Force Login
View on WordPress.orgScores higher than 87% of indexed plugins
About
Force Login is a simple lightweight plugin that requires visitors to log in to interact with the website.
What It Does
Force Login redirects all visitors who are not logged in back to the WordPress login screen, effectively locking down the front end of the site. It offers no configuration page, no settings panel, and no exceptions list: install it, activate it, and the entire site becomes members-only. Administrators remain able to access the dashboard and preview content as usual.
Who It's For
This plugin suits owners of small private sites such as family blogs, internal company intranets, client portals, employee training platforms, or membership communities where every visitor must authenticate. It is a fit for users who want a zero-configuration gate in front of WordPress without learning access-control plugins like Members or Paid Memberships Pro.
Who Should Skip It
Anyone running a public site, a blog that relies on organic search traffic, or an e-commerce store should skip it, since blocking all anonymous visitors will deindex the site from Google and kill conversions. If you need per-page exceptions, role-based access, or public landing pages with a private members area, you need a more capable plugin.
The Bottom Line
Force Login is a near-perfect example of a single-purpose WordPress plugin: tiny, dependable, recently updated, and loved by its users, with a quality score of 81.95 out of 100. It is the right tool for a small private site that needs to be locked down in under a minute. Just make sure you actually want to block all anonymous traffic before activating it, because there is no built-in way to allow exceptions.
Related Plugins
Pick this when you need GDPR cookie compliance and consent management rather than a hard login wall.
Choose this if your privacy concern is around consent and data tracking, not access control.
Pick this when you want privacy-respecting visitor analytics without a full lockdown.
Choose this for automated cookie banner compliance across regions rather than access restriction.
Pick this if you need lightweight, GDPR-friendly page view tracking instead of visitor authentication.