Protect wp-admin and login

Public-site blocking and admin-side protection are separate decisions. The Simple view makes the boundary explicit.

What the toggle controls

When Also protect wp-admin & login is off, only public pages are filtered. When it is on, the same location rule also guards wp-admin, login, XML-RPC, and comments.

How Protection on is determined

The header status is a summary of enabled validation targets. Hover or focus it to see which public-site or admin-side settings currently make protection active.

Avoid locking yourself out

• Confirm your current location on the Search tab.
• Start with a country rule you can verify.
• Keep the emergency access link configured in Diagnostics.
• Test login in a separate private window before ending your admin session.