Cookie settings

Choose which cookies we can use. You can change this at any time from “Cookie settings” in the footer. See our cookie policy for details.

Essential

Needed for the site to work, such as remembering your cookie choices. These can’t be switched off.

Always on

Help us understand which pages are visited and how people find us (Google Analytics). Off unless you turn it on.

Skip to content
New in 3.4.0 8 new features and 16 fixes November special 20% off every Pro plan with code NOVEMBER20 Black Friday 50% off every Pro plan until Sunday 29 November
WP Extended Modular WordPress toolkit , home
Docs Security & Privacy Free

User Enumeration documentation

Block the requests bots use to list your usernames, such as ?author=1, so they can’t collect logins to attack.

About User Enumeration

Overview

Visiting yoursite.com/?author=1 redirects to that user’s archive and reveals their username. Bots work through the numbers to build a list of every login on the site.

Plan: Free. Everything on this page is in the free plugin.

Setup

  1. Go to WP Extended in your WordPress admin and find User Enumeration under Security & Privacy.
  2. Switch User Enumeration on.
  3. There is nothing to configure. The module works as soon as it is on.

Questions and troubleshooting

Is User Enumeration free?

Yes. It is in the free plugin, with no settings to configure. Pair it with Hide Author Slugs to also hide usernames in author URLs.

It isn’t working as expected

Check the module is switched on and its settings are saved. If another plugin does the same job, deactivate one of them. Then clear any page cache and test again. Still stuck? Pro customers can contact support; free users can post on the WordPress.org forum.