"Log Out Everyone" Button for Emergencies
Adds a button under Tools > Log Out Everyone that ends every login session on the site except your own, useful after a suspected break-in or a staff change.
Snippet Library
WordPress code snippets, ready to use
3,040 free snippets from the WPIDE team and the community. Copy the code, or add any snippet to your site in one click with WPIDE.
"Log Out Other Devices" Button for Members
Adds a [wpide_logout_others] shortcode with a button that signs the member out of every other browser and device, keeping the current one logged in.
Active Login Sessions Overview
Adds Users > Active Sessions, listing everyone who is currently logged in with their login time, IP address and browser, and lets you end a user's sessions with one click.
Active Sessions Column With "Log Out Everywhere"
Shows how many devices each user is logged in on, with a link to end all of that user's sessions from the Users screen.
Allow Only One Active Session per User
Logs a user out of every other browser and device as soon as they log in somewhere new, which stops account sharing.
Ask for the Password Again Before Sensitive Admin Screens
Requires administrators to log in again before opening plugin, theme, user and update screens when their login is older than 30 minutes, so a hijacked session cannot quietly install code or add users.
Change How Long Polylang Remembers the Language
Sets how long Polylang's language cookie lasts (one year by default), for example a single session on kiosks and shared computers, or 30 days for privacy-conscious sites.
Disable the Persistent Cart
Stops WooCommerce from saving logged-in customers' carts to their account between sessions, so each visit starts with an empty cart.
Don't Keep Full IP Addresses in Login Sessions
Shortens the IP address and drops the browser details WordPress stores with every login session, so session records no longer hold full personal data.
End Admin Sessions When the IP Address Changes
Logs an administrator out if their session suddenly comes from a different IP address than the one they logged in from, which blocks stolen cookies.
Hide the "Remember Me" Checkbox
Removes the Remember Me option so every login ends when the browser closes, which suits shared or public computers.
Hotjar Tracking Code
Adds Hotjar heatmaps and session recordings to your public pages, without recording logged-in staff.
Keep "Remember Me" Logins for 30 Days
Extends the login cookie to 30 days when "Remember Me" is ticked. Sessions without it keep the normal two-day lifetime.
Keep Guest Carts for a Week
Extends how long a guest's cart is remembered from two days to seven, so visitors who come back later still find their products waiting.
Log Out Idle Users Automatically
Logs users out after a set time without any mouse, keyboard or scroll activity, counted across all their open tabs.
Log Users Out Everywhere When Their Role Changes
Ends all of a user's active sessions as soon as an administrator changes or removes their role, so a demoted account cannot keep using old access.
Microsoft Clarity
Adds the Microsoft Clarity script for heatmaps and session recordings.
Remove Expired Login Sessions From the Database
Once a day, removes expired login sessions that WordPress keeps in user meta until the user logs in again, which on membership sites and shops adds up to a lot of dead data.
Rename "Events" in The Events Calendar
Changes the word "Event/Events" used across The Events Calendar's views and admin into your own term, such as Show/Shows, Class/Classes or Session/Sessions.
Shorter Login Sessions for Administrators
Makes administrator logins expire sooner than everyone else's, limiting the damage of a forgotten logged-in browser.
Shorter WooCommerce Guest Sessions
Makes WooCommerce forget guest shopping sessions (cart contents and entered details) after 24 hours instead of two days, so less customer data sits in the sessions table.
Tag Microsoft Clarity Sessions With Page and User Type
Adds custom tags to Microsoft Clarity recordings for the page type, post type and whether the visitor is logged in, so you can filter recordings by them.
User Meta Inspector on Profile Screens
Shows administrators a read-only table of every stored user meta value at the bottom of user profile screens, with session tokens and other secrets masked.
Vimeo Embeds With "Do Not Track"
Adds Vimeo's dnt=1 setting to every embedded Vimeo video, which stops Vimeo from setting tracking cookies or collecting session data for your visitors.