Hide My WP Ghost – Security & Firewall
View on WordPress.orgScores higher than 92% of indexed plugins
About
Hide My WP Ghost is a WordPress security plugin that hides WP paths and protects your site with Path Security, Firewall, Brute Force Protection, 2FA
Security History
What It Does
WP Ghost (Hide My WP Ghost) hides WordPress-specific paths like /wp-admin and /wp-login.php so automated bots have a harder time finding known attack surfaces. It bundles a firewall (8G Firewall rules), brute force protection, and passkey login on top of the obfuscation layer. In practice, it trades discoverability for security, which helps against scripted attacks but does not replace proper authentication or hosting-level hardening.
Who It's For
Site owners who run WordPress on shared hosting with no server-level firewall and want a single plugin that hides common paths, blocks brute force attempts, and supports passkeys. It is a reasonable fit for small business sites, blogs, and WooCommerce stores that want to reduce automated bot traffic without configuring a WAF at the host. Developers and agencies who manage multiple client sites can also benefit from the centralized path-hiding rules.
Who Should Skip It
Anyone already running Wordfence, Really Simple Security, or a host-provided WAF will see overlap and should not stack this on top. Sites that need malware scanning, vulnerability patching, or centralized threat intelligence should look elsewhere, as WP Ghost focuses on obfuscation and brute force blocking, not malware detection.
The Bottom Line
WP Ghost delivers a focused and well-maintained feature set around path obfuscation, brute force blocking, and passkey support, earning an overall quality score of 83.39/100. It is a solid choice for sites without a host-level WAF, but its 100,000 installs and missing public support footprint make it harder to recommend over larger, better-documented alternatives. If hiding WordPress paths is your main goal, it is worth a trial, but pair it with a malware scanner for full coverage.
Related Plugins
Pick this if you want a broader hardening suite with SSL enforcement, vulnerability detection, and a much larger install base of 3 million.
Choose Wordfence if you need a full firewall plus malware scanning and a 5 million-strong community for support and threat intelligence.
Pick Jetpack if you also need backups, downtime monitoring, and performance tools bundled with security features under one subscription.
Choose AIOS if you want a free, mature security plugin with login lockdown, firewall rules, and database hardening backed by a million installs.
Pick WPS Hide Login if you only need to rename wp-login.php without the weight of a full security suite, and you prefer a lightweight 2 million-install plugin.