/ Plugin Category

/ Security & Privacy

/ Security Scanning & Malware Protection

/ WP Hide & Security Enhancer

WP Hide & Security Enhancer

By nsp-code

Security & Privacy / Security Scanning & Malware Protection

Reviewed by Omar Dabbas

Trusted WordPress expert with 20+ years of experience evaluating plugins for the WP ecosystem.

WP Hide & Security Enhancer Review - In-Depth Analysis

Protect your website by concealing vulnerable WordPress traces, plugins, themes, and login URLs. Features include 2FA, Captcha, Firewall, and Security Headers.

Performance Overview

WPS Score

7.17/10

User Rating

4.3/5 (based on 275+ reviews)

Active Installations

50,000+

Update Frequency

Very Good It is calculated using the weighted average of same category plugins.

Security Score

6.1 / 10 (Medium Risk) It is calculated using the weighted average of all versions.

What It Does

This plugin helps to conceal your WordPress site from detection. With over 99.99% of hacks targeting specific plugin and theme vulnerabilities, this plugin significantly boosts site security by making it invisible to hackers' web scanners.

By removing all traces of WordPress, including themes and plugins, potential exploits are rendered harmless. This method ensures that your site is safe without affecting SEO; in fact, it can enhance certain SEO aspects when used strategically.

WP-Hide offers the easiest way to completely hide your WordPress core files, login page, theme, and plugin paths from being shown on the front side. This is a huge improvement over site security, since no one will know whether you are running WordPress or not. It also provides a simple way to clean up HTML by removing all WordPress fingerprints.

The plugin does not change any files or directories. Everything is processed virtually using URL rewrite techniques and WordPress filters. All functionality is applied automatically without user intervention.

With this plugin, you can change the default WordPress login URL and make it totally arbitrary, ensuring that no one can guess where to log in. It becomes completely invisible.

Full plugin documentation is available at the official site. This plugin works well with custom WordPress directory structures and can help mitigate a large range of hacking attacks.

Comparing to Alternatives

WP Hide & Security Enhancer is a robust security plugin with several direct alternatives in the WordPress security category, offering various approaches to site protection and firewall features.

Top alternatives

Strengths

Highly customizable hiding options to obscure WordPress core files and paths
Good compatibility with other plugins and themes, minimizing site breakage
Strong customer support with quick bug fixes and responsive service
Includes both free and premium versions with advanced features in Pro
Enhances security by confusing potential attackers about site structure

Weaknesses

Has had multiple security vulnerabilities in past versions, though fixed in updates
Some users report minor issues with displaying security widgets to non-admins
Requires technical knowledge for optimal configuration, especially with server setups like Nginx
Security risk score indicates a moderate history of vulnerabilities

User Sentiment Analysis

With a strong majority of 5-star ratings (nearly 80%) and a total rating of 4.4 out of 5, users generally appreciate the plugin's effectiveness and support. Negative reviews are minimal and do not highlight recurring issues.

Positive highlights

'One of the best' in code quality and compatibility with many plugins (Namaste)
'Fantastic plugin' from a security perspective and confuses competitors (goldtecgimmer65)
Excellent customer service and quick bug fixes (itarendus, joegold)
Provides peace of mind by masking WordPress theme usage and protecting site code (mfmuller)
Custom login URL feature works well with Cloudflare integration (fatihaker)

Common complaints

Weaknesses

Past security vulnerabilities raise concerns despite fixes
Some minor UI issues such as security widget visibility to non-admins
Requires some technical expertise for advanced configuration
Moderate security risk score suggests caution

Who Should Use This?

Best for

Site owners and developers looking for a powerful and customizable plugin to hide WordPress core elements and enhance security through obscurity, especially those comfortable with technical setups and seeking responsive support.

Not ideal for

Users without technical knowledge or those seeking a plug-and-play security solution without the need for customization; also not ideal for those concerned about the plugin's past security vulnerabilities despite fixes.

Pricing & Value

Free version includes

The free version offers essential hiding features to obscure WordPress core files and paths, providing a solid baseline for improving site security.

Pro version (39 - 130 USD / year)

The premium version adds advanced hiding options, priority customer support, and enhanced compatibility features for complex setups.

Final Verdict

WP Hide & Security Enhancer stands out for its comprehensive and customizable approach to hiding WordPress core components, backed by strong user satisfaction and responsive support. Its free version is useful for basic needs, while the Pro version caters to advanced users requiring more control and features.

However, the plugin's history of security vulnerabilities and moderate risk score necessitate careful updating and monitoring. Users should weigh these factors against their technical ability and security requirements when choosing this plugin over alternatives.

Other Notable Features

Here are a few other notable features of this free WP Hide & Security Enhancer plugin.

2FA

Security

Hide

Screenshots

FAQ

Under the hood, this plugin never writes to, deletes, or modifies any existing files or directories on your server. Instead, it leverages WordPress’s built-in hook system and virtual URL rewrite rules—applied in memory—to seamlessly redirect and mask asset links. Rest assured, your core files, themes, and plugins remain exactly as you left them, with zero risk of unintended changes.