WP Shield
This plugin will allow you to secure your development, staging and UAT environments with an http authentication block that can be controlled in admin but also turned off via a declared variable in your config file. It…
Solid choice
WP Shield is a solid plugin choice in 2026, with a few things worth checking first. It runs on 20+ sites and was last updated 2 weeks ago, and scores 67/100 on our health check.
- Actively developed — last update 2 weeks ago
- Tested with the latest WordPress (7.1)
- Small user base (20+ active installs)
- Very few reviews so far
How does it stack up?
Side-by-side on installs, updates, ratings & support
Daily downloads
Download spikes usually follow a new release — each site that auto-updates counts as a download.
Rankings
Where WP Shield stands todayWordPress.org search rankings
Live position in the plugin search, top 100| Keyword | Position |
|---|---|
| development | >100 |
| environments | >100 |
| security | >100 |
Version adoption
Share of active sites per release.
About WP Shield
From the official readme · v1.7Description
This plugin will allow you to secure your development, staging and UAT environments
with an http authentication block that can be controlled in admin but also turned
off via a declared variable in your config file. It allows you to bring your Database
back to non-production environments without having to physically turn off the plugin each time.
Variable: define('WP_SHIELD_UN', '');
This simple line of code (recommended to add to a file ignored by your code management
software and required into your wp_config.php file) will override the enabled flag
if the plugin’s settings. Enable in production and add the above code. If that
require file doesn’t exist in your other environments, it will prompt users for the
set username and password.
Installation
- Download WP Shield from the WordPress plugin directory
- Activate the plugin through the ‘Plugins’ screen in WordPress
- Use the Settings->’WP Shield’ screen to configure the plugin
- Enter the username and password you want use for the shield
- Check the enabled checkbox and Submit
NOTE: Depending on your setup you may need to add one of the following to your .htaccess
or apache conf file:
.htaccess
RewriteRule .* index.php [QSA,E=HTTP_AUTHORIZATION:%{HTTP:Authorization}]
Apache conf
SetEnvIf Authorization "(.*)" HTTP_AUTHORIZATION=$1
Changelog
No Update available
1.0
- Initial release of the Plugin
1.2
- Add code to bypass shield on WP-CLI calls
1.3
- Update readme for authorization setup
1.4
- Fix for caching of credentials
1.5
- Tested and confirmed for WordPress 6.1
1.6
- Tested and confirmed for WordPress 6.4
Screenshots
For developers
Is this your plugin? Show off the numbers.
Add a live badge to your site, docs or GitHub README. It updates on its own — no account needed.
Best WP Shield alternatives
All development plugins →
FAQ
WP Shield: quick answers
Straight answers, pulled from live WordPress.org data.
Live data from WordPress.org · checked Oct 1, 2026
Is WP Shield free?
Yes. WP Shield is free to download and use from the official WordPress.org plugin directory.
Is WP Shield safe to use in 2026?
WP Shield is a solid plugin choice in 2026, with a few things worth checking first. It runs on 20+ sites and was last updated 2 weeks ago, and scores 67/100 on our health check.
How many websites use WP Shield?
WP Shield is active on 20+ WordPress websites and has been downloaded 2,722 times since it launched in November 2019. It was downloaded 143 times in the last 30 days.
Does WP Shield work with WordPress 7.1?
Yes. The developer has tested WP Shield up to WordPress 7.1.2, the latest release. It requires WordPress 4.6 or newer.
What PHP version does WP Shield need?
WP Shield requires PHP 7.4 or higher. Most hosts run PHP 8.x today, so it works on any modern WordPress hosting.
When was WP Shield last updated?
The latest version, 1.7, was released on September 17, 2026 (2 weeks ago).
Who makes WP Shield?
WP Shield is developed and maintained by drupalmatts.
What are the best alternatives to WP Shield?
The most popular alternatives to WP Shield are Query Monitor (200K+ installs), Yoast Test Helper (60K+ installs) and What The File (40K+ installs).
Powered by PageForge
Want thousands of pages that rank like these? Build them in an afternoon.
This directory runs on the same engine as PageForge. Turn any spreadsheet, CSV or API into thousands of fast, SEO-ready WordPress pages — with schema, internal links and AI-written copy baked in.
- CSV, Google Sheets & API data sources
- AI content, schema & internal links per page
- Works with Elementor, Gutenberg, Yoast & Rank Math
- Free on WordPress.org — no credit card
