Disable Frontend User Registration removes WordPress's public signup form. Users cannot register on the front-end, REST API registration is blocked, and registration URLs are removed.

What this feature does

By default, WordPress allows visitors to sign up for accounts from the login page if registration is enabled. For many sites, this is a problem: it invites spam registrations, creates accounts you don't need, and increases support burden.

This setting locks down user registration. It disables the front-end registration form, removes the registration link from login pages, blocks REST API registration attempts, and prevents any plugin from silently creating user accounts. Administrators can still create users manually from the WordPress admin panel.

Admin registration still works

This setting blocks registration on the front-end and via REST API. Administrators can still create users manually through Users > Add New in the WordPress dashboard. If you need to invite users, send them an invitation link or create their accounts directly in the admin panel.

How to enable it

  1. Open AdminEase and navigate to Users. Click AdminEase in the WordPress admin menu, then switch to the Users tab.
  2. Toggle Disable user registration on. Save the setting. Changes take effect immediately.
  3. Verify the registration form is gone. Go to your login page (e.g., yoursite.com/wp-login.php). The registration link should be gone. If you try to access /wp-login.php?action=register directly, you'll get an error.
  4. Confirm admin registration still works. Log in to WordPress admin and go to Users > Add New. You should still be able to create new users manually.

Settings reference

Setting What it does Default
Disable user registration Blocks the front-end WordPress registration form, removes registration URLs, disables the REST API /users POST endpoint, and forces the users_can_register option off. Admin user creation still works. Off

What happens behind the scenes

WordPress hooks modified

AdminEase uses several hooks to block registration:

  • init: Forces the users_can_register option to 0, even if a plugin tries to enable it
  • login_init: Blocks direct access to the registration form by intercepting the action=register query parameter
  • register_url: Filters out all registration URLs, replacing them with empty strings
  • rest_api_init: Overrides the /wp/v2/users POST endpoint to return a 403 Forbidden error

These work together to prevent registration at every entry point.

Troubleshooting

I disabled registration, but the registration form still appears

Check that the setting is still enabled in AdminEase > Users. If it is, clear your browser cache completely, including cookies and cached scripts. Some WordPress installations cache the login page, so old HTML might be served. Do a hard refresh (Ctrl+Shift+R on Windows/Linux, Cmd+Shift+R on Mac).

Can I create a custom registration form?

AdminEase blocks WordPress's built-in registration. If you need a custom registration form handled by a specific plugin, that plugin's own registration code must bypass WordPress's standard user creation functions. Check the plugin's documentation. Most plugins respect AdminEase's blocks if they use WordPress core functions.

I need to let users register temporarily. Can I turn this off and back on?

Yes. Toggle the setting off, save, and the registration form returns. When you toggle it back on, registration closes again. This is safe and doesn't affect existing users.

Can I still invite users to register?

Yes. You must invite users by creating their accounts manually in the WordPress admin (Users > Add New), setting their password, and emailing them the login details. Or use a plugin designed for invitations that bypasses the standard registration form.