Skip to main content
Alex Hedström

Plugin

EnumGuard

Keep account discovery clues out of public WordPress responses.

What it does

EnumGuard reduces the ways a visitor can confirm that a WordPress username or user ID exists. It closes common discovery paths, including author URLs, unauthenticated user endpoints, and revealing login messages. The focus is account information—not removing the display names readers see on your posts.

Key features

  • Protection against author-ID queries, author archives, and author archive links.
  • Controls for unauthenticated user REST endpoints and embedded author data.
  • Generic login and lost-password responses.
  • User-discovery protection for sitemaps, oEmbed, and XML-RPC methods.
  • Login and reset protection for WooCommerce account forms when WooCommerce is active.
  • An overview of active protections and individual settings to suit your site.

Get started in three steps

  1. Install and activate EnumGuard, then open Settings → EnumGuard.
  2. Review the enabled protections and adjust any author-archive or XML-RPC settings your site needs.
  3. Check public author URLs and login/reset responses while logged out, and confirm your normal editor workflow still works.

Frequently asked questions

No. Display names and bylines remain. EnumGuard targets login slugs, author discovery URLs, and responses that confirm an account exists.

Logged-in users with the required editing or user-listing capability can still use the users REST API. Guests receive a generic 404.

Yes. Disable Author archives and Author archive links in the settings. You can keep author-ID queries blocked separately.

The app uses an XML-RPC method covered by the user-method protection. Turn that protection off if you need the app, and do not enable the full XML-RPC disable option.

Need a hand?

Ask a question or check existing topics in the plugin’s WordPress.org support forum.

Plugin support

More plugins to explore

← All plugins

Contact

Got a project?

I help with WordPress websites and plugins. Tell me what you need, and I’ll write back.

Secret Link