Docs
WordPress security documentation, written for humans.
45 topics across 18 areas. What each Stack Guard feature does, why it matters, how to set it up, and how to get back in if a setting keeps you out. The same help ships inside the plugin.
All WordPress security documentation topics
Sign-in
Hide the login page, add a second step and stop password guessing.
Passwords
Rules for new passwords, expiry and forced resets.
Access
Who can open Stack Guard, and each user's security at a glance.
Headers
Instructions your site sends to every browser that visits it.
Firewall
Ban, allow and filter visitors before WordPress does any work for them.
Hardening
Close doors WordPress leaves open by default and change the security keys.
Monitoring
Notice changed files and visitors probing for weak spots.
Malware
Scan for malicious code and deal with what is found.
Notifications
Email alerts, when they are sent, and what they say.
Appearance
How the Stack Guard screen looks, and agency branding.
Settings
Back up settings, move them between sites, and control how long records are kept.
Questions
Documentation questions
Where is the Stack Guard documentation inside the plugin?
Open Stack Guard in your WordPress admin and choose the Docs tab. It has the same topics as this page, with search and an Open Settings link that jumps to the right screen.
I locked myself out. What do I do?
Add one line to wp-config.php through your hosting account: SMG_DISABLE_LOGIN_GUARD for a forgotten login address, SMG_DISABLE_2FA for a lost phone, or SMG_SAFE_MODE when you are not sure. Sign in, fix the cause, then remove the line. See the Recovery switches topic.
Is this WordPress security documentation written for beginners?
Yes. Every topic starts in plain language with what the feature does and why it matters, then gives the steps. Developers will find the technical details, setting names and hooks in the How It Works section of each topic.