Hides the list of user accounts that the WordPress REST API shows to visitors who are not logged in, which helps prevent user enumeration.
Alternatives to FormCourier User Enumeration Protection
Plugins below are selected for functional relevance and current directory signals. Active-install counts do not affect this ranking.
Relevant replacements
WordPress plugins with similar use cases
Compatibility and update metadata provide context, not a quality guarantee. Review each plugin’s details for your site.
Modern role editor, multiple roles, content control and smart role rules for WordPress.
Khushal Login Path Guardv2.4.1
Change your WordPress login URL and protect your site from brute-force attacks. Blocks default login paths with 404 errors.
EnumGuardv1.0.0
Stops WordPress user enumeration through author URLs, REST, login errors, XML-RPC, sitemaps, and oEmbed.
Disable the REST API for logged-out visitors without breaking forms. Allowlist routes, stop user enumeration, import from Disable REST API.
ETBS Account Guardv1.3.0
Protects the accounts that manage your site. Hides the login names of your users from visitors who are not logged in.
Add a layer of security and prevent your login name from being shown in the author archive's URL.
Checks your site the way an anonymous visitor sees it, verifies that your WordPress hardening actually works, and lists external scripts it loads.
Cerrojo Security Toolkitv0.3.0
Review security diagnostics and apply reversible WordPress hardening controls with explicit compatibility guidance.
IC Security Guardv1.3.0
Protect your site from brute force attacks with hidden login, login lockout, Email OTP 2FA, REST API & XML-RPC hardening, and real-time email alerts.