Require Login for the WordPress Media Library

Introduction

By default, files uploaded to the WordPress Media Library are publicly accessible and do not require Login for the WordPress Media Library. Anyone who knows or discovers a file’s URL can access it, including search engines and other automated systems that index publicly available content. While this behavior works well for public websites, it can become a security concern when documents, presentations, training materials, contracts, policies, or other business content should only be accessible to authorized users.

WPO365’s Require login for the Media Folder feature protects files uploaded to WordPress by requiring visitors to sign in with Microsoft 365 before they can access them. Whether a file is linked from a page, embedded in content, or accessed directly using its URL, WPO365 ensures that only authenticated users can download or view the file.

Once enabled, WPO365’s media protection works transparently in the background and integrates seamlessly with WordPress and Microsoft Entra ID. In other words, it helps you to protect WordPress media files with Microsoft Entra ID / Microsoft 365 sign-in. Website authors can continue to upload and manage files using the familiar WordPress Media Library, while WPO365 handles authentication and access control.

This feature is particularly useful for organizations building employee intranets, customer portals, partner portals, document repositories, learning platforms, membership sites, and other WordPress solutions where sensitive content must not be publicly accessible.

Supported Features

Protect all files stored in the WordPress uploads folder.
Require Microsoft Entra ID / Microsoft 365 sign-in (SSO) before files can be accessed.
Prevent direct URL access to protected files.
Support for WordPress path-based and sub domain based Multisite networks.
Secure access to PDFs, Office documents, images, videos, and other media types.
Designed for employee intranets, customer portals, partner portals, learning platforms, and membership sites.
Secure Download Mode for improved performance.