WordPress also offers two less public options for your post’s Content Visibility<\/a>. Clicking the “Edit” link next to Visibility: Public<\/strong> reveals three radio buttons:<\/p>\n\n\n\n When you’re done editing the post’s visibility, click the “OK” button. You should now see your post’s new setting, e.g., Visibility: Password Protected.<\/strong>Remember: a setting change does not take effect until you click the “Publish” button (or “Update” if the post is already published.)<\/p>\n\n\n\n Only an Administrator, Editor, or the post’s Author can change a post’s password or visibility setting. To do so, use the “Visibility: Edit” link again. These settings are also available using the post’s Quick Edit link in the All Posts Screen.<\/p>\n\n\n\n The Visibility<\/strong> “Edit” link (or “Quick Edit”) is also a good way to reveal a forgotten post password.<\/p>\n\n\n\n WordPress displays a password-protected post differently. It makes these changes to the post’s:<\/p>\n\n\n\n So, a password-protected post with a title of “My Post” would display like this: <\/p>\n\n\n\n WordPress stores this password in a browser cookie so readers don’t have to re-enter passwords if they visit the same page multiple times. Furthermore, if multiple posts use the same password, the reader will only have to enter the password once to access every post (see caveat below).<\/p>\n\n\n\n WordPress will only track one password at a time. Therefore, if two posts use two different passwords, entering the password for post A, then entering the password for post B means that revisiting post A (or any post which shares its password) will require the user to re-enter the password for post A.<\/p>\n\n\n\n WordPress does not print a password-protected post’s Content or Excerpt until the correct password is entered. But a post’s Custom Field(s)<\/a> data is not protected, and can still show. To stop CFs from printing, wrap your get_post_meta<\/a> calls (e.g., in single.php or page.php) with a conditional statement using: post_password_required<\/a>. This one WordPress function checks both whether your post requires a password and whether the correct password has been provided:<\/p>\n\n\n\n The post_password_required function within in an if statement is also handy for other customizations, such as preventing password-protected posts from displaying in a list.<\/p>\n\n\n\n With WordPress Filters<\/a> you can: change the default text in the password form, change the default text for the password-protected post Excerpt, and insert the password form into the post Excerpt. To do so, add the following code to your custom plugin file.<\/p>\n\n\n\n The password form displays this default message: “This post is password protected. To view it please enter your password below:” The following code will return the form with different text and different html structure \u2014 in this example the custom message is: “To view this protected post, enter the password below:”<\/p>\n\n\n\n Please note: the my_password_form function must return a value: don’t use print or echo.<\/p>\n\n\n\n Make sure to set the maxlength parameter to a value of 20 when replacing the password protection form as WordPress will only save the first 20 characters due to database constraints.<\/p>\n\n\n\n The default Excerpt of a password-protected post is: “There is no excerpt because this is a protected post.” This code will replace that text with your own \u2014 HTML allowed:<\/p>\n\n\n\n Replace “<em>[This is password-protected.]<\/em>” with your custom password-protected Excerpt message.<\/p>\n\n\n\n Another option for your protected Excerpts is to print out the password form instead of the Excerpt message. That way people enter the password right from an index or archive page. Then, when they click the Title link, they’ll see the Content. With the get_the_password_form function, you can make the password form be the Excerpt for a password-protected post:<\/p>\n\n\n\n This will get the default WordPress password form and text or any customizations<\/a> you’ve made. For a better understanding of how post_password_required() and get_the_password_form() work, read their function definitions in In this same WordPress core file you’ll also find the the_excerpt and the_password_form filters, and the functions get_the_excerpt()<\/a>, get_the_title()<\/a>, and get_the_content()<\/a>. These functions control how a post’s title, excerpt and content display, depending on its visibility setting.<\/p>\n\n\n\n Sometimes, you don’t want your password protected posts to show up on other places around your site, like on the home page or archive pages. To effectively hide them from these pages without affecting your pagination, place the following code in your custom plugin file:<\/p>\n\n\n\n This code works in two parts: the first part effectively removes any password protected posts directly from any SQL query that WordPress is running, using the posts_where filter<\/a>. The second part adds this filter to all pages except single posts, pages, and admin pages.<\/p>\n\n\n\n For more information on why pre_get_posts is the right action for this function, see the pre_get_posts action reference<\/a>.<\/p>\n\n\n\n\n
![\"Publish](\"https:\/\/wordpress.org\/documentation\/files\/2019\/02\/protected_edit.png\")
<\/figure>\n\n\n\nFinding or Changing a Password<\/h2>\n\n\n\n
Password Protected Posts<\/h2>\n\n\n\n
![\"Publish](\"https:\/\/wordpress.org\/documentation\/files\/2019\/02\/protected_password.png\")
<\/a><\/figure>\n\n\n\n\n
![\"Password-protected](\"https:\/\/wordpress.org\/documentation\/files\/2019\/02\/protected_content.png\")
<\/a><\/figure>\n\n\n\nPassword Protecting Many Posts and Pages<\/h3>\n\n\n\n
Protect Custom Fields<\/h2>\n\n\n\n
<?php\nif ( ! post_password_required() ) {\n \/\/ Code to fetch and print CFs, such as:\n $key_1_value_1 = get_post_meta( $post->ID, 'key_1', true );\n echo $key_1_value_1;\n}\n?>\n<\/pre>\n\n\n\nCustomize the Protected Text<\/h2>\n\n\n\n
Password Form Text<\/h3>\n\n\n\n
<?php\nfunction my_password_form() {\n global $post;\n $label = 'pwbox-'.( empty( $post->ID ) ? rand() : $post->ID );\n $o = '<form action=\"' . esc_url( site_url( 'wp-login.php?action=postpass', 'login_post' ) ) . '\" method=\"post\">\n ' . __( \"To view this protected post, enter the password below:\" ) . '\n <label for=\"' . $label . '\">' . __( \"Password:\" ) . ' <\/label><input name=\"post_password\" id=\"' . $label . '\" type=\"password\" size=\"20\" maxlength=\"20\" \/><input type=\"submit\" name=\"Submit\" value=\"' . esc_attr__( \"Submit\" ) . '\" \/>\n <\/form>\n ';\n return $o;\n}\nadd_filter( 'the_password_form', 'my_password_form' );\n?>\n<\/pre>\n\n\n\nPassword Size Limitation<\/h4>\n\n\n\n
Protected Excerpt Text<\/h3>\n\n\n\n
<?php\nfunction my_excerpt_protected( $excerpt ) {\n if ( post_password_required() )\n $excerpt = '<em>[This is password-protected.]<\/em>';\n return $excerpt;\n}\nadd_filter( 'the_excerpt', 'my_excerpt_protected' );\n?>\n<\/pre>\n\n\n\nAdd the Password Form to the Excerpt<\/h3>\n\n\n\n
<?php\nfunction my_excerpt_password_form( $excerpt ) {\n if ( post_password_required() )\n $excerpt = get_the_password_form();\n return $excerpt;\n}\nadd_filter( 'the_excerpt', 'my_excerpt_password_form' );\n?>\n<\/pre>\n\n\n\nwp-includes\/post-template.php<\/a><\/code>.<\/p>\n\n\n\nHiding Password Protected Posts<\/h2>\n\n\n\n
<?php\n\n\/\/ Filter to hide protected posts\nfunction exclude_protected($where) {\n\tglobal $wpdb;\n\treturn $where .= \" AND {$wpdb->posts}.post_password = '' \";\n}\n\n\/\/ Decide where to display them\nfunction exclude_protected_action($query) {\n\tif( !is_single() && !is_page() && !is_admin() ) {\n\t\tadd_filter( 'posts_where', 'exclude_protected' );\n\t}\n}\n\n\/\/ Action to queue the filter at the right time\nadd_action('pre_get_posts', 'exclude_protected_action');\n\n?>\n<\/pre>\n\n\n\nChanging the cookie lifetime<\/h2>\n\n\n\n