Feature Flipper

This plugin gives you the ability to manage core WordPress features like Comments, the Block Editor (Gutenberg), Emojis, XML-RPC, Feeds, Updates, Automatic Updates, Cron, Heartbeat, and more. If you don’t need certain features, you can easily toggle them off or customize their behavior.

It also includes additional utility features, like showing your site’s environment type in the admin bar, enabling maintenance or private mode, or using random URLs for media pages, which you can enable or disable as needed.

Features

This plugin organizes these settings into sections so you can quickly find and manage what you need:

General

Tweak key WordPress features to fit your needs:

• Block Editor: Prefer the Classic Editor? Disable the Block Editor for all or specific post types.
• Block-based Widgets: Turn off the Block Widgets Editor.
• Comments: Disable comments and remove related admin area elements.
• Revisions: Limit or disable post revisions to improve performance.
• Embed: Stop other sites from embedding your content.
• Self-ping: Prevent pingbacks to your own site.
• Feeds: Disable RSS feeds if you don’t need them.

Admin

Customize your admin experience:

• Dashboard Widgets: Remove unwanted or all dashboard widgets.
• Footer Text: Get rid of the Thank you for creating with WordPress footer text.
• Update Nags: Hide update notices for WordPress, plugins, and themes.
• Admin Bar: Remove the admin bar on your site’s front end.
• Howdy Text: Replace the Howdy greeting in the admin bar.
• Environment Type: Display site’s environment type (e.g. Development, Staging, Production) in the admin bar.

Media

Adjust media-related settings:

• Attachment Pages: Disable attachment pages or re-enable them on WordPress 6.4+.
• Attachment Slug: Use random URLs for media pages to avoid slug conflicts.
• Infinite Scroll: Restore infinite scroll in the Media Library.
• Image Quality: Adjust the quality of uploaded images (JPEG only).

Site

Control access and assets on your site:

• Access: Make your site public, restrict it to logged-in users, or enable maintenance mode.

Unload some of the assets that are not always necessary for your site:

• Emojis: Improve performance by removing emoji scripts and styles.
• Script Version: Remove version query strings from scripts and styles URLs.
• jQuery Migrate: Disable jQuery Migrate if it’s not needed.

Clean-up some unused metadata from your site:

• RSD Link: Remove the Really Simple Discovery (RSD) tag.
• Generator Meta Tag: Remove the WordPress version meta tag.
• Shortlink: Remove the shortlink meta tag.

Security

Improve your site’s security by disabling or limiting access to certain features:

• File Edit: Disable the built-in file editor for themes and plugins.
• XML-RPC: Disable the XML-RPC endpoint.
• API Authentication: Require authentication for all REST API requests.

Apply additional security measures to your login page:

• Identifier: Restrict login to username only, email only, or allow both.
• Obfuscate Error: Prevent hints about which login credential is incorrect.
• Block Bots: Block known bots from accessing the login page.
• Obfuscate Usernames: Expose randomize slug for users.

Manage passwords policy on the site:

• Application Passwords: Disable Application Passwords and remove related UI elements.

Advanced

For advanced users, you may configure these following features, but do it carefully:

• Updates: Enable or disable updates for WordPress, plugins, and themes.
• Cron: Disable WP-Cron and use a real cron job.
• Heartbeat: Adjust or disable the Heartbeat API to reduce resource usage.