One password in front of your whole site.
Arrivao Password puts a clean, shared-password screen in front of your WordPress front end — perfect for staging, client previews, and soft launches. Admins always get straight through, so you can't lock yourself out.
This site is protected
Enter the password to continue.
For everything you're not ready to show.
A convenience gate for the in-between moments — when a site needs to be live on its real domain but not yet open to the world.
Staging sites
Keep development and staging builds out of public view and off search engines.
Client previews
Share work in progress behind one password, without setting up accounts.
Private launches
Run a soft opening for a select audience before you go fully public.
Gated pages
Put a simple lock in front of members-only previews and private landing pages.
Small, focused, and properly built.
One job done well — with the safety details and finishing touches you'd want, and nothing you wouldn't.
Hashed, never stored plain
The password is hashed with WordPress's own hashing — the plain text is never saved. Access rides on a signed, expiring cookie.
Admins always pass
wp-admin and the login screen are never gated, and administrators bypass the gate automatically. Optionally let any logged-in user through too.
Rate limiting & allowlist
Per-IP rate limiting on the form slows guessing, and an IP allowlist lets trusted addresses skip the gate entirely.
Design the gate screen
Logo, message, eyebrow and button text, colours, and a solid, gradient, or image background — plus optional custom CSS for finishing touches.
Revoke all access
One click signs every visitor out immediately — useful the moment a shared password has been passed around too far.
REST & upload guarding
Optionally block unauthenticated REST requests (webhooks stay exempt) and protect uploaded files. Both off by default, with developer filters.
Honest about what it isn't.
Arrivao Password is a convenience gate, not a hardened security system. It uses one shared password rather than per-user accounts, and it doesn't encrypt your content or replace a firewall, malware scanner, or proper user roles. Think "keep this out of public view" — not "protect secrets from a determined attacker."
Protected in under two minutes.
A standard WordPress plugin. Install, set a password, tick the box — done.
arrivao-password ZIP under Plugins → Add New → Upload, then activate.Settings → Arrivao Password and set a password of at least 8 characters.Enable protection → Front-end gate and save. The status box confirms it's live.You can't lock yourself out.
The WordPress admin and login screen are never gated, and administrators always bypass the password screen. As long as you can log in, you can reach your dashboard — so it's safe to enable on a live site.
Put your site behind a password today.
Arrivao Password is free, focused, and safe to switch on. Download it, or explore the rest of the Arrivao toolkit.