Search Over 30,000 FREE Plugins from the Official WordPress Plugin Directory Repository

Prevent Direct Access

A simple way to prevent search engines and the public from indexing and accessing your files without user authentication.

Prevent Direct Access is simple way to prevent search engines and the public from indexing and accessing your files without complex user authentication. This plugin has the following features:

Protect up to unlimited Uploaded Files

Prevent Direct Access is designed to protect your files such as images, pdf or videos that you upload via WordPress Media or Post. Once protected, they cannot be accessed directly on the server. An error message will appear if others attempt to read and download these files.

Generate Private URL

Once a file is protected, the plugin will automatically generate a private URL containing random string for the admin to access the file. This private URL is the ONLY way to access the protected file. Users can copy that private URL to clipboard and subsequently paste it on their browsers or email by clicking on the “Copy URL” button.

If you need help with the plugin or you want to report a bug please contact us at or drop us an email at

Premium Version

The premium version helps you track the number of clicks (hits) on your private links; allow you to edit the private links and many other premium features. Please visit our Premium Plugin page at

Author buildwps
Contributors buildwps
Tags 404, files, google, images, pdf, photos, pictures, plugin, protect, redirect
  1. prevent-direct-access screenshot 1

    Once you have installed the plugin, please click “Activate”

  2. prevent-direct-access screenshot 2

    Go to media to protect your files

  3. prevent-direct-access screenshot 3

    Choose “List View” mode for the plugin’s options to show

  4. prevent-direct-access screenshot 4

    You will notice there’s an extra column called “ Prevent Direct Access” generated by our plugin. Simply check the box next to the file that you want to protect to prevent others from accessing to it.

  5. prevent-direct-access screenshot 5

    Once you check the box, the plugin will automatically generate a private URL. Click “Copy URL” to copy it to clipboard.

  6. prevent-direct-access screenshot 6

    If you want to unprotect your files, simply uncheck the box again.

  7. prevent-direct-access screenshot 7

    As the free version of this plugin offers protection to up to 3 files only, an error message will be displayed when you try to protect more than 3 files. Contact us at for the premium version, which offer unlimited protected files and other premium features.

There are 2 easy ways to install our plugin:

1.The standard way

  • In your Admin, go to menu Plugins > Add

  • Search for "Prevent Direct Access"

  • Click to install

  • Activate the plugin

  • Protect your files under Media list view

2.The nerdy way

  • Download the plugin (.zip file) on the right column of this page

  • In your Admin, go to menu Plugins > Add

  • Select the tab "Upload"

  • Upload the .zip file you just downloaded

  • Activate the plugin

  • Protect your files under Media list view


  • Fix .htaccess rules to recognize the special characters

  • Find in wp_postmeta in case of cropped image in wordpress


  • Fix open graph issue


  • Support nginx server

Why nothing happens after I activate the plugin?

First, the plugin only supports Apache HTTP Server ("httpd") at the moment. If you’re not using it, you may consider switching to httpd as it has been the most popular web server on the Internet since April 1996. Second, the plugin also needs to flush some mod_rewrite rules to your website’s .htaccess file to prevents direct access to your files on the server. In order for the plugin to work properly, you must either make the .htaccess file (located on your website root folder) writable or manually update our mod_rewrite rules to your htaccess.

Why do I see a warning message on top after activating the plugin?

It’s likely that your .htaccess is not writable. If that’s the case, you must either make it writable or manually update your .htaccess with the mod_rewrite rules found under Settings > Permalinks. Please refer to for more information.

Version 2.1.1

Requires WordPress version: 4.0 or higher

Compatible up to: 4.7.2

Last Updated 09 Jan 2017

Date Added: 27 Nov 2015

Plugin Homepage


4.5 stars
11 ratings


Not Enough Data

Works: 0
Broken: 0