HTTP Headers vs WPS Hide Login
Compare WordPress plugins and tools side by side. Pick products with “Compare” in the software directory.
| Feature | HTTP Headers v1.19.6 · checked 23 Oct 2026 Free · ★ 4.3/5 Visit Details | WPS Hide Login v1.9.19 · checked 23 Oct 2026 Free · ★ 4.8/5 Visit Details |
|---|---|---|
| At a glance | ||
| Active installs | 40,000+ | 2M+ |
| Last updated | October 16, 2026 | August 13, 2026 |
| Editions | HTTP Headers | WPS Hide Login |
| Pros | Sets many security and CORS headers from one settings screen; Can write headers to .htaccess or .user.ini where the server allows it | Moves the login page to a custom URL with no core file changes; Restores the standard login when deactivated; Supports multisite network settings |
| Cons | Needs a server that reads .htaccess or .user.ini for file-based rules; Wrong Content-Security-Policy values can break page scripts and styles | Hiding the URL is not a substitute for login rate limiting; Forgotten login URLs lock editors out until the plugin is disabled; Maintained without guaranteed free support |
| Features (Security plugins checklist) | ||
| Firewall | — | No |
| Malware scan | — | No |
| Login protection | — | Yes |
| Two-factor login | — | No |
| Activity log | — | No |
| Free version | — | Yes |
| More features | ||
| Other features | Content-Security-Policy builder, CORS headers, Permissions-Policy header, Writes headers to .htaccess or .user.ini, Writes htpasswd and htdigest auth files | Custom login URL slug, Custom redirect page for blocked wp-admin visitors, Blocks direct access to wp-login.php and wp-admin, Network settings on multisite, Site Health test for the login URL |
| Requires WordPress | 3.6 | 4.1 |
| Requires PHP | 5.3 | 7.0 |
| Tested up to | 7.1 | 7.1 |
| Phones home | No | No |