
My Private Site makes your WordPress site private so only logged-in users can see your content. With one click, you can restrict access to all posts and pages, automatically redirect visitors to the login screen, and keep your site visible only to people you trust.
Unlike full membership or subscription systems, My Private Site focuses on strong privacy without unnecessary complexity. It is ideal for family sites, schools, clubs, client previews, or development environments where you want to share content with a trusted audience without managing payments, profiles, or custom roles.
My Private Site helps protect the “front door” of your private site with built-in safeguards for login and user registration, including registration spam protection and optional reCAPTCHA support. It also includes AI Crawler Defense to discourage automated collection of your site’s content.
Fake registrations can quickly fill your user list and trigger a flood of notification emails. My Private Site includes Registration Spam Guard controls that help block automated signups before they become user accounts:
* Honeypot field: Adds an invisible registration field that normal visitors do not fill in, but many bots do.
* Gibberish username detection: Blocks long, randomly mixed usernames often generated by registration bots.
* URL-like username detection: Blocks usernames that look like domains or URLs, including phishing-style hosted page addresses.
* Crypto scam phrase detection: Blocks usernames that carry common bait phrases such as balance checks, transfer notices, or withdrawal prompts.
* Excessive email dots: Blocks email addresses with unusually dotted local parts commonly used in bulk fake accounts.
* Missing MX records: Blocks registrations when the email domain is not configured to receive mail.
* Disposable email domains: Blocks common throwaway email services, including matching subdomains.
* StopForumSpam lookup: Checks registrants against the StopForumSpam database.
Each Registration Spam Guard option can be enabled separately, so you can choose the level of protection that fits your site. Blocked attempts are logged in the System Log area for quick review.
The internet is rapidly changing, with AI crawlers and bots harvesting content without consent. My Private Site helps you defend your work with integrated AI Crawler Defense features:
* NoAI and NoImageAI tags: Automatically add meta tags and headers that signal compliant AI systems not to use your text or images for training.
* Block GPTBot: Add a robots.txt rule to prevent OpenAI’s crawler from accessing your site.
* Really Simple Licensing (RSL): Publish a machine-readable license that explicitly prohibits AI training on your content.
These protections are included free in the core plugin, easy to enable with a checkbox, and designed to safeguard your site without affecting normal visitors or search engines. You can use them even if you’re not using any other site privacy features.
Premium add-ons turn My Private Site into a comprehensive privacy suite, giving you enterprise-style layered security defenses, smarter oversight, and flexible access, without the complexity or cost.
Advanced AI Crawler Defense, Visitor Intelligence, and Block IP provide protections regardless of whether you’re using any site privacy features.
This plugin does not hide non-WordPress web pages, such as .html and .php files. It also won’t restrict images and other media and text files directly accessed by their URL. If your hosting provider’s filesystem protections haven’t been set up correctly, files may also be accessed by directory listing.
Support has moved to the ZATZLabs site and is no longer provided on the WordPress.org forums. If you need a timely reply from the developer, please open a ticket.
If you’d like to keep up with the latest updates to this plugin, please visit David’s Lab Notes and add yourself to the mailing list.