Title: 4WP Account
Author: 4wpdev
Published: <strong>June 23, 2026</strong>
Last modified: June 23, 2026

---

Search plugins

![](https://s.w.org/plugins/geopattern-icon/4wp-account.svg)

# 4WP Account

 By [4wpdev](https://profiles.wordpress.org/4wpdev/)

[Download](https://downloads.wordpress.org/plugin/4wp-account.1.0.4.zip)

 * [Details](https://wordpress.org/plugins/4wp-account/#description)
 * [Reviews](https://wordpress.org/plugins/4wp-account/#reviews)
 *  [Installation](https://wordpress.org/plugins/4wp-account/#installation)
 * [Development](https://wordpress.org/plugins/4wp-account/#developers)

 [Support](https://wordpress.org/support/plugin/4wp-account/)

## Description

**4WP Account** is a user account hub for WordPress: social sign-in (OAuth 2.0),
a front-end account page, header account menu block, and optional WooCommerce login
buttons.

**Active in this release:** Google and GitHub login when enabled in **4WP Account
Auth**. Facebook and TikTok appear in settings as _coming soon_ — they are not available
for login yet.

A plugin by [4wp.dev](https://4wp.dev/). **4WP** is our project brand; the letters“
WP” appear only as part of that brand name, not as a reference to WordPress. This
plugin is not affiliated with, endorsed by, or sponsored by WordPress.

Source code: [github.com/4wpdev/4wp-account](https://github.com/4wpdev/4wp-account)

#### Key features

 * **Google and GitHub** OAuth sign-in (enable per provider in wp-admin)
 * **Account page** — `[forwp_account]` shortcode or `forwp/account` block (sign-
   in when logged out; cabinet when logged in)
 * **Account menu** — `forwp/account-menu` block or `[forwp_account_menu]` for header
   dropdown
 * **Sign-in buttons** — `[forwp_account_signin_buttons]` or `forwp/auth-buttons`
   block
 * **REST API** — `/wp-json/forwp-account/v1/auth/{provider}` and OAuth callbacks
 * **WooCommerce** — optional social buttons on My Account login/register forms
 * **Subscriber options** — hide admin bar, redirect subscribers away from wp-admin

#### Privacy

OAuth tokens are exchanged server-side. Profile email and name from the provider
are stored in WordPress user records. No data is sent to 4wp.dev.

#### Development

Run tests: `composer install && composer run lint && composer run test`

### External services

This plugin connects to third-party OAuth providers when a visitor starts social
login and when an administrator saves API credentials.

#### Google

 * **When:** User clicks Google sign-in; server exchanges the authorization code
   and reads profile email.
 * **Terms:** [Google API Terms of Service](https://developers.google.com/terms)
 * **Privacy:** [Google Privacy Policy](https://policies.google.com/privacy)

#### GitHub

 * **When:** User clicks GitHub sign-in; server exchanges the code and reads the
   primary verified email.
 * **Terms:** [GitHub Terms of Service](https://docs.github.com/en/site-policy/github-terms/github-terms-of-service)
 * **Privacy:** [GitHub Privacy Statement](https://docs.github.com/en/site-policy/privacy-policies/github-privacy-statement)

#### Meta (Facebook) — planned

 * **When:** Not enabled in this release. Listed in admin as _coming soon_.
 * **Terms:** [Meta Platform Terms](https://developers.facebook.com/terms/)
 * **Privacy:** [Meta Privacy Policy](https://www.facebook.com/privacy/policy/)

#### TikTok — planned

 * **When:** Not enabled in this release. Listed in admin as _coming soon_.
 * **Terms:** [TikTok Terms of Service](https://www.tiktok.com/legal/terms-of-service)
 * **Privacy:** [TikTok Privacy Policy](https://www.tiktok.com/legal/privacy-policy)

## Blocks

This plugin provides 4 blocks.

 *   4WP Account Menu User icon with a classic cabinet dropdown — account sections,
   custom links, and log out.
 *   4WP Account Link Header link with user icon — guest sign-in or account page
   when logged in.
 *   4WP Sign-in Buttons Social sign-in buttons (Google, GitHub, …).
 *   4WP Account Sign-in for guests or account cabinet with left menu for logged-
   in users.

## Installation

 1. Upload the plugin to `/wp-content/plugins/4wp-account/` or install from the Plugins
    screen.
 2. Activate **4WP Account**.
 3. Open **4WP Account  Auth** — enable Google and/or GitHub and paste OAuth credentials.
 4. Copy each **Redirect URI** from settings into Google Cloud or GitHub OAuth app 
    settings.
 5. Create a page with `[forwp_account]` or add the **Account** block.

## FAQ

### Which providers work in 1.0.4?

**Google** and **GitHub** when enabled and configured. **Facebook** and **TikTok**
are shown as _coming soon_ in admin and cannot be used for login.

### Where is the OAuth callback URL?

In **4WP Account  Auth** — use the Redirect URI shown for each provider (built with`
rest_url()`, compatible with custom REST prefixes).

### Does the plugin create WordPress users?

Yes. On first social login, a subscriber account is created from the provider email(
required). Returning users are matched by email and logged in with WordPress auth
cookies after OAuth `state` verification.

## Reviews

There are no reviews for this plugin.

## Contributors & Developers

“4WP Account” is open source software. The following people have contributed to 
this plugin.

Contributors

 *   [ 4wpdev ](https://profiles.wordpress.org/4wpdev/)

[Translate “4WP Account” into your language.](https://translate.wordpress.org/projects/wp-plugins/4wp-account)

### Interested in development?

[Browse the code](https://plugins.trac.wordpress.org/browser/4wp-account/), check
out the [SVN repository](https://plugins.svn.wordpress.org/4wp-account/), or subscribe
to the [development log](https://plugins.trac.wordpress.org/log/4wp-account/) by
[RSS](https://plugins.trac.wordpress.org/log/4wp-account/?limit=100&mode=stop_on_copy&format=rss).

## Changelog

#### 1.0.4

 * Remove unused `register_setting()` calls (automated Plugin Check).
 * Plugin Check warnings: input sanitization, migration SQL `%i`, distignore moved
   to docs.

#### 1.0.3

 * Review fixes: required OAuth `state` validation, `rest_url()` for callback URLs,
   readme aligned with active providers.
 * Account blocks and GitHub provider (from ongoing development).

#### 1.0.2

 * WordPress.org packaging: readme, GPL license, text domain `4wp-account`, quality
   toolchain.
 * Provider enable toggle respected before login.

#### 1.0.1

 * Gmail OAuth, shortcodes, WooCommerce integration.

## Meta

 *  Version **1.0.4**
 *  Last updated **1 day ago**
 *  Active installations **Fewer than 10**
 *  WordPress version ** 6.4 or higher **
 *  Tested up to **7.0**
 *  PHP version ** 8.0 or higher **
 * Tags
 * [account](https://wordpress.org/plugins/tags/account/)[Github](https://wordpress.org/plugins/tags/github/)
   [google](https://wordpress.org/plugins/tags/google/)[oauth](https://wordpress.org/plugins/tags/oauth/)
   [social login](https://wordpress.org/plugins/tags/social-login/)
 *  [Advanced View](https://wordpress.org/plugins/4wp-account/advanced/)

## Ratings

No reviews have been submitted yet.

[Your review](https://wordpress.org/support/plugin/4wp-account/reviews/#new-post)

[See all reviews](https://wordpress.org/support/plugin/4wp-account/reviews/)

## Contributors

 *   [ 4wpdev ](https://profiles.wordpress.org/4wpdev/)

## Support

Got something to say? Need help?

 [View support forum](https://wordpress.org/support/plugin/4wp-account/)