HMWP, make sure pretty URLs is disabled in minify plugin and then find minified JS and CSS URLs in the source code. Remove site address from those lines and use Replace URLs to replace them with new URLs (e.g. min_styles.css or min_scripts_js). Flush the cache (if you have) to see the result.

    As an example for scripts, add this rule: (Note that first part always starts with wp-content not http://)
    wp-content/plugins/minify/min/?f=wp-includes/js/jquery/jquery.js,wp-content/plugins/oqey-gallery/js/oqey-js-drag-iphone.js,wp-content/uploads/2012/04/orphus.js&m=1376074032 =>min_scripts_js

    - Minification is a complex task. Sometimes even without HMWP it fails (because of other plugins or theme) so before making a support request make sure everything works well if you disable HMWP.
    - This was tested with wp-minify and Better WP Minify (Read here, too)
    - If you enabled new theme or plugin you need to check your source code again and change old URLs.
    - As stated here, WP Rocket minification doesn’t work with Hide My WP.

    Does it compatible with W3 Total Cache?

    Yes, the only known problem is minification. You need to use Auto mode and not Manual. Manual mode also works but it may leave some footprints in the source code.

    • W3TC has very limited API to change its behaviour.
    • Credit links in the source code can’t be removed by Replace in HTML. Instead, it will be automatically removed by default for all visitors and untrusted users.

    How to update the plugin?

    Update: Since version 4 you can update it automatically like other free plugins!

    You can easily do it from wp-admin:

    1. Export previous settings (optional)
    2. Deactivate the plugin
    3. Delete the plugin
    4. Install new version using WP plugin upload tab (and activate it)
    5. Import previous settings (optional)

    Since v4 if you enter your purchase code you can update plugin automatically like other free WP plugins!

    Why that CMS finder tools still find WP on my site?

    First, try our demo site ( You probably see those apps can’t find WP on our site! Our demo site doesn’t have any additional feature. We use the highest privacy mode but you usually don’t need that as it may cause incompatibility with other plugins with no gain.

    If it works for us but not for you please continue reading:
    • It’s important to know those sites usually use a caching mechanism. This means it may take some days (or even weeks) to see your applied changes. (e.g. builtwith).
    • CMS finder tools can find WordPress not only by its footprints but by known plugins which indicate this is a WordPress site. Technically, it’s not possible for HMWP to hide all WP plugins but it provides some cool tools which help you do that.
    • CMS finder tools update their systems time to time. We even know some of them check out our source code to find how we hide WP and then change their algorithms base on that! From other side, we update HMWP base on our understanding from their algorithms.
    • It’s helpful to know from security point of view, IDS Firewall and Trust Network are by far more efficient than hiding WP
    • There are some other technical limitations here. In other words, Hide My WP can hide WordPress but at the end, it can not change the truth you use WordPress.

    I still see some WordPress footprints in my source code. How can I hide them?

    Update Since v4.5: You don’t need to separate rules with = or = =. There is a new tab called Replace Tools which make things a lot easier!

    Just make sure you chosen ‘Full Page’ as Replace Mode. In most cases this solve your problem so you don’t need to continue!

    More Details: If there’s still some WP related code you can use Replace in HTML to change them. For example, to change this:

    div class = 'My_WP_THEME'

    Just add this rule to Replace in HTML:

    My_WP_THEME => My_Site

    Note that if previous word is class or id (like above) this means that may be used by the theme or plugins for a specific purpose so after changing it make sure everything works well. If not you need to replace, for example, My_WP_THEME with My_Site in all stylesheets or scripts of your theme (or sometimes plugin) manually. This needs a little knowledge of coding so if you are newbie it’s better to ignore it.

    To REMOVE something from your source code just leave the second part blank:

    My_WP_THEM =>

    Important: You should NEVER use Replace in HTML to change a part URLs but it’s possible to remove entire an URL.

    Another point is that you may change a URL accidentally, for example, if there’s a URL like following in your source code: it will be changed to and this will break it! To avoid such problems you need to choose first part of replace rule carefully. If we add some more characters (here ” “) to our first rule this problem will be solved:


    To change URLs use Replace URLs. It’s similar to Replace in HTML. The point here is the first part should be base on WP root directory. First part usually starts with something like wp-content and NOT or < ? php echo … ?> (!!).

    Here’s a sample code for Replace URLs to rename Woo Commerce assets files:

    wp-content/plugins/woocommerce/assets/css/woocommerce-layout.css  => shop_lt.css
    wp-content/plugins/woocommerce/assets/css/woocommerce.css => shop.css
    wp-content/plugins/woocommerce/assets/css/woocommerce-smallscreen.css => shop-sm.css

    PS: You can change second part (like shop.css) to anything else.

    Show more

    Contact the author

    This author provides limited support for this item through email contact form.

    Item support includes:

    • Availability of the author to answer questions
    • Answering technical questions about item’s features
    • Assistance with reported bugs and issues
    • Help with included 3rd party assets

    However, item support does not include:

    • Customization services
    • Installation services

    View the item support policy


    Tell us what you think!

    We'd like to ask you a few questions to help improve CodeCanyon.

    Sure, take me to the survey