Getting Started
Whitelabel Login replaces the default WordPress login page with a fully branded experience and provides granular content access control. Your public landing page stays open — everything else goes behind login.
Installation
- Download
whitelabel-login.zipfrom WordPress.org or your account dashboard. - Go to Plugins → Add New → Upload Plugin in your WordPress admin.
- Upload the ZIP and click Install Now.
- Click Activate.
What Happens on Activation
On activation, the plugin:
- Creates a custom login page at
/login(configurable) - Redirects the default
wp-login.phpto your custom login page - Registers the settings page under Settings → Whitelabel Login
- Sets sensible defaults: branding uses your site logo, access gate is off by default
Core Features Overview
Custom Login Page
A fully branded login/register/lost-password page with tabbed navigation — all on a single page. Supports AJAX login (no page reload), "Remember Me", and honeypot spam protection.
Registration
Built-in registration form on the same page. Configure required fields, enable admin approval mode (users get a "Pending" role until manually approved), and customize the welcome email.
Access Gate
Protect your entire site or specific pages, posts, categories, or roles. Non-logged-in visitors are redirected to your login page. See the Access Gate guide for full details.
User Role Management
Create custom roles (e.g., "Community Member"), set the default role for new registrations, hide the wp-admin bar for non-admins, and redirect non-admin users away from /wp-admin/.
Settings Overview
Navigate to Settings → Whitelabel Login. The settings are organized into six tabs:
| Tab | Description |
|---|---|
| Login Page | Logo, background (color/image/video), form colors, border radius, shadows, custom CSS |
| Registration | Enable/disable registration, configure fields, admin approval mode |
| Access Gate | Global protection, public page exceptions, redirect URL, "Access Denied" message |
| Roles | Custom roles, default registration role, admin bar visibility, wp-admin redirect |
| Emails | Welcome email, approval email, password reset email — all customizable |
| Advanced | Custom login URL slug, redirect rules, security settings (rate limiting, lockout) |
Quick Setup (5 Minutes)
- Upload your logo: Go to Settings → Whitelabel Login → Login Page. Upload your logo or check "Use site logo" to use the logo from the Customizer.
- Set a background: Choose a background color, upload an image, or paste a video URL.
- Enable the access gate: Go to the Access Gate tab, toggle on "Protect entire site", and add your public pages (home, privacy policy, imprint) to the exceptions list.
- Configure registration: On the Registration tab, enable registration and choose whether new users require admin approval.
- Preview: Click the "Preview Login Page" button at the bottom of the Login Page tab to see your branded login page before going live.
Custom Login URL
By default, the custom login page is created at /login. You can change this in Settings → Whitelabel Login → Advanced:
- Set the slug to anything:
/member-login,/sign-in, etc. - The default
wp-login.phpwill automatically redirect to your custom URL. - All WordPress login links (
wp_login_url()) will use the new URL.
Security Features
Built-in security with no CAPTCHA dependency required:
- Rate limiting: Configurable limit (default: 5 attempts per 15 minutes)
- Honeypot field: Invisible field on registration to catch bots
- Brute force protection: Hooks into
wp_login_failedto track and block repeated failures - Lockout notifications: Optional email to admin when an IP is locked out
- CSRF protection: Nonces on all forms
- Standard cookies: Uses
wp_set_auth_cookie()— no custom cookies
Gutenberg Blocks
The plugin registers two Gutenberg blocks:
- Protected Content (
whitelabel-login/protected-content) — wrap content that should only be visible to specific roles. - User Info (
whitelabel-login/user-info) — displays the logged-in user's name, avatar, and a logout link.
Next Steps
- Branding & Customization — detailed guide to styling your login page
- Access Gate — setting up content protection
- Hooks & Filters — developer reference for extending the plugin