Administrator User Management

Administrator Toolkit gives you more control over your WordPress admin users.

Admin User Features

Every client is different. Here are some ways Administrator Toolkit can help you keep them under a watchful eye.

Site administrator email tied to active user

Replaces the free text Administration Email Address field with a selection of eligible administrator users, and prevents that user account from being deleted (via the UI).

Emergency use only account

Your client should always have an admin account in case of emergencies (hello bus!). Get a heads up if it logs in to their site. Was it actually them, or another agency?

Email domain whitelisting for admins

Prevent new admin users from being created via the UI if their email domain is not on the allowed domains list. This prevents rogue SEO agencies being added to your client’s site without your knowledge.

1 hour admin ​session expiration

Automatically end an admin user’s session after 1 hour. Train your clients to use their editor account for day to day content changes and reduces the window for session stealing.

Country based login restrictions​

If your client is in the UK, then why allow login attempts from elsewhere? Set country restrictions on a per user basis.

Force logout of selected administrator users

See which admins are currently logged in and active on the site. Force a logout to end their session when they are idle to prevent site changes during maintenance.

Email-only login enforcement

Force logins to use an email address instead of a username. Why? Usernames can be exposed via posts or the REST API making them easy to find / guess.

Admin login tracking

Log the IP address, country and browser used by successful admin logins. Keep an eye on where your admins are accessing the site from.

Why are administration emails so important?

A well maintained WordPress site is a vital part of good website governance. But what happens if administration emails don’t make it to a knowledgeable person? Or worse, they reach the right person, but they no longer have the required access to maintain the site?

By replacing the standard email address with a drop down list of available administrator users, preventing that user from being deleted (via the UI) or having their role downgraded, you’ve taken several additional steps to ensure you’ll still have access to a site you are responsible for.

If a client went rogue and their new agency migrated the site away without informing you, there is a high chance you’d still receive administrator emails after your account had been deleted.

With Administrator Toolkit activated at the start of a new site build you’d have put in additional measures early on in case this or other situations happened.

Related: Features: Deep Dive

Administrator Toolkit: Advanced admin management & risk reduction.

Like to know more how Administrator Toolkit can help you?

Try the demo