JCP‘s WordPress Dashboard Protection feature

If you would like to strengthen your WordPress site’s security, JCP‘s WordPress Dashboard Protection feature restricts access to the WordPress administrative dashboard (or wp-admin) by IP address.

The protection still allows normal users to login, such as customers of a WooCommerce installation or members of a MemberPress installation, but they won’t be able to access the wp-admin dashboard. Primarily, this protects against compromised administrator passwords and can be a powerful preventative if your site has struggled with malware or security in the past.

Enabling the protection

1. Login to JCP via your Jolt customer area
2. Select the site you would like to protect from the Sites list
3. Select the Security tab
4. Add your IP address to the Trusted IPs list (your current IP will be pre-filled)
5. Scroll to the WordPress Dashboard Protection section and toggle the feature on

💡 When the dashboard protection is enabled and your IP is not trusted, you’ll see a 403 error when trying to access wp-admin

Using the magic link

Dashboard protection can become inconvenient if your IP address changes regularly.

However, you can use JCP‘s Dashboard magic link to automatically add your IP address to the Trusted IPs list; meaning you don’t need to add your IP manually if it changes.

When the dashboard protection is enabled, you’ll see a Click to copy your magic link.. link and this will copy the magic link to your clipboard, allowing you to bookmark it, or share it with a colleague, or your client.

You should only share the magic link with people who need access to the WordPress dashboard.

Disabling the protection

1. Login to JCP via your Jolt customer area
2. Select the site you would like to protect from the Sites list
3. Select the Security tab
4. Toggle WordPress Dashboard Protection to Off