Choose which cookies we can use. You can change this at any time from “Cookie settings” in the footer. See our cookie policy for details.

Essential

Needed for the site to work, such as remembering your cookie choices. These can’t be switched off.

Always on
Skip to content
Docs Security & Privacy Free

Hide Author Slugs documentation

Author archive URLs normally include each person’s login name. This replaces it with an encrypted slug, in links and in the REST API.

Overview

/author/jsmith tells an attacker that “jsmith” is a valid login. With half the credentials known, guessing the password is the only step left.

Plan: Free. Everything on this page is in the free plugin.

Setup

  1. Go to WP Extended in your WordPress admin and find Hide Author Slugs under Security & Privacy.
  2. Switch Hide Author Slugs on.
  3. There is nothing to configure. The module works as soon as it is on.

Questions and troubleshooting

Is Hide Author Slugs free?

Yes. It is in the free plugin.

Will my author archive URLs change?

Yes. They switch to the encrypted slug, so update any links that pointed to the old address.

It isn’t working as expected

Check the module is switched on and its settings are saved. If another plugin does the same job, deactivate one of them. Then clear any page cache and test again. Still stuck? Pro customers can contact support; free users can post on the WordPress.org forum.