Members Only Area in WordPress Without a Membership Plugin

A members only area in WordPress is a group of pages that only people with an account can open, while everyone else is sent to the login page or reads a short message. For clients, partners or staff you usually do not need a full membership plugin: create an account for each person, put the reserved pages behind a login rule and give members an obvious way to log in.

Below you will find when a membership plugin is worth it and when it is not, what WordPress can do on its own, and a complete setup you can build in an afternoon with free tools.

Do you need a membership plugin?

Membership plugins are built to sell access. They handle payment gateways, membership levels, renewals, expiry dates, sign-up forms and member emails. If you charge for content, that is exactly what you want.

Many businesses need something smaller: a reserved area for people they already know. A manufacturer with technical sheets for resellers, an association with minutes for its members, a studio with project pages for clients, a company with manuals for staff. Nobody pays online, you decide who gets an account, and the area has a handful of pages.

If you are in the left column, keep reading.

Can WordPress do it on its own?

Partly. Core WordPress has two ways to hide a page, set in the page's visibility options:

• Private: only users allowed to read private content can open it, and by default those are Administrators and Editors (see Roles and Capabilities). Giving your clients the Editor role so they can read it would also let them change your site, so it is not a real option.
• Password protected: visitors see the title and a password box. It is quick, but everyone shares one password, it is remembered by the browser for 10 days, and you cannot remove one person without changing the password for all. It is fine for one page shown briefly, not for an area people come back to.

What WordPress does well is accounts. Each member can have their own login, and you can switch it off for one person at any time. So the practical recipe is: WordPress accounts for the people, a plugin rule for the pages.

Plan the area before you build it

Ten minutes of planning saves an hour of fixing. Answer three questions:

1. Who gets in? One group (all clients) or several (resellers and distributors, staff and clients). One group needs only login status. Several groups need a role each.
2. What is inside? List the pages. A tidy structure is one parent page, for example Members or Customer area, with the reserved pages as its children, so the addresses read /members/manuals/ and so on.
3. How do people get an account? Either you create each account, or visitors register themselves. For a business area, creating accounts yourself is usually better: nobody gets in by accident.

If visitors should register themselves, WordPress has a switch for that in Settings > General: tick Anyone can register and set New User Default Role to Subscriber. Leave it unticked if you add members yourself.

Build a members only area step by step

This setup uses the free version of Content Gate, which applies 2 rules by login status with no time limit. That is enough for a members area with one group.

1. Create the member accounts

1. Go to Users > Add User.
2. Fill in username and email, and choose Subscriber in Role. A Subscriber can only manage their own profile in the admin area.
3. Tick Send User Notification so the person receives an email about their account, then click Add User.

2. Create the pages and note their IDs

Publish the reserved pages as normal public pages. Then open each one for editing and note the number after post= in the address bar: that is its ID.

3. Write the rule

1. Go to Content Gate > Rules and click Write the first rule.
2. 1 Name it: for example Members area.
3. 2 Who can see it: Anyone with an account.
4. 3 What it covers: in Single items, by ID, type the IDs separated by commas, for example 12, 48, 105. Include the parent page.
5. 4 What everyone else gets: choose a redirect To the login page, and back here afterwards. After logging in, the member lands on the page they wanted.
6. Click Save rule.

If you prefer visitors to understand what they are missing, choose A message where the content was instead and write a line with a link to log in or to ask for an account. Both choices are described in Choose what blocked visitors see.

4. Give members a way to log in

Members should not have to guess the login address. In a block theme, add the Login/out block to the header: it shows a login link to visitors and a logout link to members. You can also add the members area to the menu so members find it after logging in.

To show a paragraph only to people who are not logged in, such as "Ask for an account", use the free shortcode: [content_gate who="logged_out"]Ask us for an account.[/content_gate]. See Restrict part of a page with the shortcode.

5. Test it as a member and as a visitor

Administrators always see everything, so check from a private browser window: first without logging in, then logged in with a test Subscriber account.

Going further: groups, lists and a closed site

• Several groups. Resellers and distributors, or clients and staff, need a role each and rules for Only certain roles, which is a Pro feature. The steps are in how to restrict content by user role.
• Posts, not just pages. With Pro, a rule can cover a whole category, so every post you file under Members is reserved, including future ones.
• Titles in lists and search. Blocking a page does not remove its title from blog lists or the site search. Pro can keep reserved content out of those places and out of the REST API.
• The whole site. For an intranet, one rule with The whole site puts everything behind a login, while the login page stays reachable.

With the 7-day trial you can test all of this on your real site without a card. At the end of the trial your rules stay saved, and only the first 2 keep working until a licence is active.

Files and other limits to know

A members area protects pages. It does not protect files uploaded to the media library: each PDF or image keeps a direct address that works for anyone who has the link, and no plugin can close it from inside WordPress. If your area is mostly documents, keep them in Dropbox or Google Drive and show them through a portal, as explained in how to share files with clients securely.

Page caching is usually not an issue, because caching plugins serve stored copies to visitors who are not logged in and leave members alone. If a page still shows its content to logged out visitors after you saved the rule, clear the cache and check again in a private window.

Finally, give each person their own account. A shared login cannot be switched off for one person and tells you nothing about who used it.

Which option fits you

For one page shown for a few days, a password-protected page is enough. If you sell access, with levels and recurring payments, choose a membership plugin. For a members only area in WordPress for clients, partners or staff you already know, WordPress accounts plus a login rule do the job with far less setup, and the free version of Content Gate covers one group with no time limit. Add roles, categories and hidden titles only when your area grows.