Skip to content

Integrations / Connection

Jetpack XML-RPC with Stack Guard

Jetpack connects your site to WordPress.com through xmlrpc.php. Disable XML-RPC and Jetpack stops working, so Stack Guard tells you when both are on and how to stay safe.

What Stack Guard checks

Jetpack XML-RPC: what Stack Guard checks

XML-RPC clash

With Jetpack active and XML-RPC blocked, Stack Guard explains that the connection and the features that rely on it can stop working.

Recommended settings for Jetpack

  • If you use Jetpack: leave XML-RPC on and keep sign-in lockouts on, since xmlrpc.php is also used for password guessing.
  • If you do not use Jetpack: turn it off, then disable XML-RPC.

Watch for overlaps

  • XML-RPC must stay on for Jetpack

Questions

Jetpack and Stack Guard: questions

Can I disable XML-RPC with Jetpack?

Not without breaking Jetpack's connection to WordPress.com. Keep XML-RPC on and rely on Stack Guard's sign-in lockouts instead.

Is XML-RPC dangerous?

It lets a bot try many passwords in one request. With lockouts on, those guesses are counted and stopped like any other sign-in attempt.

More integrations

Jetpack is a trademark of its owner. Stack Guard is not affiliated with or endorsed by it.

Protect your Jetpack site free

Install Stack Guard Free and open the compatibility check. It takes a minute.