Modern role editor, multiple roles, content control and smart role rules for WordPress.
Alternatives to Keys Master
Plugins below are selected for functional relevance and current directory signals. Active-install counts do not affect this ranking.
Relevant replacements
WordPress plugins with similar use cases
Compatibility and update metadata provide context, not a quality guarantee. Review each plugin’s details for your site.
GhostGatev1.3.3
Invisible, intelligent protection for WordPress. GhostGate hides your login page, blocks bots, and turns your site into a ghost fortress.
Rabbit SEOv1.4.1
Connect WordPress to Rabbit SEO with an embedded workspace, Application Password connection, and REST API access.
IC Security Guardv1.3.0
Protect your site from brute force attacks with hidden login, login lockout, Email OTP 2FA, REST API & XML-RPC hardening, and real-time email alerts.
Block comment spam, disable XML-RPC, restrict the REST API, stop user enumeration and block IPs, without a heavy security suite.
REST API and MCP access control: disable REST API routes for guests, limit AI agents and application passwords, see which plugin opened each door.
Mandate App Securityv0.5.1
WordPress Application Passwords carry the full access of their user. Mandate App Security adds per-credential policies to limit what each one may do.
Manage access to the WordPress REST API by restricting public endpoints, enabling specific route allow-listing, and handling API key authentication.
BotCreds Agent Accessv2.3.2
Scoped, per-agent application passwords for AI agents, MCP clients, and automation tools.
Password Policy Managerv2.0.8
Enforce strong passwords with expiry, reset, score checks, inactive user lock, and user password management using Password Policy Manager.