Protect Uploads

The uploads directory is where the files of the WordPress media library are stored. Unfortunately, this directory is not protected by default: anyone who wants to see your whole library may be able to list it by going to http://yourwebsite/wp-content/uploads. This plugin hides the contents by adding an index.php file to your uploads directory and its subfolders, or by adding an .htaccess file that returns a 403 error (Forbidden Access).

• Depending on your server, the .htaccess option may be unavailable (Nginx does not read .htaccess files).

For more information, visit protectuploads.com.

Features:

• Directory Protection: Stop visitors from browsing your uploads directory (index.php or .htaccess 403). New year and month folders are protected as files are uploaded to them.
• Password Protection: Secure individual media files with passwords. Multiple passwords can be set for each file with custom labels. On Apache and LiteSpeed, the file’s direct URL also asks for the password, and repeated wrong guesses are rate limited.
• Image Watermarking: Add text watermarks to your uploaded images with customizable position, opacity, and font size. An untouched copy of each original is kept.
• Right-Click Protection: Discourages casual copying: disables the right-click menu and dragging on images. Determined visitors can still save images.
• Access Logging: See when password-protected files were downloaded, with which password and from which IP address.
• Site Health Checks: Built-in protection status tests with actionable advice.

Need more protection? Protect Uploads Pro adds Secure Send (emailed files released by a one-time code), a Client Portal, file requests, expiring and single-use passwords, role-based access, hotlink protection, logo and bulk watermarks, and download analytics.

Available languages:

• English
• Français
• Español
• Italian (thanks to Marko97)