Code Lock
A locked site refuses new code and new administrators by any route; content stays editable.
What a locked site refuses
Installing or uploading plugins and themes, editing or running code, stored code snippets, creating or deleting administrators and new application passwords: from wp-admin, the AI or anywhere else.
Posts, pages, builder edits, media, comments and non-administrator users stay open, and installed plugins can still be updated.
Lock and unlock
- 1Open Dashboard → Code Lock (or the site's page) and press Lock. You confirm with your password.
- 2To work on code, unlock for 15 or 60 minutes with your password; it locks again by itself. Lock again now ends it early.
Lost access to the dashboard
Add define( 'WPMCP_LOCK_OFF', true ); to the site's wp-config.php. Only that file counts, so an attacker who can only reach the database cannot use it.
Still stuck? Ask Commander in your dashboard and press Talk to a person.
Related