EN 
ES 
DE 
SR User Creation Guard
Description
User Creation Guard
Control the creation of new user accounts and protect your Joomla website
User Creation Guard is a Joomla security plugin designed to prevent unauthorised creation of privileged user accounts.
The plugin allows normal frontend registration for website visitors while applying strict rules to account creation in the Joomla administration area. Only an existing Super User can create a new backend user, and the highest permitted level for a new account is Administrator.
Creating additional Super User accounts is blocked.
Main features
- Allows standard frontend user registration
- Protects user creation in the Joomla backend
- Only an existing Super User can create new backend accounts
- Prevents the creation of additional Super User accounts
- Allows the creation of Administrator and lower-level accounts
- Keeps editing of existing users available
- Reduces the risk of unauthorised privileged accounts
- Works directly with the Joomla user management system
- Simple installation and activation
- No complicated configuration required
Protection against unauthorised accounts
An attacker who gains access through a vulnerable extension or another security weakness may attempt to create a new Super User account and take complete control of the website.
User Creation Guard adds an additional protection layer by blocking the creation of new Super User accounts. Even an authenticated Super User cannot create another account at the same privilege level.
The highest user level that can be assigned to a newly created account is Administrator.
Controlled backend user creation
New users can still be created when required, but only by an existing Super User logged into the Joomla administration area.
A Super User can create:
- Administrator accounts;
- Manager accounts;
- Registered users;
- Author, Editor and Publisher accounts;
- other accounts below the Super User level.
Other backend users cannot create new accounts outside the permitted security rules.
Frontend registration remains available
The plugin does not disable standard website registration. Visitors can continue to register through the frontend and receive the normal Registered user role, according to the Joomla user configuration.
This makes the plugin suitable for:
- membership websites;
- online stores;
- community websites;
- customer portals;
- websites that require registered visitors;
- websites managed by multiple administrators.
Existing users can still be edited
User Creation Guard does not prevent authorised administrators from managing existing accounts. User information and permitted account settings can still be updated through the Joomla User Manager.
The protection focuses on preventing the unauthorised creation of new privileged accounts.
Simple security enhancement
After installation and activation, the plugin applies its protection automatically. No HTML, CSS, PHP or programming knowledge is required.
User Creation Guard complements regular Joomla updates, secure passwords, two-factor authentication, backups and other website security measures.
Prevent unauthorised Super User creation while keeping legitimate user registration and administration available.
