Require visitors to log in

This option is part of the modern Login & registration module.

Signed-out page visits lead to the login form and anonymous REST requests receive an authentication error. Login and recovery remain reachable. Direct files, page caches and plugin-specific endpoints require their own access controls.

Configure the option

1. Open Settings → POM Tweaks → White labelling → Login & registration.
2. Enable the Login & registration module if needed.
3. Select Require login to view the site and configure any associated values.
4. Save, reopen the tab, and verify the intended behavior in a private browser window while keeping an administrator session open.

Disable the option

Clear Require login to view the site and save to stop this behavior. Disabling the whole module stops all its login and registration behaviors. Existing sessions, accounts and delivered emails are not reversed.

For prerequisites, all controls, verification steps and troubleshooting, read Configure login and registration.