Redirect pages or your whole site
Target your entire website, selected pages, posts, categories, custom paths or all 404 pages. Create short links by supplying a custom path and destination yourself. The plugin does not generate slugs.
DevDome Redirect Manager WordPress plugin
Send visitors where you want them to go
DevDome Redirect Manager sends visitors from your pages, custom paths or 404 pages to the destinations you choose. Rotate links, target countries and devices, and schedule independent rules without coding, with all features free and no account required.
Free and GPL licensed, reviewed by the WordPress.org plugin team.
On WordPress.org
Live data from WordPress.org- Version
- 1.5.6
- Updated
- Active installs
- Rating
- Requires WordPress
- 5.6 or newer
- Tested up to
- WordPress 7.1.3
- Requires PHP
- 7.4 or newer
- Licence
- GPLv2 or later
Unlimited redirect rules with no paid tier
No account required for redirect features
301 permanent redirects for changed addresses
302 temporary redirects for URL forwarding
Choose the destination, audience and timing
Manage redirects from one screen, with separate targeting, schedules and statistics for each rule. When rules overlap, the highest-priority running rule that matches handles the request.
Keep paths when changing domains
Send visitors to the same path on another domain while preserving their query. Choose 301 Permanent for a permanent move. This handles redirects without moving site files, databases or changing permalink settings.
Split traffic between destination links
Rotate provided links using First to last, Random or Weighted distribution, with a live preview of the split. Repeat List restarts an exhausted list. Traffic splitting does not measure conversions or choose a winner.
Choose when links open
Redirect automatically or wait for a visitor to click, with optional delays. New tabs and client-side delays require JavaScript. A new tab opens on the next real click after its delay because browsers block automatic tabs.
Target visitors by country
Include or exclude listed countries using optional Geo Filtering, off by default. Lookups send visitor IP addresses to the DevDome geo service. If a country cannot be resolved, an except-listed rule does not redirect that visitor.
Set audiences, schedules and daily limits
Choose Desktop, Mobile or Tablet, then set a custom schedule and redirect frequency. An optional Daily Redirect Limit caps each rule. Reset Stats clears statistics and rotation position but does not reset today's daily-limit count.
Skip known bots and chosen visitors
Known Bots skips locally recognised requests by default; optional exclusions cover IP addresses, browser strings and logged-in roles. Unrecognised bots can still be redirected. Cached pages may still serve a stored redirect to excluded roles.
Review activity for each rule
Track visitors, redirects, bypasses, devices, countries and source or destination breakdowns with a time-range filter. These statistics record rule activity, not confirmed arrival at a destination. Bots Skipped also includes exclusions and failed Visitor Check passes.
From installation to your first redirect
Install and activate the plugin, open Tools > DevDome Redirect Manager, and configure your rule. No account is required, and Geo Filtering stays off unless you enable it.
- 1
Install and activate
Install DevDome Redirect Manager from WordPress.org through the Plugins screen, activate it, then open Tools > DevDome Redirect Manager.
- 2
Choose sources and destinations
Pick what to redirect, choose a redirect method and set where to send traffic. Add any targeting, timing and schedule you need.
- 3
Save and run your rule
Click Save & Run to start the rule and review its statistics. Use Stop to stop it, or Save Settings to save without changing its run state.
Frequently asked questions
Is it free, and do I need an account?
All features are free, with unlimited rules and no paid tier. Redirect features require no account. You can optionally connect a free DevDome account. The plugin requires WordPress 5.6 or later and PHP 7.4 or later.
Can I redirect visitors without JavaScript?
Yes. Choose 301, 302, 307, 308 or Meta Refresh; these always open in the same tab. Visitor Check, new tabs, waiting for clicks and client-side delays require JavaScript. On fully cached pages, Referring websites and Only visitors arriving from outside also use JavaScript to detect arrivals.
Why is my redirect not working after I save?
Save Settings does not start a stopped rule; use Save & Run. A caching plugin or server cache may still serve a stored page. Keep Purge Page Cache On Save enabled to clear targeted pages when saving or running a rule.
Can I run several rules at once?
Yes. Rules run independently, and the highest-priority running rule that matches handles each request. Drag rules to change their priority. Each rule has its own nickname, settings, run state and statistics.
Does Visitor Check prove someone is human?
No. It checks that a single-use pass returns from the same IP address and browser. It only supports JavaScript redirects to provided links or the same path on another domain. It adds a request, and real visitors who change networks may be refused. It cannot guarantee valid clicks.
Does country targeting send visitor data elsewhere?
Yes. Geo Filtering sends visitor IP addresses to the DevDome geo service for country lookup and caches results. It is optional and off by default. Test geo service contacts the service without visitor data. The plugin catalog and optional account connection make separate external requests.
What happens when a rule reaches its daily limit?
Further visitors handled by that rule stay on the page or go to its bypass link. A new allowance becomes available at midnight in your site's timezone, subject to the schedule. Use the same number twice for a fixed cap. Reset Stats does not reset today's allowance.
Can I move my rules to another site?
Yes. Export downloads every rule and its configuration as JSON, without statistics or run state. Import replaces every rule on the destination site. Imported rules arrive stopped so you can review them before starting.
Documentation
Everything you need before you install, with no account required.
Installing
Install DevDome Redirect Manager from WordPress.org (Plugins, Add New, search for DevDome Redirect Manager) or upload the ZIP, then activate it.
No DevDome account is required for redirect features, including the optional geo filter. Connecting a free DevDome account is optional and lets your account show which of your sites run which DevDome plugins when you connect through the dashboard card that describes this sharing.
Setting it up
Open Tools > DevDome Redirect Manager in the WordPress admin menu. Choose what to redirect, select a redirect method and set where to send traffic. You can target the entire website, selected content, custom paths, 404 pages or referring websites.
Set redirect frequency, device targeting, timing and a schedule as needed. Geo Filtering is off by default. If you enable it, choose countries to include or exclude and use Test geo service to check availability. Behind a proxy or CDN, enable Trust forwarded IP headers to use the visitor IP for country lookup.
Click Save & Run to start the rule. Save Settings saves changes without changing its run state. If several rules are running, the highest-priority matching rule handles the request; drag rules to change their priority.
What is sent outside your site
Rules, settings and per-rule statistics are stored on your site. Visitor Check stores a single-use pass in your database with a keyed hash of the visitor's IP address and browser, never those raw values in the pass record. The pass is deleted when used and expires within minutes, with extra time for configured delays. Visitor Check, Outdated Browsers, Daily Redirect Limit and UTM source matching run locally.
The DevDome Dashboard fetches the plugin catalog from https://devdome.com/wp-plugins/catalog.json at most once every 12 hours. This request sends only the bundled core version, with no site or visitor data.
When a rule with Geo Filtering enabled handles a front-end request, the DevDome geo lookup service receives the visitor's IP address in a POST request to https://api.devdome.com/geo-resolve/classify to resolve a country code. Results are cached to avoid repeated lookups of the same IP. Test geo service contacts https://api.devdome.com/geo-resolve/health without visitor data. Detect automatically for proxy or CDN settings runs locally and sends no data to an external service.
The bundled bot-detection library names DevDome bot detection feeds at https://api.devdome.com/bot-protection/list for bot browser patterns, https://api.devdome.com/bot-protection/asns for data-center networks and https://api.devdome.com/bot-protection/drop for Spamhaus DROP IP ranges. Feed downloads are disabled in this WordPress.org build: no requests are made or scheduled, whether or not an account is connected. Local bot checks use built-in browser identifiers and any shared DevDome bot data already stored locally.
The optional DevDome account connection starts only when you press Connect. It opens devdome.com in your browser for sign-in and, after approval, stores your public DevDome Account ID and a site token locally. Account verification sends the site domain and site token to https://api.devdome.com/plugin/account. Connecting through the DevDome Tools dashboard card that describes plugin sharing also makes account checks send the slug and version of each active DevDome plugin plus the DevDome library, WordPress and PHP versions. Earlier connections and connections through buttons without that disclosure do not send the plugin list. Disconnecting sends the site domain and site token once to https://api.devdome.com/plugin/disconnect and stops plugin-list sharing. Account requests send no visitor data, content or redirect rules.
How updates work
Updates come from WordPress.org like any other directory plugin and are installed through the WordPress Plugins screen.
Uninstalling and your data
The readme does not specify which settings, rules, statistics or account connection data deleting the plugin removes, or what deletion does not undo.
If something looks wrong
If a redirect does not take effect after saving, a caching plugin or server cache may still serve a stored page. Keep Purge Page Cache On Save enabled so targeted pages are cleared when you save or run a rule.
If New Tab is unavailable or reverts to Same Tab, check the redirect method. The 301, 302, 307, 308 and Meta Refresh methods always open in the same tab. JavaScript is required for new tabs, Visitor Check, waiting for a click and client-side delays. On fully cached pages, Referring websites and Only visitors arriving from outside also use JavaScript to detect the landing.
If your own rules redirect you, edit each matching rule and exclude your logged-in role under Optional Settings. To skip redirects while logged out too, add your public IP address or CIDR range to the IP exclusions. Everyone sharing an excluded address is also skipped, and the entry needs updating if your public address changes. Clear the page cache after saving if a stored redirect remains.
If Visitor Check shows an expired-link message, the visitor's IP address or browser identifier may have changed between loading the page and returning the pass. Real visitors switching networks can encounter this; they should go back and open the page again. Visitor Check adds one request to your site and checks that the address and browser match, but does not prove that a visitor is human.
Still stuck? Ask on the WordPress.org support forum or use the DevDome contact form. For a security problem, use the Report a security issue tab instead.
Read from the live release feed, so it always describes the version you can download today. The two latest versions are shown here; the full history is on WordPress.org.
Version 1.5.6
- Shared DevDome library 1.7.10: the one-time Report a bug hint is recorded through a nonce-checked request instead of on a page view; the DevDome dashboard lists only real problems and prints its icons through the WordPress escaping functions.
- The redirect scripts and the rule list are printed through the WordPress escaping functions, with no escaping exceptions left (WordPress.org review rule). The scripts themselves are unchanged.
- Listing text updated: title, short description, tags and introduction.
Version 1.5.5
- New per-rule exclusions under Optional Settings, each with its own checkbox and off by default: IP addresses and CIDR ranges (IPv4 and IPv6), browser strings (User-Agent), and logged-in WordPress user roles.
- Excluded visitors see the page as usual, are not sent to the bypass link and are counted with the skipped bots instead of visitors.
- Browser string exclusions match any listed text, ignoring upper and lower case. IP and browser string exclusions depend on the visitor continuing to match; role exclusions apply only while logged in, and cached pages may still be served.
- The rule settings are also available to AI agents as skip_ips, skip_user_agents and skip_roles.
- For developers: new devdredi_pass_bind_address filter for the address a Visitor Check pass is bound to.
- Bundled DevDome library 1.7.6: the optional Connect card now says exactly what a connected site shares, including the list of active DevDome plugins. Sites already connected send nothing new. See External services.
Found a security problem?
Please tell us before telling anyone else, and we will fix it and credit you if you want the credit. Use the contact form and say it is a security report, so it gets read first.
We are a small team, so we will not pretend to a 24/7 security desk or a guaranteed response time. We will read it, reply, and tell you honestly what we are doing about it.
Install DevDome Redirect Manager from WordPress.org
Install and activate the plugin, choose your sources and destinations, then click Save & Run. No account is required.
More from the DevDome suite
All pluginsDevDome Analytics: Visitor Tracker, Site Stats & Bot Detection
Visitor tracking statistics: site stats, visitor stats, pageviews, sources, bot detection and outbound click reports. Free DevDome account required.
DevDome Site Monitor
One health score for every WordPress site, with alerts before visitors notice.
DevDome Bot Protection
Detect and block bad bots without ever touching the good ones that rank you.
