The MainWP Dashboard Lock Extension allows you to set 2 different security rules on your MainWP Dashboard site.

• Limit Access to certain IP addresses
• Set HTTP Basic Authentication to /wp-admin/ and/or wp-login.php pages

You can use one of the two security measures or both at the same time.

Limit Access to certain IP addresses

1. Login into your MainWP Dashboard
2. Go to the MainWP > Extensions > Dashboard Lock extension page
3. Locate the Dashboard Lock option box
4. Locate the Allow Login from IP option
   
5. In the provided text area, enter one or multiple IP addresses (each in a new line)
6. Click the Save Settings button

After setting this security measure, the /wp-login.php page will be restricted to all visitors except the ones with the whitelisted IP address.

Lock the /wp-admin/ pages

1. Login into your MainWP Dashboard
2. Go to the MainWP > Extensions > Dashboard Lock extension page
3. Locate the Dashboard Lock option box
4. Locate the Admin area lock option
   
5. In the provided fields, enter desired Username and Password
6. Click the Save Settings button

After enabling the Admin area lock, before accessing any WP Admin page (../wp-admin/..) HTTP Basic Authentication will be required.

Lock the /wp-login.php page

1. Login into your MainWP Dashboard
2. Go to the MainWP > Extensions > Dashboard Lock extension page
3. Locate the Dashboard Lock option box
4. Locate the Login page lock option
   
5. In the provided fields, enter desired Username and Password
6. Click the Save Settings button

After enabling the Login page lock, before accessing any Login page (../wp-login.php), HTTP Basic Authentication will be required.

Important Notes

If you are having issues with the Admin area lock and Login page lock, please check this document.

Some hosts don’t allow HTTP basic authentication, and this can create an infinite redirection loop. This can make accessing your MainWP Dashboard site hard. In case you experience this issue, please remove Admin area and login page locks. If this doesn’t help, it is highly recommended to contact your host support.

In case you have lost your HTTP Basic Auth credentials, remove Admin area and Login page locks.