Disable User Registration In WordPress¶
Use this page when a WordPress site does not need public account registration or is receiving spam user signups. Confirm the site is not using memberships, forums, courses, or customer accounts before disabling registration.
Before You Disable Registration¶
Confirm whether the site uses public accounts for anything important:
- WooCommerce customer accounts.
- Membership or course access.
- Forums or community features.
- Client portals.
- Contributor or author signups.
If one of those features is active, review the plugin settings before disabling registration globally.
Disable Registration¶
- Sign in to WordPress as an administrator.
- Open
Settings>General. - Find the
Membershipsetting. - Uncheck
Anyone can register. - Click
Save Changes.
New visitors will no longer be able to create WordPress accounts through the standard registration flow.
Review Existing Users¶
After disabling registration, check whether spam users already exist:
- Open
Users>All Users. - Review unfamiliar users, especially administrator or editor accounts.
- Delete spam users that do not own legitimate content.
- Change administrator passwords if anything looks suspicious.
Be careful deleting users with content
WordPress may ask whether to delete or reassign a user's posts. Reassign legitimate content before removing the user.
Related Guides¶
-
WordPress security
-
Two-factor authentication