Allow the right networks.
Add individual IPv4 or IPv6 addresses, or CIDR ranges for an office or VPN.
For WordPress
IP Whitelister
Choose which networks can see your WordPress site.
Restrict WordPress visitors to an IP allowlist, with individual addresses, CIDR ranges and configurable role exceptions.
Choose your license
From $9 / year
Version 1.0.0 · Annual subscription
View full screenshot What it does
WordPress access controls.
Keep administrator access available.
The login page remains accessible. Signed-in administrators bypass the restriction, and additional bypass roles are configurable.
Explain a blocked visit.
Write the access-denied message visitors see when their address isn't allowed.
View screenshot 2 Annual licenses
Choose a site license.
Prices in USD. Billed annually.
An active license is required to use the plugin.
1 Site
$9 / year
Up to 1 site
2-5 Sites
$10 / year
Up to 5 sites
6-10 Sites
$30 / year
Up to 10 sites
Unlimited
$50 / year
Unlimited sites
Manage existing licenses and downloads · Changelog & older versions
Before you install
Questions about the plugin.
Ask about this pluginDoes it block the WordPress login page?
No. The login page remains accessible so administrators can sign in from another network.
Can I allow an entire office?
Yes. Use the public IP address or CIDR range visitors actually connect from, such as the outward-facing address of an office or VPN.
Does it replace server access controls?
No. It restricts requests handled by WordPress. Server rules, hosting access controls and cache configuration need to be handled separately.
What about a CDN or proxy?
The plugin reads common forwarding headers. Your hosting or proxy must supply a trustworthy visitor address; verify that configuration before relying on IP restrictions.