Security
The Security page brings together PIN protection, sitemap configuration, integrity monitoring, email alerts, and Cloudflare integration.
SEO Lock™ — PIN Protection
A 4-digit (or longer) PIN gates access to critical settings: changing the sitemap URL, editing robots.txt, and other sensitive operations. The PIN is stored as a bcrypt hash, not plain text.
But why?
Recent hacks has granted unathorized users admin access to WordPress, where the user had been able to alter sitemap, robots.txt to flood Google Search Console with thousands of fake pages. This protection layer will make it just a little harder to altert these if the hacker lack the pin code.
Important: This hack that this function creates a hurdle for, can also get access to servers. If they alter robots.txt or sitemap files you will be alerted by email (pro function) – But this plugin will not stop the attack.
The idea here is to make it just a bit harder to ruin your lovely website and its ranking.
Active pin session is 15 minutes
Integrity Monitoring
THiS SEO stores a SHA-256 hash of your critical settings (sitemap config, verification codes, global head code, global schema). If these change outside the plugin interface, an admin notice appears.
Click “Accept current state as baseline” to clear the alert after a legitimate change. Click “Dismiss for 24h” to suppress temporarily.
Sitemap Integrity Monitor
A daily background scan checks for sitemap files on your server that were not created by THiS SEO. Foreign sitemap files trigger an admin notice with the file path and an option to investigate.
robots.txt Change Detection
If your robots.txt file is modified outside the plugin, an admin notice appears with an option to review and restore
E-mail alerts
Configure one or more recipient email addresses to receive HTML email notifications when security events are detected. Alerts are throttled to a maximum of one per event type per 24 hours.
Disclaimer
THiS SEO plugin is not a security plugin. We think security by design, and will try to create a layer of security that might prevent damage to your SEO rankings. However we can not guarantee that it will stop hacks, and this is a “we will do our part” to protect your rankings as best we can. It is not and will not be a replacement of a security plugin and good security routines.