Super Secret makes your blog private. This means, to whoever is registered on the system. The biggest difference between Super Secret and other membership plugins is that the membership plugin redirects you to the WordPres login page, Super Secret does not. Super Secret will return a proper 404 HTTP Header, telling browsers that the website is not found. It will also display a “Not Found” generic dummy page.
This doesn’t mean your website is 100% hidden from everyone who attends it. Users can still see wp-login.php
When you publish a post, WordPress notifies other blogs linked to from your post. This could give away the presense of your blog! Make sure you disable all of these!
Inside “Settings > Discussion Settings > Default article settings”:
Inside “Settings > Privacy Settings”:
Other give aways that your blog exist is trying to access ‘wp-admin’ (without the blackslash at the end). If configured correctly, Apache will redirect you to ‘wp-admin/’. This is a clear sign that a blog exists at your domain.
This is not a full proof plugin. There is no such thing as truly secure. You can only deter people.