Quick Start: protect your WordPress site in 4 steps
No plugin. No coding. You can be protected in about 15 minutes — here's exactly where to click.
Before you start
- Access to your domain account — where you bought your domain or manage its DNS
- Your server's IP address and port (your hosting provider has these)
- The Google Chrome browser, and about 15 minutes
4 simple steps
- 1
Step 1
Create your free account
Sign up at dash.w7sfw.com — free for 1 website, no credit card.
- aOpen dash.w7sfw.com, type your email, and click "Continue" (or use "Continue with Google / Apple / GitHub").
- bSet a password and finish signing in — you'll land on the "Overview" dashboard.
Tip: Use the email you check most often — confirmations are sent there.
- 2
Step 2
Add your website
Tell w7sfw which site to protect and where it's hosted.
- aOn the "Overview" page, click the orange "Add domain" button (top-right, also under "Quick actions").
- bStep "Domain": type your website address (e.g. yoursite.com), then click "Continue".
- cStep "Backend origin": enter your server's IP address and port — leave the scheme on HTTP and port 80 if you're unsure — then click "Continue".
Tip: The backend is where your WordPress actually lives; w7sfw forwards only safe traffic to it.
- 3
Step 3
Point your domain to w7sfw
This routes every visitor through w7sfw's shield. It's copy-and-paste inside your domain provider.
- aOn the "DNS verification" step, w7sfw shows the exact records: a CNAME pointing to your w7sfw target (e.g. xxxx.wp-protected.com) plus a TXT record. Use the copy buttons.
- bLog in to your domain provider (where you bought the domain), open its DNS settings, and add those records exactly as shown — no extra spaces.
- cBack in w7sfw, open the domain's "DNS Verification" tab and click "Check verification". When it turns "Verified", your site is protected.
Tip: A DNS change can take a few minutes up to 48 hours to spread across the internet.
- 4
Step 4
Secure your login with the extension
Add the Google-approved w7sfw extension for safe two-factor login — no code, no WordPress plugin.
- aClick "Get Extension" (top-right of the dashboard) and add the w7sfw extension to Chrome.
- bIt powers secure two-factor login (extension + password) for your WordPress admin.
- cOptional: open your domain's "WordPress Boost" tab and switch on "WordPress page cache" and "Image optimization" for extra speed.
Tip: Keep the extension installed — it handles safe login and real-time protection from your browser.
That's it — you're protected
From now on, w7sfw blocks hackers, bots, and brute-force attacks at the edge, before they ever reach WordPress. You don't need to do anything else — just open your dashboard any time to watch the threats being blocked.
Common questions
Do I need to install a WordPress plugin?
No. w7sfw works entirely outside WordPress, so there's no plugin to install and no code to change.
Where do I find my server's IP and port?
Your hosting provider lists them in your hosting dashboard, or you can ask their support. If you're unsure of the port, leave it on the default (HTTP, port 80).
Will my website go offline during setup?
No. w7sfw serves your site through its global network, so the switch is seamless and visitors keep browsing as normal.
Is it really free?
Yes. The Free plan protects 1 website with no credit card. You can upgrade later for more sites and advanced controls.
What if I get stuck?
Reach out from the Contact page — our team will walk you through the DNS step and confirm your protection is live.