A separate gate before Joomla administrator login

Sites expose the Administrator login to every visitor by default, even when only a small team needs it. Joomla core already provides the main controls after that point: user accounts, ACL permissions, MFA and passkeys, plus session and CSRF protections. HTTPS and server-level restrictions can also reduce exposure. A template override is not a natural solution because this concerns requests reaching the Administrator application rather than the presentation of a page.

According to the listing, Admin Guard goes beyond those core controls by requiring a generated Gate URL and separate Access Key before Joomla authentication begins. It also claims options for 403 or 404 responses, homepage redirects, rate limiting, IP and CIDR allowlisting, reverse-proxy support and credential rotation. It remains a Joomla plugin, so the developer says it cannot independently block static files served directly by the web server and is not a Web Application Firewall.

That makes it relevant to sites with a private administrative team, clients wanting an additional obscurity and access-control layer, or hosts that cannot use server configuration. A typical public site with a small, well-managed administrator account setup may have no need for another gate, especially if its hosting already provides network restrictions.

Before installing, note that the listing describes it as a free download under GPLv2 or later. The developer is Dr. Yordan Balabanov, representing TemplinTech; the page shows zero reviews and supplies no wider directory track record. It states Joomla 6.1.3 or later and PHP 8.3 or later, but leaves practical deployment details, recovery testing guidance and support availability unclear; the listing says support is not available.

Listed on the Joomla Extensions Directory.