Instant switching between user accounts in WordPress.
This package is auto-updated.
Last update: 2020-04-21 13:57:28 UTC
Stable tag: 1.5.4
Requires at least: 3.7
Tested up to: 5.3
Requires PHP: 5.3
License: GPL v2 or later
Tags: users, profiles, user switching, fast user switching, multisite, buddypress, bbpress, become, user management, developer
Instant switching between user accounts in WordPress.
This plugin allows you to quickly swap between user accounts in WordPress at the click of a button. You'll be instantly logged out and logged in as your desired user. This is handy for test environments where you regularly log out and in between different accounts, or for administrators who need to switch between multiple accounts.
- Switch user: Instantly switch to any user account from the Users screen.
- Switch back: Instantly switch back to your originating account.
- Switch off: Log out of your account but retain the ability to instantly switch back in again.
- It's completely secure (see the Security section below).
- Compatible with WordPress, WordPress Multisite, WooCommerce, BuddyPress, and bbPress.
- Only users with the ability to edit other users can switch user accounts. By default this is only Administrators on single site installations, and Super Admins on Multisite installations.
- Passwords are not (and cannot be) revealed.
- Uses the cookie authentication system in WordPress when remembering the account(s) you've switched from and when switching back.
- Implements the nonce security system in WordPress, meaning only those who intend to switch users can switch.
- Full support for user session validation where appropriate.
- Full support for administration over SSL (if applicable).
- Visit the Users menu in WordPress and you'll see a Switch To link in the list of action links for each user.
- Click this and you will immediately switch into that user account.
- You can switch back to your originating account via the Switch back link on each dashboard screen or in your profile menu in the WordPress toolbar.
See the FAQ for information about the Switch Off feature.
User Switching makes use of browser cookies in order to allow users to switch to another account. Its cookies operate using the same mechanism as the authentication cookies in WordPress core, therefore their values contain the user's
user_login field in plain text which should be treated as potentially personally identifiable information. The names of the cookies are:
User Switching does not send data to any third party, nor does it include any third party resources, nor will it ever do so.
Switching off logs you out of your account but retains your user ID in an authentication cookie so you can switch straight back without having to log in again manually. It's akin to switching to no user, and being able to switch back.
The Switch Off link can be found in your profile menu in the WordPress toolbar. Once you've switched off you'll see a Switch back link on the Log In screen and in the footer of your site.
Yes, and you'll also be able to switch users from the Users screen in Network Admin.
Yes, and you'll also be able to switch users from member profile screens and the member listing screen.
Yes, and you'll also be able to switch users from member profile screens.
Yes, but for maximum compatibility you should use WooCommerce version 3.6 or later.
One exception I'm aware of is Duo Security. If you're using this plugin, you should install the User Switching for Duo Security add-on plugin which will prevent the two-factor authentication prompt from appearing when you switch between users.
A user needs the
edit_users capability in order to switch user accounts. By default only Administrators have this capability, and with Multisite enabled only Super Admins have this capability.
switch_users meta capability can be explicitly granted to a user or a role to allow them to switch users regardless of whether or not they have the
edit_users capability. For practical purposes, the user or role will also need the
list_users capability so they can access the Users menu in the WordPress admin area.
If you know what you're doing with user capabilities, this capability can also be denied from a user or role to prevent the ability to switch users, regardless of whether or not they have the
No. This can be enabled though by installing the User Switching for Regular Admins plugin.
Yes, there's a third party add-on plugin for this: Admin Bar User Switching.
Yes. When a user switches to another account, the
switch_to_user hook is called:
/** * Fires when a user switches to another user account. * * @since 0.6.0 * @since 1.4.0 The `$new_token` and `$old_token` parameters were added. * * @param int $user_id The ID of the user being switched to. * @param int $old_user_id The ID of the user being switched from. * @param string $new_token The token of the session of the user being switched to. Can be an empty string * or a token for a session that may or may not still be valid. * @param string $old_token The token of the session of the user being switched from. */ do_action( 'switch_to_user', $user_id, $old_user_id, $new_token, $old_token );
When a user switches back to their originating account, the
switch_back_user hook is called:
/** * Fires when a user switches back to their originating account. * * @since 0.6.0 * @since 1.4.0 The `$new_token` and `$old_token` parameters were added. * * @param int $user_id The ID of the user being switched back to. * @param int|false $old_user_id The ID of the user being switched from, or false if the user is switching back * after having been switched off. * @param string $new_token The token of the session of the user being switched to. Can be an empty string * or a token for a session that may or may not still be valid. * @param string $old_token The token of the session of the user being switched from. */ do_action( 'switch_back_user', $user_id, $old_user_id, $new_token, $old_token );
When a user switches off, the
switch_off_user hook is called:
/** * Fires when a user switches off. * * @since 0.6.0 * @since 1.4.0 The `$old_token` parameter was added. * * @param int $old_user_id The ID of the user switching off. * @param string $old_token The token of the session of the user switching off. */ do_action( 'switch_off_user', $old_user_id, $old_token );
In addition, User Switching respects the following filters from WordPress core when appropriate:
login_redirectwhen switching to another user.
logout_redirectwhen switching off.
For User Switching's changelog, please see the Releases page on GitHub.