Define allowed routes for your website, all other routes will return the 404 - not found page template. Permalinks can be overruled.

Login, Backend routes and local files (like wp-login.php) are always available to prevent a lockout.

Warning: The routing overrules permalinks and works like a whitelist. Only correct entered routes will go through. You should test the routing before using on production environments.

Also delete all your page caches after enabling to prevent unwanted routing behavior.

Hover or tap the line for explanation:

Ideas, feedback, bug reports or recommendations?

Feel free to contact me.