Password protected pages logout

• 

  hawksnestflyin · Member · May 24, 2018 at 9:16 pm

  • Copy link
  • Add topic to favorites

  I have searched this site and find no definable answer to having the ability to have users either logout from a protected webpage or my ability to limit the time the cookie is stored. Yes, the user can clear the cache and cookies but that is relying on them to do so defeating the purpose of password protection. This is something WordPress should provide since they are providing protected pages and posts. Your consideration in this is appreciated.

  The blog I need help with is: (visible only to logged in users)

• 

  timethief · Member · May 24, 2018 at 9:24 pm

  • Copy link

  When we need Staff help with issues Volunteers cannot resolve like this one we type modlook into the sidebar tags on our forum threads. I did that for you. How do I get a Moderator/Staff reply for my question? https://en.support.wordpress.com/getting-help-in-the-forums/#how-do-i-get-a-moderatorstaff-reply-for-my-question

• 

  hawksnestflyin · Member · May 24, 2018 at 9:25 pm

  • Copy link

  Thanks timethief

• 

  timethief · Member · May 24, 2018 at 9:26 pm

  • Copy link

  You’re welcome.

• 

  kokkieh · Staff · May 25, 2018 at 5:22 am

  • Copy link

  Hi there,

  There’s no way to force-logout people from a password-protected post, as they’re not logged in. The only way to break access for people who have the password is to edit the post and change the password to something different. The default expiration value of the cookie cannot be modified for individual sites.

  Nowhere do we claim this feature is secure. It’s a password that’s set on the post itself, that anyone who has the password can access with no further verification. Setting a password on a post limits access, but it’s by no means a fool-proof way to ensure only the people you want to can see it – consider that any of your readers can just share the password with anyone else if they wanted to, without any risk at all to themselves.

  If you want that level of control over who can see your content your options are to either set the entire site to private, in which case only people logged into a WordPress.com account, and that you’ve specifically given access, can see it. Or you can use a membership plugin which will allow you to make certain content only accessible to site members and also control how they’re able to interact with it.