Allow Some Roles to Log In Only During Office Hours
Lets users in chosen roles, such as shop managers or support staff, log in only on working days between set hours in the site's time zone.
Snippet Library
Snippets for the WordPress login page and the way people sign in: your logo and colors, a custom redirect after login, friendlier error messages and limits on who can get in. For anyone who wants a branded, safer login without another plugin.
Lets users in chosen roles, such as shop managers or support staff, log in only on working days between set hours in the site's time zone.
Pre-ticks the "Remember Me" box on the login form so users stay logged in longer without having to remember to tick it.
Turns off the "Lost your password?" feature for all users, for sites where accounts are managed only by an administrator.
Sends members an email when their account is used from a browser and network it has not seen before, so they can react quickly if it was not them.
Makes users in chosen roles reset their password once it is older than 90 days; at login they are told it has expired and pointed to the password reset form.
Logs users out after a set time without any mouse, keyboard or scroll activity, counted across all their open tabs.
Logs users out right away from plain logout links (for example in menus) instead of showing "Do you really want to log out?".
Ends all of a user's active sessions as soon as an administrator changes or removes their role, so a demoted account cannot keep using old access.
When an administrator creates an account, the new user is sent to their profile and asked to choose a new password before they can use the rest of the site.
Sends each user to a welcome or onboarding page the first time they log in, and to the usual place after that.
Sends users to your homepage after they log out instead of showing the "You are now logged out" login screen.
After logging in, visitors land back on the page they came from instead of the dashboard, which suits membership and community sites.
When someone who is already logged in opens wp-login.php, they go straight to the dashboard (or the homepage for subscribers) instead of seeing the form again.
Users who cannot edit posts (subscribers, customers) land on the homepage after logging in instead of their admin profile. Staff still go to the dashboard.
Greets users in the admin with the date, time and IP address of their previous login, so they can spot logins they do not recognize.