Hi,
I’ve set up Basic Authentication on my client sites that requires a username and password to protect the wp-login.php file.
When I log in to the sites from the mainWP dashboard, I’m not prompted for these credentials and am immediately taken to the dashboard of my sites.
But when I log in directly to the sites, I am prompted for a username and password.
How is this possible? I’m a bit concerned about whether my client sites are secure enough.
Thanks and best regards,
Tino
MainWP doesn’t use the wp-login.php page to connect to a child site, but a secure connection that needs the MainWP Child plugin.
You can find more about this in the documention:
Hey @tbaab
What @josklever said is correct. MainWP Dashboard doesn’t use the standard login process to log into a child site. Instead it uses asymmetric cryptography that secures the connection between your Dashboard and child sites.
If you end up using Basic Auth on any other pages of your Child Sites, MainWP can still work. You will just have to enter the HTTP Basic Auth credentials on the Child Site’s Settings page.
