Hide Author Slugs documentation
Author archive URLs normally include each person’s login name. This replaces it with an encrypted slug, in links and in the REST API.
Overview
/author/jsmith tells an attacker that “jsmith” is a valid login. With half the credentials known, guessing the password is the only step left.
Plan: Free. Everything on this page is in the free plugin.
Setup
- Go to WP Extended in your WordPress admin and find Hide Author Slugs under Security & Privacy.
- Switch Hide Author Slugs on.
- There is nothing to configure. The module works as soon as it is on.
Questions and troubleshooting
Is Hide Author Slugs free?
Yes. It is in the free plugin.
Will my author archive URLs change?
Yes. They switch to the encrypted slug, so update any links that pointed to the old address.
It isn’t working as expected
Check the module is switched on and its settings are saved. If another plugin does the same job, deactivate one of them. Then clear any page cache and test again. Still stuck? Pro customers can contact support; free users can post on the WordPress.org forum.
