HTTP basic auth on wordpress.com hosted site

• 

  mpvtinyhood · Member · Jul 20, 2023 at 12:04 am

  • Copy link
  • Add topic to favorites

  Can I password protect my wordpress.com hosted site with HTTP basic auth?

  I tried to set up a basic auth plugin but I think wordpress.com sites have a different authentication model?

  Thanks.

  WP.com: Yes
  Jetpack: Yes
  Correct account: Yes

  The blog I need help with is: (visible only to moderators and staff)

• 

  aleone89 · Staff · Jul 20, 2023 at 11:07 am

  • Copy link

  Hey there,

  Thank you for reaching out!

  Ok, so it sounds like you’re looking to make something membership based – is that correct? If yes, it is possible with the right collection of plugins.

  If you’re able to tell me more about the project, I’ll happily guide you in the right direction.

  This sounds exciting – looking forward to hearing more!

• 

  mpvtinyhood · Member · Jul 20, 2023 at 2:15 pm

  • Copy link

  Hi, I want to protect my site with HTTP basic auth. I tried using the wp-basic-auth plugin but that doesn’t seem to work. Seems like maybe wordpress.com (dot com) authentication is different than vanilla wordpress installations and it doesn’t work with that plugin?

  I want my site to be effectively “private” and made only accessible to a piece of software (rack-reverse-proxy) that supports only HTTP basic auth authentication. Full details of what I’m trying to do are described in this blog post.

  Is there any way to configure a wordpress.com (dot com) site to require a HTTP basic auth username and password?

• 

  staff-totoro · Staff · Jul 21, 2023 at 11:30 pm

  • Copy link

  Hi there,

  Seems like maybe wordpress.com (dot com) authentication is different than vanilla wordpress installations and it doesn’t work with that plugin?

  We use an authenticated SSO login on WordPress.com so that will likely cause issues with any plugin that is trying to create custom usernames and passwords that are not tied to matching WordPress.com accounts.

  We are not able to support this setup since we are not expert in HTTP basic auth setups, but you can try turning off SSO and see if that helps you to proceed with your plugin: https://wordpress.com/support/wordpress-com-secure-sign-on-sso/#membership-plugins-and-local-users

  Hope this helps point you in the right direction!