WordPress staging site feedback without installing a plugin
Most WordPress feedback tools arrive as one more plugin: install it on staging, give the client access, remember to remove it before launch. There is a simpler route that adds nothing to your site and works on staging copies behind a password.
Why skip the plugin
Feedback plugins work, and some agencies are happy with them. The costs add up, though:
- One more thing on the site. Another plugin to install, update and check for conflicts with your theme and page builder.
- Easy to forget at launch. Feedback widgets left switched on after launch are a common sight.
- Client access. Some plugin workflows need the client logged in to WordPress, or need you to manage who can see the widget.
- One install per site. Agencies running many client sites repeat the setup every time.
A link-based feedback tool avoids all of that. It loads your page from its address and adds comments on top, so your WordPress install never changes.
Step 1: get staging onto a reachable address
The feedback tool needs to open your staging site the way a visitor would. That means a public address, not something that only works on your computer.
- Host staging. Many managed WordPress hosts create a staging copy on their own staging domain with one click. This is usually the easiest option.
- A subdomain. A copy at staging.yoursite.com works the same way.
- Local sites (on your own computer) can't be reached from the internet. Push them to a staging host first.
Whichever you use, set staging to discourage search engines (Settings, Reading in WordPress) so the copy never shows up in search results.
Step 2: lock it the right way
Most client staging sites shouldn't be public. How you lock it decides whether a feedback tool can get in.
| How it's locked | What visitors see | Works for import? |
|---|---|---|
| HTTP basic auth | The browser's own username and password box, before the page loads | Yes, enter the login once |
| Coming-soon or maintenance plugin | A holding page; logged-in admins see the real site | No, the import sees the holding page |
| Password plugin with a form | A password form inside a WordPress page | No, the import sees the form |
| Private posts or drafts | Nothing without a WordPress login | No |
HTTP basic auth is the one to use. Many hosts offer it as a setting for staging; on Kinsta it is under Tools, Password protection in MyKinsta. In HTMLAnnotate, sign in, paste the address, and enter that username and password when the import page asks. It is stored encrypted, only ever sent to your staging site, and reviewers never see it.
Step 3: create and send the review link
- Paste the staging address into HTMLAnnotate. Sign in first so the link lasts up to 14 days, or forever on Pro.
- Send the review link with a short note: what to review, by when, and to check the phone view too.
- Clients open it in any browser, browse normally, then click any heading, image or button to leave a note. They give a name and email once; no WordPress account and nothing to install.
Each comment records the page, the screen size and the reviewer's browser, so "the button on the services page looks broken on my phone" arrives with everything you need.
Gutenberg, Elementor and Divi
Because the review happens on the front end, the page builder doesn't matter. Reviewers see what the browser renders, whether it was built with blocks, Elementor, Divi or a custom theme. Interactive pieces such as menus, sliders and tabs work as they do for any visitor.
Step 4: work through the feedback
- Label comments as copy, design or bug, and assign them to whoever fixes them.
- Make the changes in WordPress as usual.
- Reply and resolve each comment, so the client sees what was done.
- Send the same review link again, or import the page afresh, when you want a new round.
Where WordPress Notes fits
WordPress 6.9 added Notes, which let people with editor access comment on blocks inside the editor. They are good for writers and editors working in WordPress every day. For clients who look at the site twice, a link they can open without a login, on the real front end and on a phone, tends to get faster feedback. Many teams use both.
More on WordPress reviews is on our WordPress page, and for the whole pre-launch list see the website launch checklist.
Questions
Can clients leave feedback on WordPress without a login?
Yes, with a link-based feedback tool. The client opens a review link of your staging site, browses it like a visitor, and clicks any block to comment. They don't need a WordPress account or access to wp-admin.
Do I need a plugin for WordPress feedback?
No. A link-based tool loads your staging or live site from its address and puts comments on top, so nothing is installed on your WordPress site.
How do I password protect a WordPress staging site for review?
Use HTTP basic auth, the browser password box many hosts offer for staging (Kinsta has it under Tools, Password protection). HTMLAnnotate can import pages behind it once you enter the login. Plugins that show a password form inside the page will block the import.
Can I get feedback on WordPress drafts?
Not directly, since draft previews need a WordPress login. Publish the page on a staging copy instead, or use a private staging site behind a browser password box.
What about WordPress Notes?
WordPress 6.9 added Notes for commenting on blocks in the editor. They work well for people with editor access, but clients need a WordPress login and Notes don't cover how the front end looks on a phone.
Paste your WordPress staging address and send the review link. If it's behind a browser password box, enter the login once.
Start a free review