How to Hide Password Protected Posts From WordPress Loop

We’ve heard from several readers who were surprised to learn that WordPress password protection isn’t as private as it seems.

Sure, the content is locked behind a password. But the post titles still show up on your homepage, category pages, and search results.

It’s like locking a diary but leaving the chapter names out in the open. 😱

That’s a problem if you run a membership site or share sensitive business info. Not only does it look messy, but it also hints at what’s hidden behind the scenes. Some curious visitors might even try to access the content just because they know it’s there.

Fortunately, there are ways you can hide these posts completely from public view.

In this guide, I’ll show you the best ways to keep your private content truly private. We’ve tested several methods to remove password-protected posts from WordPress loops – without breaking your site or locking out the people who need access. 🙌

Why Hide Password-Protected Posts in WordPress?

By default, WordPress displays a password-protected post with its title and the ‘protected’ prefix. Users must enter the password to view the post’s content.

This post prefix is visible on the homepage, in archives, in the recent posts widgets, and in other areas.

If you want to keep some content completely private, then this is not ideal for several reasons.

Users who don’t have passwords can still see the post title, which might be a problem in itself. They can also try to get access to the content with a brute-force attack. As we all know, passwords can be cracked.

With that in mind, we’ll show you how to hide your password-protected posts from the WordPress loop so that other users cannot see them. Here’s a quick look at all the steps you’ll take:

Let’s jump right in!

Step 1. Install a Code Snippet Plugin

To make specific changes to your site, some WordPress experts may tell you to add a custom code snippet to your theme’s functions.php file.

We don’t recommend this method as it’s not very beginner-friendly, and you risk breaking your website. Instead, you can use a code snippet plugin, like WPCode, to do the job.

WPCode is the best code snippet plugin on the market. Some of our partner brands use it to add and manage custom code snippets on their websites, and they’ve loved it.

You can find more information about the plugin in our complete WPCode review.

The best part is that you can use the free version of WPCode to add a custom code snippet to your WordPress site.

So, first, go ahead and install and activate the free WPCode plugin. If you need help with the process, then check out our guide on how to install a WordPress plugin.

Step 2. Hide Password-Protected Posts in WordPress

Once you’ve activated the plugin, navigate to Code Snippet » + Add Snippet from your WordPress admin area.

Then, simply click on the ‘Add Custom Snippet’ button within the ‘Add Your Custom Code (New Snippet)’ section.

On the next screen, you’ll need to choose the code type for your custom snippet.

For this tutorial, we’ll need to use the ‘PHP Snippet’ option.

You’ll then be redirected to the custom code snippet editor.

From here, you’ll want to name the custom snippet first. We recommend using a clear name, like ‘Hide Password-Protected Posts.’ This will make organizing your custom code snippets easier down the line.

Next up, simply add the following code to the ‘Code Preview’ box:

function wpb_password_post_filter( $where = '' ) {
    if (!is_single() && !is_admin()) {
        $where .= " AND post_password = ''";
    }
    return $where;
}
add_filter( 'posts_where', 'wpb_password_post_filter' );

This code modifies the query sent to WordPress by using the posts_where filter. It asks WordPress to fetch all posts that do not have a password.

Here’s what it looks like in the editor:

At this point, you’ll need to toggle the ‘Inactive’ switch to ‘Active.’

Then, go ahead and click ‘Save Snippet.’

By default, WPCode will auto-apply the code snippet everywhere on your WordPress site.

Now, if you visit your website, you will see that password-protected posts are no longer visible on the homepage, archives, or in widgets like recent posts.

Keep in mind that you can still visit the post by accessing it through a direct URL.

Bonus Tip: Allowing Access to Protected Posts for Specific Users

The example above hides password-protected posts from all users. But what if you ran a multi-author WordPress site and wanted protected posts to be viewable by users with the capability to edit private posts?

Simply modify the above code with another conditional tag like this:

function wpb_password_post_filter( $where = '' ) {
   if (!is_single() && !current_user_can('edit_private_posts') && !is_admin()) {
        $where .= " AND post_password = ''";
    }
    return $where;
}
add_filter( 'posts_where', 'wpb_password_post_filter' );

In this example, we check if a user cannot edit the password-protected posts and only show the posts that don’t have passwords.

By doing so, all of the WordPress users with administrator and editor roles will see the password-protected posts on the front end of your site.

FAQs About Hiding Password-Protected Posts in WordPress

Wondering what happens when you hide password-protected posts? Here are some common questions we get from readers, along with clear answers to help you decide if this approach is right for your site.

Why would I want to hide password-protected posts in WordPress?

Hiding password-protected posts helps keep your site looking clean and professional. It also prevents unauthorized visitors from seeing that private content exists, reducing the risk of access attempts and keeping your site more secure.

Can I hide password-protected posts without using code?

Yes! While WordPress offers basic privacy settings, using a plugin like WPCode makes the process easier and more reliable, especially if you’re not comfortable editing code. It gives you more control without needing technical skills.

Will hiding these posts affect visibility for authorized users?

Not at all. Authorized users, such as logged-in members or users with specific roles, can still access the posts directly. As long as they have the correct password or permissions.

Is WPCode the only plugin that can help with this?

WPCode is one of the easiest and most dependable options, which is why we recommend it. That said, there are other plugins available. Just be sure to choose one that’s well-maintained and compatible with your theme and other tools.

Will hiding password-protected posts affect my site’s SEO?

Hiding these posts from your homepage or archives won’t hurt your SEO. In fact, it can improve it by keeping your public-facing content more focused and relevant for search engines.

We hope this article helped you hide password-protected posts from the WordPress loop on your site. You may also want to see our tutorial on how to change the prefix of private and protected posts in WordPress and our guide on different ways to protect content in WordPress.

If you liked this article, then please subscribe to our YouTube Channel for WordPress video tutorials. You can also find us on Twitter and Facebook.