Obfuscate publicly exposed author page URLs that shows the user slugs / usemames. e.g. sitenamecom/author/username 1/ into sitename.com/author/a6r5b8ytu9gp34bv/, and output 404 errors for the original URLs. Also obfuscates in /wp-json/wp/v2/users/ REST API endpoint.
- Click on Tools in the WordPress left side admin bar.
- Then select Enhancements.
- Click on Security.
- Locate the Obfuscate Author Slugs option and enable or disable it.
- Click save changes.