Docs › Is it safe?

Is it safe to use this tool?

Yes — and this page explains exactly why, in plain language. We know that giving any website access to your FTP login feels risky, so we have designed this tool to earn that trust.

Our promise in one sentence: we connect to your site only while you are on this page, change only the few files needed to get your site working again, back up everything we touch, and then forget your password completely.

The five things people worry about — answered

1. “Will you steal my password?”

No. Your FTP password is never written to our hard drive in readable form and is never saved to any log file. While you are connected it is held in an encrypted form, and the key needed to unlock it stays in your browser, not on our server. The moment you click Disconnect — or after 15 minutes of inactivity — it is erased. See the technical details →

2. “Will you download or copy my website?”

No. We do not bulk-download your site, your database, your customer data, your images, or your content. The tool only reads the handful of small configuration files it needs to diagnose the problem (for example wp-config.php and your error log). Here is the full list of what we never do →

3. “Could it break my site even more?”

Every change the tool makes is reversible. Before we modify or move anything, we save a backup copy on your own server, in a folder called wp-repair-backups. A single “Undo all changes” button puts everything back exactly as it was. We never delete your files — when we “disable” a plugin, we simply rename its folder so it can be switched straight back on.

4. “Will you leave a back door or keep access?”

No. This tool does not install anything on your website. It does not create new admin users, it does not add hidden code, and it has no way to reconnect later. When your session ends, our connection to your site is closed. If you followed our recommendation to create a temporary FTP account, you can delete it afterward and remove access entirely.

5. “How do I know I can trust you?”

A few ways:

The free scan needs no password at all — try it first and see what we can tell you about your site from the outside.
You watch every action in real time. Nothing happens silently; each fix is listed as it runs.
We actively recommend that you create a temporary, throwaway FTP account just for this repair, and delete it when you are done. A tool trying to steal from you would never tell you to do that.
The connection uses secure FTPS encryption whenever your host supports it, so your password is protected in transit.

Good habits we recommend

Create a temporary FTP account for this repair and delete it afterward. (How →)
If you prefer, change your FTP password after the repair is finished.
Use the secure FTPS option (it is on by default).

Run the free scan — no password needed