Dashboard Lock Down

The MainWP Clean and Lock Extension allows you to set 2 different security rules on your MainWP Dashboard site.

Limit Access to certain IP addresses
Set HTTP Basic Authentication to /wp-admin/ and/or wp-login.php pages

You can use one of the two security measures or both at the same time.

Limit Access to certain IP addresses

Login in to your MainWP Dashboard
Go to the MainWP > Extensions > Clean and Lock extension page
Locate the Dashboard LockDown option box
Locate the Allow Login from option
In the provided text area, enter one or multiple IP addresses (each in a new line)
Click the Save Settings button

After setting this security measure, the /wp-login.php page will be restricted to all visitors except the ones with the whitelisted IP address.

Lock the /wp-admin/ pages

Login in to your MainWP Dashboard
Go to the MainWP > Extensions > Clean and Lock extension page
Locate the Dashboard LockDown option box
Locate the WP Admin Lock option
In the provided fields, enter wanted Username and Password
Click the Save Settings button

After enabling the WP Admin lock, before accessing any WP Admin page (../wp-admin/..) HTTP Basic Authentication will be required.

Lock the /wp-login.php page

Login in to your MainWP Dashboard
Go to the MainWP > Extensions > Clean and Lock extension page
Locate the Dashboard Lock Down option box
Locate the WP-Login.php Lock option
In the provided fields, enter wanted Username and Password
Click the Save Settings button

After enabling the WP Login lock, before accessing any the Login page (../wp-login.php), HTTP Basic Authentication will be required.

Important Notes

If you are having issues with setting WP Admin and WP Login locks, please check this document. Some hosts don't allow HTTP basic authentication, and this can create an infinite redirection loop. This can make accessing your MainWP Dashboard site hard. In case you experience this issue, please remove WP Admin and WP Login Locks. If this doesn't help, it is highly recommended to contact your host support. In case you have lost your HTTP Basic Auth credentials, remove WP Admin and WP Login Locks.

Source Article: https://kb.mainwp.com/docs/mainwp-dashboard-lock-down/