UserFlow – Disable Dashboard Access for Non Admin
Remove dashboard access to non-admin users and easily control who can access your WordPress dashboard with simple configuration. By default, only administrators are allowed, but you can now whitelist specific trusted users by username—perfect for developers, VAs, or contractors. Features include: Whitelist specific users by username Session expiration controls (1-24 hours) Option to apply session timeout to administrators Custom redirect URL for blocked users Secure, validated, and sanitized settings Hide admin toolbar for non-authorized users Developer-friendly filters for advanced customization Why Choose UserFlow? Maximum Protection: Instantly block unauthorized users from accessing sensitive dashboard areas. Effortless Whitelisting: Grant dashboard access to trusted users (developers, VAs, contractors) without changing their roles. Just add their usernames! Session Security: Automatically log out users after a set period for bulletproof session management. Choose from multiple timeout intervals and apply to all users or just non-admins. Custom Redirects: Guide blocked users to a branded page or helpful resource instead of the generic homepage. Zero Configuration Needed: Works out of the box—only administrators can access the dashboard until you customize settings. Perfect For: Website owners who want peace of mind Agencies and developers managing multiple sites Teams needing granular dashboard access Anyone serious about WordPress security Protect your site, empower your workflow, and deliver a professional experience—all with one lightweight plugin. Read more detail
Top keywords
- users10×4.55%
- dashboard6×2.73%
- access5×2.27%
- session4×1.82%
- administrators3×1.36%
- dashboard access3×1.36%
- developers3×1.36%
- apply2×0.91%
- blocked2×0.91%
- blocked users2×0.91%
- choose2×0.91%
- configuration2×0.91%
Remove Dashboard Access
The easiest and safest way to restrict access to your WordPress site’s Dashboard and administrative menus. Remove Dashboard Access is a lightweight plugin that automatically redirects users who shouldn’t have access to the Dashboard to a custom URL of your choosing. Redirects can also be configured on a per-role/per-capability basis, allowing you to keep certain users out of the Dashboard, while retaining access for others. Limit Dashboard access to user roles: Admins only Admins + editors Admins, editors, and authors or restrict by specific user capability Choose your own redirect URL Optionally allow users to edit their profiles Display a message on the login screen so users know why they’re being redirected Allow specific admin pages through the redirect — paste a list of URLs your customers should still be able to reach (with wildcard support for grouping related pages) Optionally extend the block to admin-ajax.php requests for stricter lockdown Blocking access to the Dashboard is a great way to prevent clients from breaking their sites, prevent users from seeing things they shouldn’t, and to keep your site’s backend more secure. Allow only users with roles or capabilities: You can restrict Dashboard access to Admins only, Editors or above, Authors or above, or by selecting a specific user capability. Grant access to user profiles: Optionally allow all users the ability to edit their profiles in the Dashboard. Users lacking the chosen capability won’t be able to access any other sections of the Dashboard. Show a custom login message: Supply a message to display on the login screen. Leaving this blank disables the message. Allow specific admin pages through the redirect: Sometimes you want to lock down the Dashboard but still let your customers reach one or two specific admin pages — a payment confirmation, a TrustedLogin secret-share screen, a custom report. Paste those URLs into the Allowed URLs box (one per line, relative or absolute), and matching requests will skip the redirect. Use * as a wildcard inside a query value to match a whole group of pages at once. For example, ?page=tl-* allows tl-secrets, tl-config, and any other page whose slug starts with tl-. Optionally block AJAX requests too: By default this plugin doesn’t touch requests to admin-ajax.php — most WordPress sites rely on those for legitimate frontend AJAX. If you’d rather the dashboard restriction apply there as well, turn on the “Also block AJAX” checkbox in the Advanced section of the settings page.
Top keywords
- dashboard11×2.67%
- access9×2.18%
