You decide what changes on this site.
The free WordPress admin plugin for email logs, custom CSS and hardening
Adminkeep logs every email your site sends, keeps your custom CSS through theme changes, and adds the switches WordPress hides. Every feature is off until you switch it on.
free · GPL · WordPress 6.9+ · on wordpress.org
See every email WordPress sends, and which ones failed
email logEmail Log, its own item in the admin menu, lists every email your site sends, newest first, marked Sent, Failed or Unconfirmed. A failed email keeps the error that came back, so a missing password reset has an answer.
-
Works with or without SMTP: it records what WordPress was asked to send and changes nothing about how it is sent.
-
Preview any email the way it went out. Sign-in and password-reset links are removed before anything is stored.
-
Keep entries for a week, or for up to two years.
Custom CSS that survives a theme switch
custom cssWordPress keeps Additional CSS with the theme, so it stays behind when you switch. Adminkeep's Custom CSS belongs to the site instead: it prints on whichever theme is active, and you edit it under Appearance → Custom CSS in WordPress's own code editor.
Or edit it on the site itself: Edit CSS in the admin bar opens a code panel beside the page, and the page restyles as you type. Nothing changes for visitors until you press Save.
Your theme's Additional CSS is left alone. Use both if you like; Adminkeep's CSS prints second, so it wins when the two disagree.
Header & Footer Code
Harden WordPress without a security suite
Seven switches for the doors most sites leave open: comments, plugin installs, sign-ups, XML-RPC, the code editor, the usernames WordPress publishes and the login itself, which can ask for an emailed code after the password. Each one is a setting, not a line in wp-config.php, so you can switch it back off from the same screen. They close common routes; they are not a firewall or a malware scanner.
Disable comments
wp-comments-post.php, or through the REST API, are refused too.
Block plugin & theme installs
In the plugin: Installation Lockdown
Disable user registration
In the plugin: Registration Lockdown
Disable XML-RPC
xmlrpc.php, including
pingback.ping and system.multicall, and stops the site
advertising the API.
Disable the theme & plugin file editor
In the plugin: Disable File Editing
DISALLOW_FILE_EDIT, but switchable from the admin. On multisite it
reaches super admins too.
Hide your usernames from visitors
In the plugin: Username Privacy
?author=1, the REST users list, sitemaps and embed previews
stop naming your accounts to visitors. Anyone logged in sees everything as before.
Two-factor login by email
In the plugin: Two-Factor Login
Duplicate, rewrite and republish, reorder, replace media
content toolsDuplicate a post or page
In the plugin: Duplicate
Edit a published page without unpublishing
In the plugin: Live Draft
Reorder posts and pages
In the plugin: Order
Replace an image and keep its URL
In the plugin: Replace Media
Change a page's slug without breaking links
In the plugin: Keep URL
Also included
SMTP
WordPress's own emails, in a clean layout
In the plugin: Nice Default Emails
A contact form, without a form plugin
In the plugin: Contact Form
User registration date
One plugin in place of several small ones
An email log, a custom CSS box, a spot for tracking code, a comments switch, an SMTP mailer, a contact form, a duplicate button: jobs that often mean a plugin each. Adminkeep puts its 19 features on one settings screen, built to be fast and then forgotten.
-
Type to find any setting. The feature list narrows as you type, so there is no hunting through tabs.
-
Switches save themselves. Flip one and it is saved on the spot, with a quiet confirmation instead of a page reload.
-
Off until you switch it on. Switch a feature off again and the site behaves as it did before.
-
Hide what you don't use. One option trims the sidebar to the features you have switched on.
Questions, answered.
Will this delete my comments?
Not unless you ask it to. Turning Disable Comments on only hides them — a test asserts the comment rows are untouched after a full enable-and-disable cycle.
There is a separate cleanup button that does delete, and it deletes spam and trashed comments only unless you tick the box to include approved ones. It shows the exact count, asks you to confirm, and cannot be undone.
Can I turn it back off?
Yes, instantly. Switch a feature off and your site behaves exactly as it did before. Its saved settings stay, and so does anything Email Log has already logged, so switching it back on picks up where you left off.
What happens to my settings if I delete Adminkeep?
They stay, unless you ask otherwise. Since 2.2.0, deleting the plugin keeps its settings, your Custom CSS and Header & Footer Code, the SMTP and Contact Form settings, the email log, the Keep URL redirects, and the devices Two-Factor Login remembers with its recovery link, so installing it again brings everything back. Deactivating never deletes anything.
To remove all of it when the plugin is deleted, switch on "Delete all Adminkeep data when the plugin is deleted" under Settings → Adminkeep → Plugin settings before you delete it, or run wp adminkeep setting set delete_data=true.
Is Adminkeep on wordpress.org?
Yes. In your WordPress admin go to Plugins → Add New Plugin, search for "Adminkeep" and install it from there. Updates arrive through the normal WordPress Updates screen.
Adminkeep was called WP Pro Admin before it joined the directory. It is the same plugin under a new name.
