Password-protect your whole site while you build.
One shared password hides the entire site from the public and from crawlers while you build, redesign, or soft-launch. No leaked content, no exposed password, no cached pages slipping through.
A real gate, not a leaky maintenance mode
Hide everything, leak nothing
Whole-site protection, proper bot blocking, and lockout-proof recovery in the free core. Pro adds branding, magic links, and capture.
One-click protection
Toggle the whole site from settings or the admin-bar switch.
Whole-site password gate
One shared password, remembered by a secure 30-day cookie.
Bot and SEO blocking
robots.txt disallow, X-Robots-Tag noindex header, and meta robots tag.
Response status control
503 maintenance (keeps rankings) or 200 coming-soon (can be indexed).
Logged-in bypass
Admins and editors are never blocked.
Brute-force protection
Repeated failed logins from one IP are throttled.
Cache bypass and flush
Caching is disabled while on, and popular cache plugins flush on toggle.
Accessible gate page
A clean WCAG 2.2 AA, grade A login screen by default.
10 landing styles
Minimal, Glassmorphism, Brutalist, Terminal, and more. Pro.
Magic link
Share access without revealing the password, with optional expiry. Pro.
IP allow list and allowed pages
Whitelist IPs, keep specific pages public. Pro.
Launch countdown
Set a date, show a countdown, auto-disable on launch. Pro.
Turn it on, set a password, share access
Free core, Pro for branding and access control
Whole-site protection is genuinely free. Upgrade for landing styles, magic links, and access control. Two paid tiers differ only by site count.
Free . $0 CAD
Whole-site password protection, bot and SEO blocking with 503/200 response control, the default and minimal accessible gate pages, a basic launch countdown with auto-disable, foolproof lockout recovery (admin-bar banner, force-exit URL, CSH_DISABLE constant), brute-force protection, and cache bypass with auto-flush. Never disabled when no license is present.
Free download →Pro . from $50/yr
Everything in Free, plus 10 landing-page styles, custom branding and colours, a live gate preview, magic links with optional expiry, role-based front-end and dashboard access, an IP allow list, allowed pages, an advanced launch countdown, search-engine passthrough for coming-soon mode, email capture with CSV export, and access statistics. Single Site or unlimited-site Agency.
Get Pro →Specs
C7 Site Hider technical summary.
Platform
WordPress 6.0+, PHP 8.0+.
Gate
One shared password, secure 30-day cookie, WCAG 2.2 AA page.
Response
503 Service Unavailable or 200 OK, your choice.
Security
Brute-force throttling, REMOTE_ADDR by default, opt-in proxy trust.
Caching
Auto bypass and auto-flush for WP Rocket, LiteSpeed, SG, and more.
Licence
Free core, Single Site or Agency Pro, never disables.
Frequently asked questions
Is C7 Site Hider free?
Yes. Whole-site password protection, bot blocking, response control, and lockout recovery are free, and no license ever disables the plugin.
Can crawlers still see my unfinished site?
No. It sets robots.txt to disallow plus a noindex header and meta tag, and serves a 503 by default to protect your rankings.
Can I lock myself out?
No. Administrators always bypass the gate, and there is an admin-bar banner, a force-exit URL, and a CSH_DISABLE wp-config constant for recovery.
Can I run a coming-soon page that gets indexed?
Yes. Switch to the 200 OK response, and with Pro you can let verified Googlebot and Bingbot through to index the gate page.
How is it different from page password protection?
WordPress only protects single pages and often leaks cached content. Site Hider gates the whole site and bypasses and flushes caches automatically.
