You decide what changes on this site.
Adminkeep is a free WordPress plugin that locks down the things that change your site behind your back — and gives you the everyday content tools that should have been built in. Quiet, reversible, and out of your way.
free · GPL · WordPress 6.9+ · on wordpress.org
Five locks. One promise.
Nothing appears on your site without you: no new comments, no new plugins, no new users, no remote write API, no code edits.
Disable Comments
Comments are hidden, never deleted. Direct bot posts to
wp-comments-post.php are rejected too — the part most plugins skip.
Installation Lockdown
No new plugins or themes, no uploads — for anyone. Updates keep working, so
security releases still arrive. Uses capabilities, not
DISALLOW_FILE_MODS, so you're never locked out of your own site.
Registration Lockdown
Stop new user registrations, with a guard against sneaky administrator creation. Safe defaults: WooCommerce checkout and membership plugins keep working.
Disable XML-RPC
Closes the remote write API most sites never use and every bot probes.
Disable File Editing
No code edits from the dashboard.
The content tools WordPress forgot.
content toolsDuplicate
Copy any post, page or custom post type in one click.
Live Draft
Rewrite a published page without taking it offline; merge back into the same URL when ready.
Reorder
Drag-and-drop order for posts, pages and custom post types on a dedicated Sort screen — applied to your front-end queries correctly.
Replace Media
Swap a file and keep its URL. Nothing breaks, nowhere.
Keep URL
Rename or move a page and its old address keeps working — child pages included.
One screen. No reloads.
Everything lives on a single settings screen built to be fast and then forgotten.
-
Type to find any setting. The nav filters as you type — no hunting through tabs.
-
Switches save themselves. Flip one and it's saved over AJAX — a quiet toast, never a page reload.
-
Sub-settings appear when they matter. One panel per feature; options show up only once a lock is engaged.
-
Its assets load on its screen only. The rest of your admin never pays for it.
Questions, answered.
Will this delete my comments?
Not unless you ask it to. Turning Disable Comments on only hides them — a test asserts the comment rows are untouched after a full enable-and-disable cycle.
There is a separate cleanup button that does delete, and it deletes spam and trashed comments only unless you tick the box to include approved ones. It shows the exact count, asks you to confirm, and cannot be undone.
Can I turn it back off?
Yes, instantly. Every feature works through WordPress filters, so nothing was written to your database to undo. Disable the feature and your site is exactly as it was.
Is Adminkeep on wordpress.org?
Yes. In your WordPress admin go to Plugins → Add New Plugin, search for "Adminkeep" and install it from there. Updates arrive through the normal WordPress Updates screen.
Adminkeep was called WP Pro Admin before it joined the directory. It is the same plugin under a new name.