Adminkeep – Email Log, Custom CSS, Disable Comments, Site Lockdown & Admin Enhancements

You decide what changes on this site.

Adminkeep is a set of tools under that one idea. Site Lock stops things changing behind
your back — no new comment, no new plugin, no new user. Content makes the changes you do want
safe to make.

Every feature is a single switch, off until you turn it on. Switching one off never leaves you
repair work: the locks work purely through WordPress filters, so your site is exactly as it was,
and what you made with the Content features stays where you put it.

Site Lock

• Disable Comments — comments off everywhere, including direct POSTs from spam bots and the REST API. Nothing is written to your database, so switching it off brings every comment back. An optional cleanup button deletes spam and trashed comments, after showing you the exact count. Guide
• Registration Lockdown — stops new accounts being created, and refuses creation of or promotion to administrator. Blocked attempts are logged. Guide
• Disable XML-RPC — closes xmlrpc.php completely, including pingbacks and system.multicall. Guide
• Disable File Editing — removes the built-in plugin and theme file editors, reversibly.
• Installation Lockdown — no new plugins or themes, from WordPress.org or a ZIP, and no replacing one by uploading a ZIP, for anyone. Updates keep working, so security releases still reach your site. Guide
• Username Privacy — keeps your usernames out of public view. Author pages, the ?author=1 probe, the REST users list, author sitemaps and embed previews stop naming your accounts to visitors; anyone logged in sees everything as before. Nothing is written, so switching it off reopens it all. Guide

Content

• Duplicate — copy any post or page as a draft. Custom fields, taxonomies, the featured image and page builder layouts (Elementor, ACF) come along intact, and the original is never modified. Guide
• Live Draft — rework a published page in a private working copy, then publish it over the original. Same ID, same URL, and the old version is kept as a revision. Guide
• Keep URL — rename or move a page and its old address keeps working, child pages included. Fills the gaps WordPress leaves for pages and leaves posts to core. Guide
• Order — drag posts into the order you want on a dedicated Sort screen, one post type at a time. Lists that already ask for their own order, such as WooCommerce products and search results, are left alone. Guide
• Replace Media — upload a new version of a file over the old one. Same file type keeps the same URL; a different type updates the posts that use it and redirects the old address. Guide

Appearance

• Custom CSS — CSS that belongs to your site instead of your theme. Edit it under Appearance with WordPress’s own code editor; it stays when you switch themes, and your theme’s Additional CSS is left alone.

Admin

• User Registration Date — a sortable Registered column on the Users screen. WordPress records when every account was created but never shows it; this does, for every existing user, and newest-first sorting makes a wave of spam signups easy to spot. Guide

Email

• SMTP — Send your site’s email through an SMTP server so password resets and form messages arrive. Presets for Amazon SES, Brevo, Mailgun, SendGrid, Postmark, Zoho and Gmail; a test email that shows the server’s own error; settings can live in wp-config.php. Guide
• Email Log — Tools → Email Log lists the email your site sends, with recipient, subject and whether it was sent or failed, plus filters by status and date and a search. Open any email to see its sender and headers, and the email itself the way it looked when it went out, with remote images blocked. Content storage can be switched off to keep only the envelope. Password-reset and sign-in links are removed before an email is stored. Works with or without the SMTP feature, and with other SMTP plugins too.

Performance

A feature you have not enabled registers zero hooks and loads zero assets.

Links

• Website
• Documentation
• Guides

WP-CLI

Everything on the Adminkeep settings screen, plus the Custom CSS and SMTP screens, can be done from a shell with wp adminkeep.

wp adminkeep feature list — every feature and whether it is on
wp adminkeep feature enable disable_comments — switch a feature on (or `disable` it)
wp adminkeep feature set order post_types=post,page — change a feature's settings
wp adminkeep setting set hide_unused=true — change a plugin-level setting
wp adminkeep comments purge — delete spam and trashed comments, in batches
wp adminkeep css set site.css — replace the Custom CSS from a file
wp adminkeep smtp set --host=smtp.example.com --port=587 — configure SMTP
wp adminkeep smtp test [email protected] — send a test email and see the server's reply

Run wp help adminkeep for the full reference. A change made here is cleaned and checked exactly as it is on the screen, and a mistyped value is refused rather than guessed at.