Best whitelist plugins for WordPress
The most popular whitelist plugins for WordPress in November 2026, in WordPress.org’s own popular order, which follows active installs. CM E-Mail Blacklist leads with 700+ active installs, ahead of User Domain Whitelist (200+) and Gatekeeper (200+). All 17 plugins tagged “whitelist” are below, with figures from WordPress.org that update every day.
Installs aren’t everything: a recent release, a “Tested up to” that matches the current WordPress, and support threads that get resolved show a plugin is looked after. Open any plugin for its downloads, rank history and alternatives.
Research this niche or see all plugins.
Top 10 whitelist plugins
- 1.
CM E-Mail BlacklistThe most installed whitelist plugin, with 700+ active installs. Rated 4.5 from 8 reviews, updated 3 weeks ago.
- 2.User Domain Whitelist
200+ active installs. Rated 4.1 from 9 reviews, last updated 8 years ago.
- 3.Gatekeeper
200+ active installs. Only 3 reviews so far, last updated 9 years ago. Tested only up to WordPress 4.8.34.
- 4.
DMN (Security Centre)70+ active installs. No reviews yet, last updated 2 years ago. Tested only up to WordPress 6.5.14.
- 5.
IP Whitelist50+ active installs. No reviews yet, updated 4 weeks ago.
- 6.
BlackSwan40+ active installs. Only 1 review so far, updated 6 months ago. Tested only up to WordPress 6.8.12.
- 7.Blacklist & Whitelist Domains for Registration
30+ active installs. Only 2 reviews so far, last updated 4 years ago. Tested only up to WordPress 5.8.19.
- 8.
WP-Login and WP-Admin Whitelist10+ active installs. No reviews yet, last updated 6 years ago. Tested only up to WordPress 5.5.24.
- 9.Token Access
10+ active installs. Only 2 reviews so far, last updated 1 year ago. Tested only up to WordPress 6.6.11.
- 10.
exlink-safe-filterFewer than 10 active installs. No reviews yet, last updated 1 year ago. Tested only up to WordPress 6.8.12.
All 17 plugins tagged “whitelist”

CM E-Mail Blacklist
Down in the last 7 days:26#7,649by CreativeMindsSolutions26 days ago
Block unwanted email registrations on your site with this email blacklist plugin. Protect your site by preventing spam sign-ups.
- Installs
- 700+
- Rating
- 4.5(8)
- Downloads
- 23/day
User Domain Whitelist
Down in the last 7 days:99#11,209by Warren Harrison9 years ago
The User Domain Whitelist/Blacklist plugin limits user registration to only registrants with an email address from the domain white list provided by t …
- Installs
- 200+
- Rating
- 4.1(9)
- Downloads
- 11/day
Gatekeeper
Down in the last 7 days:38#12,107by jamiewilson9 years ago
Gatekeeper allows administrators to take a WordPress site offline while leaving it accessible to authorized users for maintenance, testing, etc.
- Installs
- 200+
- Rating
- 3.7(3)
- Downloads
- 11/day

DMN (Security Centre)
Down in the last 7 days:82#18,226by DMN Creative2 years ago
The DMN (Security Centre) plugin keeps your word fences whitelist IP addresses updated with DMN services on your WordPress site.
- Installs
- 70+
- Rating
- –
- Downloads
- 0/day

IP Whitelist
Down in the last 7 days:43#20,460by Awesoft28 days ago
Restrict the WordPress admin area and login page to trusted IP addresses and ranges (IPv4, IPv6 and CIDR).
- Installs
- 50+
- Rating
- –
- Downloads
- 0/day

BlackSwan
Up in the last 7 days:85#22,759by BlackSwanDev6 months ago
Block unwanted external HTTP requests in WordPress. Blacklist/whitelist management, resource blocking, and one-click pause.
- Installs
- 40+
- Rating
- 5.0(1)
- Downloads
- 0/day
Blacklist & Whitelist Domains for Registration
Down in the last 7 days:187#24,321by codicone4 years ago
The whitelist/blacklist plugin gives you a strong layer of security for your website because not only does the plugin limits unauthorized user access …
- Installs
- 30+
- Rating
- 3.0(2)
- Downloads
- 0/day

WP-Login and WP-Admin Whitelist
#29,043by SwiftNinjaPro6 years ago
A Plugin That only allows whitelisted IP's, or optionally whitelisted browsers, to access wp-login, or optionally wp-admin.
- Installs
- 10+
- Rating
- –
- Downloads
- 0/day
Token Access
Up in the last 7 days:1,493#32,976by Anthony1 year ago
Limit access to the site to those with a cookie token. Visitors without the cookie see a customisable "coming soon" style of page.
- Installs
- 10+
- Rating
- 5.0(2)
- Downloads
- 0/day

exlink-safe-filter
#49,049by C1G1 year ago
高级外部链接安全过滤插件,提供白名单、灰名单、黑名单分类管理及多种安全防护选项。
- Installs
- <10
- Rating
- –
- Downloads
- 0/day

Coming Soon Whitelist
Up in the last 7 days:10,623#52,863by villdev1 year ago
Allow specific pages to remain accessible while WooCommerce's "Coming Soon" mode is active site-wide.
- Installs
- <10
- Rating
- –
- Downloads
- 0/day
Allowed Routes
Down in the last 7 days:3,618#59,765by nerdismftw.com7 years ago
Define only allowed routes for your website. Permalinks will be overruled. Wildcard Support.
- Installs
- <10
- Rating
- –
- Downloads
- 0/day

ZDN Whitelist Outgoing Email
Down in the last 7 days:6,095#64,242by cuongquach3 months ago
Restrict outgoing emails to a whitelist and log every message. Non-whitelisted recipients are replaced with a fallback address. Ideal for dev/staging.
- Installs
- <10
- Rating
- –
- Downloads
- 0/day

WLock
#70,070by Bytes Vibe1 day ago
Lock your site so only approved plugins and themes can be installed, using an allowed list you control from the dashboard.
- Installs
- <10
- Rating
- –
- Downloads
- 63/day

LeBase64URL
Down in the last 7 days:537#72,355by 老蒋和他的小伙伴1 month ago
Convert post external links into signed redirect URLs (?goto=), with whitelist, nofollow, and intermediate page options.
- Installs
- <10
- Rating
- –
- Downloads
- 0/day

Dead-Letter
Down in the last 7 days:17,385#72,377by SoftCreatR6 years ago
Dead-Letter.Email for Wordpress. Dead simple disposable email check that just works.
- Installs
- <10
- Rating
- –
- Downloads
- 0/day