Title: TempAccessly – Temporary Admin Access Author: Akshar Makwana Published: September 10, 2026 Last modified: September 10, 2026 --- Search plugins ![](https://ps.w.org/tempaccessly/assets/banner-772x250.png?rev=3690311) ![](https://ps.w.org/tempaccessly/assets/icon-256x256.png?rev=3690311) # TempAccessly – Temporary Admin Access By [Akshar Makwana](https://profiles.wordpress.org/aksharmakwana6/) [Download](https://downloads.wordpress.org/plugin/tempaccessly.1.0.0.zip) * [Details](https://wordpress.org/plugins/tempaccessly/#description) * [Reviews](https://wordpress.org/plugins/tempaccessly/#reviews) * [Installation](https://wordpress.org/plugins/tempaccessly/#installation) * [Development](https://wordpress.org/plugins/tempaccessly/#developers) [Support](https://wordpress.org/support/plugin/tempaccessly/) ## Description TempAccessly lets a site administrator create a dedicated temporary WordPress user and generate a secure login URL. The account is automatically controlled by the configured expiration time and can be revoked, extended, or given a newly generated login link at any time. The login token is a 256-bit random value. Only a salted SHA-256 token hash is stored in the access table; the raw token is shown once to the administrator and is not stored in the plugin database or audit log. The plugin adds these pages under **Users**: * **TempAccessly – Temporary Admin Access** — create and manage temporary access records. * **TempAccessly Settings** — configure default role, duration, maximum duration, and account cleanup. * **TempAccessly Audit Logs** — review access lifecycle events. ### Key Features * Dedicated temporary WordPress accounts that do not modify permanent users. * Passwordless, token-protected login URLs with automatic expiration. * Role selection with an explicit confirmation requirement for Administrator access. * Duration presets from 15 minutes through 7 days, limited by the configured maximum. * Real-time checks that block expired, revoked, disabled, or orphaned temporary accounts. * Immediate revoke, active-session termination, token regeneration, and controlled extension. * Automatic cleanup of temporary accounts and old access records. * Audit logging for creation, login success/failure, extension, regeneration, revocation, expiration, and deletion. * WordPress personal-data export and erasure integration. ### Security TempAccessly uses: * Cryptographically secure 256-bit random tokens. * Salted SHA-256 token hashes instead of storing raw login tokens. * WordPress nonces for state-changing admin and AJAX requests. * `manage_options` capability checks for plugin administration. * Server-side allow-list validation for roles, durations, access IDs, and administrator confirmation. * Sanitization on request data and escaping on admin output. * Prepared SQL statements for variable database values and allow-listed SQL identifiers. * Immediate session destruction and authentication blocking for revoked, expired, and disabled accounts. * Strict safeguards before a temporary user can be deleted or disabled, including a plugin-owned user marker, username prefix, and protection for user ID 1. **Important:** A login URL is a bearer credential. Anyone who has an active URL can use the linked temporary account. Share URLs only with the intended recipient through a secure channel. Regenerating or revoking access invalidates the previous URL. ### How It Works 1. Go to **Users > TempAccessly – Temporary Admin Access**. 2. Click **+ Create Temporary Access**. 3. Enter the recipient name, optional email, role, duration, and optional notes. 4. Confirm the warning when assigning the Administrator role. 5. Copy the generated login URL and share it securely. 6. Manage the record with **Extend**, **Regenerate**, **Revoke**, or **Delete**. JavaScript is used for the normal creation interface. A server-side form handler remains available for the creation, revoke, and delete operations. ### Privacy TempAccessly processes data required to create, authenticate, manage, expire, and audit temporary access. #### Data stored Depending on the fields used and activity recorded, the plugin may store: * Recipient name and optional recipient email address. * Optional purpose or notes. * Temporary WordPress username and user ID, assigned role, creator user ID, status, and lifecycle timestamps. * Audit actions and timestamps. * IP address and browser user-agent for audit events when provided by the web server. * Temporary-user session data managed by WordPress while the recipient is signed in. Raw login tokens and passwords are not stored in the plugin access records or audit logs. #### Why is the data used? The data is used to provision temporary users, validate login links, enforce expiration and revocation, terminate temporary sessions, display access records, and provide an audit trail. #### Who can access the data? Plugin administration and access records are available only to users with the `manage_options` capability. #### Data sharing The plugin does not transmit this data to external services, APIs, or third parties. #### Retention * Active records remain while access is active. * Expired and revoked access records are eligible for removal after 30 days through the scheduled cleanup task. * Temporary accounts are deleted by default after expiration or revocation; when automatic deletion is disabled, they are retained in a disabled state. * Related audit events are removed when the corresponding access record is removed by retention cleanup or personal-data erasure. A manual access deletion may record a final deletion event before retention removes it. #### Export and erasure TempAccessly registers with **Tools > Export Personal Data** and **Tools > Erase Personal Data**. Matching access records are located by recipient email address. Export includes the matching access information and related audit events. Erasure removes matching temporary accounts, access records, and associated audit events where the data is available. #### Uninstallation When uninstalled through WordPress, TempAccessly removes plugin-created temporary accounts, both plugin tables, plugin options, and the scheduled cleanup hook. ## Screenshots [⌊TempAccessly dashboard and access list.⌉⌊TempAccessly dashboard and access list .⌉[ TempAccessly dashboard and access list. [⌊Create temporary access form.⌉⌊Create temporary access form.⌉[ Create temporary access form. [⌊One-time login URL screen.⌉⌊One-time login URL screen.⌉[ One-time login URL screen. [⌊TempAccessly settings.⌉⌊TempAccessly settings.⌉[ TempAccessly settings. [⌊TempAccessly audit logs.⌉⌊TempAccessly audit logs.⌉[ TempAccessly audit logs. ## Installation 1. Upload the `tempaccessly` folder to `/wp-content/plugins/`, or upload the ZIP from** Plugins > Add New > Upload Plugin**. 2. Activate **TempAccessly – Temporary Admin Access**. 3. Open **Users > TempAccessly – Temporary Admin Access**. ## FAQ ### Can I create Administrator access? Yes. Administrator is available when the role exists on the site, but the creation form requires an explicit confirmation because it grants full site control. ### Does the recipient need a password? No. The recipient uses the generated login URL while the access record is active. ### What happens when access expires? The token stops working, active sessions are terminated, and the temporary account is deleted by default. When automatic deletion is disabled, the temporary account is disabled instead. A daily WP-Cron task also performs retention cleanup; WP-Cron execution can be delayed on low-traffic sites. ### Can I revoke access before it expires? Yes. Revocation invalidates the token, terminates active sessions, and deletes or disables the temporary account according to the cleanup setting. ### Can I regenerate a login link? Yes. Regeneration creates a new token and invalidates the previous URL while retaining the same account and expiration. ### Can I extend access? Yes. Only active records can be extended, and the new expiration cannot exceed the configured maximum duration measured from the original creation time. ### Are permanent users affected? No. TempAccessly only deletes or disables accounts that carry its own temporary- user marker and expected username prefix. User ID 1 is always protected. ### Does the plugin use an external service? No. TempAccessly does not send access, account, or audit information to an external API or third-party service. ## Reviews There are no reviews for this plugin. ## Contributors & Developers “TempAccessly – Temporary Admin Access” is open source software. The following people have contributed to this plugin. Contributors * [ Akshar Makwana ](https://profiles.wordpress.org/aksharmakwana6/) [Translate “TempAccessly – Temporary Admin Access” into your language.](https://translate.wordpress.org/projects/wp-plugins/tempaccessly) ### Interested in development? [Browse the code](https://plugins.trac.wordpress.org/browser/tempaccessly/), check out the [SVN repository](https://plugins.svn.wordpress.org/tempaccessly/), or subscribe to the [development log](https://plugins.trac.wordpress.org/log/tempaccessly/) by [RSS](https://plugins.trac.wordpress.org/log/tempaccessly/?limit=100&mode=stop_on_copy&format=rss). ## Changelog #### 1.0.0 * Renamed the plugin to a distinctive product name and aligned the slug, folder, main file, text domain, and translation template. * Replaced the short TAA prefix with the unique `tempaccessly` prefix across plugin- owned code, options, metadata, tables, AJAX actions, CSS, and JavaScript. * Removed plugin-owned `function_exists()` and `class_exists()` guards so the plugin no longer relies on collision-prone conditional declarations. * Reviewed capability checks, nonce verification, input sanitization, output escaping, SQL preparation, token handling, temporary-user safeguards, and stored-data handling. * Improved cleanup of related audit events and updated privacy documentation. ## Meta * Version **1.0.0** * Last updated **24 hours ago** * Active installations **Fewer than 10** * WordPress version ** 6.2 or higher ** * Tested up to **7.1** * PHP version ** 7.2 or higher ** * Tags * [admin access](https://wordpress.org/plugins/tags/admin-access/)[developer access](https://wordpress.org/plugins/tags/developer-access/) [passwordless login](https://wordpress.org/plugins/tags/passwordless-login/)[temporary access](https://wordpress.org/plugins/tags/temporary-access/) [temporary login](https://wordpress.org/plugins/tags/temporary-login/) * [Advanced View](https://wordpress.org/plugins/tempaccessly/advanced/) ## Ratings No reviews have been submitted yet. [Your review](https://wordpress.org/support/plugin/tempaccessly/reviews/#new-post) [See all reviews](https://wordpress.org/support/plugin/tempaccessly/reviews/) ## Contributors * [ Akshar Makwana ](https://profiles.wordpress.org/aksharmakwana6/) ## Support Got something to say? Need help? [View support forum](https://wordpress.org/support/plugin/tempaccessly/)