Title: MyNew Registration Lockdown Author: mynewtechnologies Published: August 12, 2026 Last modified: August 12, 2026 --- Search plugins ![](https://ps.w.org/mynew-registration-lockdown/assets/banner-772x250.png?rev=3643007) ![](https://ps.w.org/mynew-registration-lockdown/assets/icon-256x256.png?rev=3643007) # MyNew Registration Lockdown By [mynewtechnologies](https://profiles.wordpress.org/mynewtechnologies/) [Download](https://downloads.wordpress.org/plugin/mynew-registration-lockdown.1.0.2.zip) * [Details](https://wordpress.org/plugins/mynew-registration-lockdown/#description) * [Reviews](https://wordpress.org/plugins/mynew-registration-lockdown/#reviews) * [Installation](https://wordpress.org/plugins/mynew-registration-lockdown/#installation) * [Development](https://wordpress.org/plugins/mynew-registration-lockdown/#developers) [Support](https://wordpress.org/support/plugin/mynew-registration-lockdown/) ## Description MyNew Registration Lockdown enforces one centralized user-creation policy across WordPress. Instead of relying only on the public registration setting or a visible form, it evaluates user creation at the shared `wp_insert_user()` insertion layer. The default policy blocks unauthorized account creation while allowing: * Logged-in administrators with the `create_users` capability inside wp-admin. * WP-CLI user creation by a server operator. * Explicitly authorized integrations through the documented `mnrl_is_user_creation_authorized` filter. The plugin also disables the default registration action, can disable multisite signups, records privacy-aware audit events, retains those events for a configurable period, and can send threshold-based email alerts. No telemetry is collected. The plugin does not contact MyNew Technologies or any third-party service. Documentation and support: https://mynewtechnologies.com/products/registration-firewall/ ## Installation 1. Upload the `mynew-registration-lockdown` directory to `/wp-content/plugins/` or install the ZIP through Plugins > Add New > Upload Plugin. 2. Activate the plugin. 3. Open Settings > Registration Lockdown. 4. Review the default authorization policy before deploying to a site that intentionally creates users through custom integrations. ## FAQ ### Does this merely hide the registration form? No. It enforces policy at the user insertion layer used by WordPress core and most integrations. ### Can administrators still create users? Yes, by default, logged-in users with the `create_users` capability can create users from wp-admin. ### Can an integration be allowed? Yes. Authenticate and authorize the integration, then return `true` from the `mnrl_is_user_creation_authorized` filter for that specific request. ### Does the plugin disable XML-RPC or remove REST routes? No. Those interfaces may provide unrelated functionality. The plugin blocks unauthorized user creation without unnecessarily disabling entire subsystems. ### What data is logged? The plugin stores the request time, request channel, method, path, and user agent. IP, login, and email values are stored only as keyed SHA-256 hashes. ## Reviews There are no reviews for this plugin. ## Contributors & Developers “MyNew Registration Lockdown” is open source software. The following people have contributed to this plugin. Contributors * [ mynewtechnologies ](https://profiles.wordpress.org/mynewtechnologies/) [Translate “MyNew Registration Lockdown” into your language.](https://translate.wordpress.org/projects/wp-plugins/mynew-registration-lockdown) ### Interested in development? [Browse the code](https://plugins.trac.wordpress.org/browser/mynew-registration-lockdown/), check out the [SVN repository](https://plugins.svn.wordpress.org/mynew-registration-lockdown/), or subscribe to the [development log](https://plugins.trac.wordpress.org/log/mynew-registration-lockdown/) by [RSS](https://plugins.trac.wordpress.org/log/mynew-registration-lockdown/?limit=100&mode=stop_on_copy&format=rss). ## Changelog #### 1.0.2 * Replaced interpolated table identifiers with WordPress identifier placeholders. * Documented intentional cache bypasses for retention cleanup and uninstall operations. * Eliminated the remaining Plugin Check database warnings. #### 1.0.1 * Resolved Plugin Check findings for translation loading, global prefixes, translator comments, and request classification. * Added short-lived object caching for dashboard aggregates and recent events. * Improved database-query documentation and cache invalidation. * Moved cleanup scheduling to activation and expanded uninstall cleanup. * Added stronger PHPDoc and defensive result handling. #### 1.0.0 * Initial production release. * Central user-creation policy gate. * Administrator and WP-CLI authorization controls. * Privacy-aware database audit log. * Retention cleanup and threshold alerts. * Settings and recent-events dashboard. ## Meta * Version **1.0.2** * Last updated **12 hours ago** * Active installations **Fewer than 10** * WordPress version ** 6.5 or higher ** * Tested up to **7.0.4** * PHP version ** 7.4 or higher ** * Tags * [audit](https://wordpress.org/plugins/tags/audit/)[lockdown](https://wordpress.org/plugins/tags/lockdown/) [registration](https://wordpress.org/plugins/tags/registration/)[security](https://wordpress.org/plugins/tags/security/) [users](https://wordpress.org/plugins/tags/users/) * [Advanced View](https://wordpress.org/plugins/mynew-registration-lockdown/advanced/) ## Ratings No reviews have been submitted yet. [Your review](https://wordpress.org/support/plugin/mynew-registration-lockdown/reviews/#new-post) [See all reviews](https://wordpress.org/support/plugin/mynew-registration-lockdown/reviews/) ## Contributors * [ mynewtechnologies ](https://profiles.wordpress.org/mynewtechnologies/) ## Support Got something to say? Need help? [View support forum](https://wordpress.org/support/plugin/mynew-registration-lockdown/)