CountryLock provides a simple, lightweight way to allow or block countries from accessing your WordPress site.
It's designed to be
"set it and forget it" with no upsells, ads, or complex configurations.
✨ Key Features
- Master Toggle: Enable or disable the firewall with a single click.
- Allowed Countries List: Specify which two-letter country codes (e.g.,
US, CA) are allowed. Everyone else is blocked.
- Admin Bypass: Logged-in administrators can always bypass the block (toggleable).
- IP Allowlist: A simple list of IPs or CIDR ranges (like
123.45.67.89 or 10.0.0.0/8) that are always allowed.
- Block Logging: See which countries and IPs are being blocked (toggleable).
- Zero-Lookup Detection: Automatically uses Cloudflare (
HTTP_CF_IPCOUNTRY) and other common server-level GEO headers for instant decisions with zero performance impact.
- Remote Lookup: As a fallback, it can query an external service (
ipapi.co) if no headers are found.