{"id":397151,"date":"2026-11-08T21:14:32","date_gmt":"2026-11-08T21:14:32","guid":{"rendered":"https:\/\/wordpress.org\/plugins\/installlock\/"},"modified":"2026-11-08T21:13:58","modified_gmt":"2026-11-08T21:13:58","slug":"installlock","status":"publish","type":"plugin","link":"https:\/\/wordpress.org\/plugins\/installlock\/","author":23593538,"comment_status":"closed","ping_status":"closed","template":"","meta":{"version":"1.0.154","stable_tag":"1.0.154","tested":"7.1.4","requires":"7.1","requires_php":"7.4","requires_plugins":null,"header_name":"InstallLock","header_author":"Granite Point Software","header_description":"Authenticator-controlled WordPress core and theme protection; Pro adds plugin protection.","assets_banners_color":"6d737a","last_updated":"2026-11-08 21:13:58","external_support_url":"","external_repository_url":"","donate_link":"","header_plugin_uri":"","header_author_uri":"","rating":0,"author_block_rating":0,"active_installs":0,"downloads":101,"num_ratings":0,"support_threads":0,"support_threads_resolved":0,"author_block_count":0,"sections":["description","installation","faq","changelog"],"tags":{"1.0.154":{"tag":"1.0.154","author":"granitepointsoftware","date":"2026-11-08 21:13:58","revision":3791524}},"upgrade_notice":[],"ratings":[],"assets_icons":{"icon-128x128.png":{"filename":"icon-128x128.png","revision":3791517,"resolution":"128x128","location":"assets","locale":"","width":128,"height":128},"icon-256x256.png":{"filename":"icon-256x256.png","revision":3791517,"resolution":"256x256","location":"assets","locale":"","width":256,"height":256}},"assets_banners":{"banner-1544x500.png":{"filename":"banner-1544x500.png","revision":3791517,"resolution":"1544x500","location":"assets","locale":"","width":1544,"height":500},"banner-772x250.png":{"filename":"banner-772x250.png","revision":3791517,"resolution":"772x250","location":"assets","locale":"","width":772,"height":250}},"assets_blueprints":{},"all_blocks":[],"tagged_versions":["1.0.154"],"block_files":[],"assets_screenshots":{"screenshot-1.png":{"filename":"screenshot-1.png","revision":3791517,"resolution":"1","location":"assets","locale":"","width":1773,"height":879}},"screenshots":{"1":"InstallLock Free protection dashboard showing WordPress core and theme protection enabled, with authenticator-controlled temporary unlocking."}},"plugin_section":[],"plugin_tags":[9212,15096,600,291557,2550],"plugin_category":[54],"plugin_contributors":[289506],"plugin_business_model":[],"class_list":["post-397151","plugin","type-plugin","status-publish","hentry","plugin_tags-authenticator","plugin_tags-core-updates","plugin_tags-security","plugin_tags-theme-security","plugin_tags-updates","plugin_category-security-and-spam-protection","plugin_contributors-granitepointsoftware","plugin_committers-granitepointsoftware"],"banners":{"banner":"https:\/\/ps.w.org\/installlock\/assets\/banner-772x250.png?rev=3791517","banner_2x":"https:\/\/ps.w.org\/installlock\/assets\/banner-1544x500.png?rev=3791517","banner_rtl":false,"banner_2x_rtl":false},"icons":{"svg":false,"icon":"https:\/\/ps.w.org\/installlock\/assets\/icon-128x128.png?rev=3791517","icon_2x":"https:\/\/ps.w.org\/installlock\/assets\/icon-256x256.png?rev=3791517","generated":false},"screenshots":[{"src":"https:\/\/ps.w.org\/installlock\/assets\/screenshot-1.png?rev=3791517","caption":"InstallLock Free protection dashboard showing WordPress core and theme protection enabled, with authenticator-controlled temporary unlocking."}],"raw_content":"<!--section=description-->\n<h4>Close a Gap in WordPress Security<\/h4>\n\n<p>Strong passwords, two-factor authentication, and security plugins are important. But not every WordPress software change begins with someone signing into your dashboard.<\/p>\n\n<p>Some services and integrations connected to WordPress can make changes remotely. If one of those connections is compromised, changes may be sent to your website without anyone ever using the normal WordPress login.<\/p>\n\n<p><strong>InstallLock Free closes that gap for WordPress core and themes.<\/strong><\/p>\n\n<p>InstallLock requires separate authorization from your authenticator app before WordPress core or theme changes can be made. A six-digit authenticator code is required to temporarily unlock those changes.<\/p>\n\n<p>With protection enabled, InstallLock Free prevents unauthorized:<\/p>\n\n<ul>\n<li>WordPress core updates<\/li>\n<li>Theme installation<\/li>\n<li>Theme activation and switching<\/li>\n<li>Theme updates<\/li>\n<li>Theme deletion<\/li>\n<\/ul>\n\n<p>This means that even if someone gains access through a WordPress administrator account or a connected service, WordPress core and theme changes remain locked until separately authorized.<\/p>\n\n<p>When you need to make an authorized change, enter your authenticator code to temporarily unlock protection. InstallLock automatically restores protection when the unlock period ends.<\/p>\n\n<h3>External Services and Privacy<\/h3>\n\n<p>InstallLock uses Freemius for commercial upgrades, checkout, licensing, and subscription management. The upgrade purchase interface loads Freemius Checkout from <code>https:\/\/checkout.freemius.com\/js\/v1\/<\/code>. Freemius services may receive installation\/site, license, purchaser, and transaction information as needed to provide these services.<\/p>\n\n<ul>\n<li>Freemius: https:\/\/freemius.com\/<\/li>\n<li>Freemius Privacy Policy: https:\/\/freemius.com\/privacy\/<\/li>\n<li>Freemius Terms of Service: https:\/\/freemius.com\/terms\/<\/li>\n<li>Granite Point Software Terms of Use: https:\/\/granitepointsoftware.com\/terms-of-use\/<\/li>\n<\/ul>\n\n<p>The authenticator QR code is generated locally and does not use an external QR-code service. Third-party copyright and license information is included in <code>THIRD-PARTY-LICENSES.txt<\/code>.<\/p>\n\n<h3>Security and Legal Notice<\/h3>\n\n<p>InstallLock provides an additional layer of WordPress security and does not replace backups, login security, malware protection, secure hosting, or other appropriate safeguards.<\/p>\n\n<p>InstallLock does not guarantee protection against hacking, malware, vulnerabilities, unauthorized access, data breaches, website damage, or every possible method of modifying a WordPress website. Direct server, filesystem, or database access and other methods outside the WordPress processes InstallLock controls may bypass its protection.<\/p>\n\n<p>Granite Point Software Terms of Use:\nhttps:\/\/granitepointsoftware.com\/terms-of-use\/<\/p>\n\n<!--section=installation-->\n<ol>\n<li>Install and activate InstallLock.<\/li>\n<li>Open InstallLock &gt; Protection.<\/li>\n<li>Connect your authenticator app.<\/li>\n<li>Save your five single-use recovery codes in a secure location.<\/li>\n<li>Enable Protection.<\/li>\n<\/ol>\n\n<p>When you need to make a WordPress core or theme change, enter your six-digit authenticator code to temporarily unlock protection.<\/p>\n\n<!--section=faq-->\n<dl>\n<dt id=\"what%20does%20installlock%20free%20protect%3F\"><h3>What does InstallLock Free protect?<\/h3><\/dt>\n<dd><p>InstallLock Free prevents unauthorized WordPress core updates and theme installation, activation, switching, updates, and deletion while protection is enabled.<\/p><\/dd>\n<dt id=\"why%20use%20installlock%20if%20i%20already%20use%20a%20wordpress%20security%20plugin%3F\"><h3>Why use InstallLock if I already use a WordPress security plugin?<\/h3><\/dt>\n<dd><p>Firewalls, malware scanners, strong passwords, and two-factor authentication are all important parts of WordPress security. But they do not eliminate every path an attacker may use to make changes to your website.<\/p>\n\n<p>Some connected services and integrations can make changes to WordPress without anyone signing in through the normal WordPress login.<\/p>\n\n<p><strong>InstallLock closes that gap by requiring separate authenticator authorization before WordPress core or theme changes can be made.<\/strong><\/p>\n\n<p>It is designed to work alongside your existing security tools by adding another layer of protection specifically around WordPress software changes.<\/p><\/dd>\n<dt id=\"does%20installlock%20free%20protect%20plugins%3F\"><h3>Does InstallLock Free protect plugins?<\/h3><\/dt>\n<dd><p>No. InstallLock Free protects WordPress core and themes.<\/p>\n\n<p>InstallLock Pro adds protection for plugin installation, activation, deactivation, updates, and deletion.<\/p><\/dd>\n<dt id=\"can%20automatic%20updates%20still%20run%3F\"><h3>Can automatic updates still run?<\/h3><\/dt>\n<dd><p>Yes. InstallLock can allow approved WordPress core minor updates and selected theme updates to run automatically while protection remains enabled.<\/p><\/dd>\n<dt id=\"what%20happens%20if%20i%20lose%20access%20to%20my%20authenticator%3F\"><h3>What happens if I lose access to my authenticator?<\/h3><\/dt>\n<dd><p>Use one of your unused recovery codes to set up a replacement authenticator.<\/p><\/dd>\n<dt id=\"does%20installlock%20support%20wordpress%20multisite%3F\"><h3>Does InstallLock support WordPress Multisite?<\/h3><\/dt>\n<dd><p>No.<\/p><\/dd>\n\n<\/dl>\n\n<!--section=changelog-->\n<h4>1.0.154<\/h4>\n\n<ul>\n<li>Initial WordPress.org release.<\/li>\n<\/ul>","raw_excerpt":"Protect WordPress core and themes from unauthorized changes with a separate authenticator code. Pro adds plugin protection.","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin\/397151","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin"}],"about":[{"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/types\/plugin"}],"replies":[{"embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/comments?post=397151"}],"author":[{"embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wporg\/v1\/users\/granitepointsoftware"}],"wp:attachment":[{"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/media?parent=397151"}],"wp:term":[{"taxonomy":"plugin_section","embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_section?post=397151"},{"taxonomy":"plugin_tags","embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_tags?post=397151"},{"taxonomy":"plugin_category","embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_category?post=397151"},{"taxonomy":"plugin_contributors","embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_contributors?post=397151"},{"taxonomy":"plugin_business_model","embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_business_model?post=397151"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}