Totally faul plugin, can lock only homepage

Some peoples are using this plugin so I also tried to use this plugin for my personal website and its looks fine. but my friend send me a txt and told me that he can access my website without password. he did not try any specific page, he tried as like this https://mydomain.com/mmmmmm thats!!!! my website shows me 404 with all of my web content.