Title: User Toolkit Author: Deryck Published: November 10, 2022 Last modified: October 28, 2024 --- Search plugins ![](https://ps.w.org/user-toolkit/assets/banner-772x250.png?rev=2817098) This plugin **hasn’t been tested with the latest 3 major releases of WordPress**. It may no longer be maintained or supported and may have compatibility issues when used with more recent versions of WordPress. ![](https://ps.w.org/user-toolkit/assets/icon.svg?rev=2829397) # User Toolkit By [Deryck](https://profiles.wordpress.org/deryck/) [Download](https://downloads.wordpress.org/plugin/user-toolkit.1.2.4.zip) * [Details](https://twd.wordpress.org/plugins/user-toolkit/#description) * [Reviews](https://twd.wordpress.org/plugins/user-toolkit/#reviews) * [Installation](https://twd.wordpress.org/plugins/user-toolkit/#installation) * [Development](https://twd.wordpress.org/plugins/user-toolkit/#developers) [Support](https://wordpress.org/support/plugin/user-toolkit/) ## Description User Tools adds missing features to user management, such as basic user activities, including last login, registration dates and user switch from the User administration screen. You can deactivate users without deleting them, allowing you to maintain your ownership of past user activity and content. ### SECURITY **Disabled user** Your own user or the first created used cannot be disabled. Disabled user will not lost data or be deleted under any circumstances. **User switching** Only users with the ability to edit other users can switch user accounts. Unless you create new roles with this capabilities, this is only Administrators on single site installations, and Super Admins on Multisite installations. Passwords are not (and cannot be) revealed. Uses the cookie authentication system in WordPress for user switching. Implements the nonce security system in WordPress, meaning only those who intend to switch users can switch. Full support for user session validation where appropriate. Full support for administration over SSL (if applicable). **REST API Support** The field last_login is included as a result in endpoint wp/v2/users/. Filtering the endpoint wp/v2/users/ using parameter last_login is also supported. ### USAGE **Disable user** 1. Visit the Users menu in WordPress and you will see a enable/disable switch in the list of each user. 2. Click on the “Activate” switch to disable (gray) or to enable (blue). 3. Visit every user profile and check/uncheck “Activate user login” to enable/disabled the user. **Switch user** 1. Visit the Users menu in WordPress and you will see a “Switch to” link in the list of each user. 2. Visit every user profile and click on the “Switch to {user}” to switch to the user. 3. You will be able to switch back using the message that will appear in every admin screen. 4. You will be able to switch back using the “Switch back to {user}” located in the User menu in the admin bar. 5. If the user you switched to does not have access to the admin screens you will be able to switch back using the link located in the right bottom corner of the screen. **User Columns** 1. Visit the Users menu in WordPress and you will see a “Last Login”, “Registered” and “ID” columns by default in the list of each user. 2. Disable all or any column clicking “Screen Options” on the right top corner of the screen. **Retrieve Last Login info using REST API** 1. Get last_login field with ISO 8601 form on endpoint wp/v2/users/ 2. Filter using parameter last_login using the following options wp/v2/users/?last_login =FROM,[TO:optional] using ISO 8601 or Y-m-d format. ### PRIVACY STATEMENT This plugin makes use of a single browser cookie in order to allow users to switch between accounts. The cookie contains only a secure reference hash and does not store any personally identifiable information (PII). The actual user data is stored securely on the server using WordPress transients. The cookie name is: **wp_usrtk_user_switch_ref** This implementation ensures that no user data or PII is exposed in the browser cookies, making it more secure and privacy-friendly. The cookie is set with HTTP-only flag, secure flag (when HTTPS is in use), and SameSite=Strict for enhanced security. The cookie expires after 24 hours or when the user switches back to their original account. **How can I report security bugs?** You can report security bugs through the Patchstack Vulnerability Disclosure Program. The Patchstack team help validate, triage and handle any security vulnerabilities. [Report a security vulnerability.](https://patchstack.com/database/vdp/user-toolkit) ## Screenshots * [[ * Login activation/deactivation, Registration date, Last Login date and ID columns. * [[ * Filter by login status. * [[ * Login status, registration and last login dates in user profile. * [[ ## Installation 1. Upload `user-toolkit` to the `/wp-content/plugins/` directory or install directly through the plugin installer. 2. Activate the plugin through the ‘Plugins’ menu in WordPress or by using the link provided by the plugin installer. 3. Disable any extra column you don’t want, using Screen Options in the Users screen. 4. Enable or disable any user login access in the Users screen or in the User Edit screen. ## FAQ ### Will this plugin deactivate all users login by default? No. All users will remain active by default. You select what users do you want to deactivate. ### Last Login dates will be displayed as soon as I activate User Tools? No. WordPress does not have that information. It’s introduced with the plugin so will be tracked as soon as you enable it. However, we are working to have the last activity of the user available as soon as the plugin is activated, even if the user has not logged in yet. ## Reviews ![](https://secure.gravatar.com/avatar/f6ea7f2bbdabba71f9058aff3be068fff04ab7dcb08f4ae5d2a17fdb6367c132? s=60&d=retro&r=g) ### 󠀁[AMAZING](https://wordpress.org/support/topic/amazing-3716/)󠁿 [neomie6011](https://profiles.wordpress.org/neomie6011/) April 1, 2023 1 reply Amazing awesome plugin, works just as described. Keep creating, you are amazing!!!!! ![](https://secure.gravatar.com/avatar/cdb7977fd18f45ee98daf4ea3737c4ad8a61c9d761ea4ea91b4bb66f8aa30a53? s=60&d=retro&r=g) ### 󠀁[Very helpful plugin for user management](https://wordpress.org/support/topic/very-helpful-plugin-for-user-management/)󠁿 [Ts.Kalandadze](https://profiles.wordpress.org/tskalandadze/) March 1, 2023 1 reply User Toolkit adds some helpful features for user management. It comes with the functionality to switch back and forth between different users which can be super useful for testing. Does not come with UI bloat which is important. ![](https://secure.gravatar.com/avatar/618371816545c570449966418d376155b3e96cada80af2c51015cc36253024db? s=60&d=retro&r=g) ### 󠀁[The missing link](https://wordpress.org/support/topic/the-missing-link-6/)󠁿 [Billy Wilcosky](https://profiles.wordpress.org/wilcosky/) February 19, 2023 6 replies WordPress needed this. There are similar plugins but this one seems cleaner, and has more/better features. I have an issue though. I have three WordPress installations currently. With one of them the user-switching feature works. With the other two, it does not. I will click switch user and it redirects to the front end of my site but I am still logged in as the admin. One of the two that doesn’t work has very few plugins installed which initially is making me lean away from it being a plugin conflict. I’m wondering if it’s a cookie issue. If I use the feature on one site and it sets a browser cookie, then I go to another WordPress site to use the same tool, could there be a cookie conflict? My only advice right now, if you have not yet, is to try testing this plugin with multiple live WordPress sites. I’m really hoping this can get figured out because I love all of the other features and information the plugin gives my users page. ![](https://secure.gravatar.com/avatar/111643ac98f39db50c6d169a38c5bb981af9ba8399ff23453d7fef2c4b288571? s=60&d=retro&r=g) ### 󠀁[FANTASTIC Plugin](https://wordpress.org/support/topic/fantastic-plugin-1814/)󠁿 [nathaningram](https://profiles.wordpress.org/nathaningram/) December 5, 2022 1 reply Very useful functionality and expertly executed. Thanks for your work here! [ Read all 4 reviews ](https://wordpress.org/support/plugin/user-toolkit/reviews/) ## Contributors & Developers “User Toolkit” is open source software. The following people have contributed to this plugin. Contributors * [ Deryck ](https://profiles.wordpress.org/deryck/) “User Toolkit” has been translated into 3 locales. Thank you to [the translators](https://translate.wordpress.org/projects/wp-plugins/user-toolkit/contributors) for their contributions. [Translate “User Toolkit” into your language.](https://translate.wordpress.org/projects/wp-plugins/user-toolkit) ### Interested in development? [Browse the code](https://plugins.trac.wordpress.org/browser/user-toolkit/), check out the [SVN repository](https://plugins.svn.wordpress.org/user-toolkit/), or subscribe to the [development log](https://plugins.trac.wordpress.org/log/user-toolkit/) by [RSS](https://plugins.trac.wordpress.org/log/user-toolkit/?limit=100&mode=stop_on_copy&format=rss). ## Changelog #### 1.2.4 * Security: Improved user switching mechanism with more secure cookie handling * Security: Removed personally identifiable information from cookies * Security: Added SameSite cookie attribute for enhanced security * Security: Improved validation of user switching process * Added PHP 7.4 as minimum required version #### 1.2.3 * Fixed styles for switch to previous user modal box #### 1.2.2 * Fixed the user switch. Now is on left when disabled, and in right when enabled. * Fixed broken styles on use switch when other plugins are installed. * User “switch info” widget is displayed on top of everything, on client view. #### 1.2.1 * Added last_login as a filter parameter in user endpoint. #### 1.2 * Last Login date is now filterable in User List * Added last_login field to Users endpoint * Improved the Login Status filter in User List #### 1.1.4 * Fixed and issue that prevents user switching if there is no access to wp-login. php #### 1.1.3 * Fixed and issue that prevents user to be ordered by Last Login #### 1.1.2 * Fixed an issue that allows disabling the first user created. * Fixed an issue that disabled the user when editing their own profile. #### 1.1 * Switch to any user account from the Users screen and be able to switch back to your own user later. * Fix: First created user cannot be disabled. #### 1.0.4 * Same user displays ON/OFF in login status in User List * Same user cannot disable his own login status in User List #### 1.0.3 * Stability and security improvements #### 1.0.2 * Ability to migrate last login data from When Last Login and Ultimate Member plugins #### 1.0.1 * Downgraded to support PHP 7.3 #### 1.0.0 * Initial Release ## Meta * Version **1.2.4** * Last updated **1 year ago** * Active installations **100+** * WordPress version ** 5.9.5 or higher ** * Tested up to **6.6.5** * PHP version ** 7.4 or higher ** * Languages * [Chinese (Taiwan)](https://tw.wordpress.org/plugins/user-toolkit/), [English (US)](https://wordpress.org/plugins/user-toolkit/), [Spanish (Chile)](https://cl.wordpress.org/plugins/user-toolkit/), and [Spanish (Spain)](https://es.wordpress.org/plugins/user-toolkit/). * [Translate into your language](https://translate.wordpress.org/projects/wp-plugins/user-toolkit) * Tags * [disable user](https://twd.wordpress.org/plugins/tags/disable-user/)[last login](https://twd.wordpress.org/plugins/tags/last-login/) [registration date](https://twd.wordpress.org/plugins/tags/registration-date/) [user profile](https://twd.wordpress.org/plugins/tags/user-profile/) * [Advanced View](https://twd.wordpress.org/plugins/user-toolkit/advanced/) ## Ratings 5 out of 5 stars. * [ 4 5-star reviews ](https://wordpress.org/support/plugin/user-toolkit/reviews/?filter=5) * [ 0 4-star reviews ](https://wordpress.org/support/plugin/user-toolkit/reviews/?filter=4) * [ 0 3-star reviews ](https://wordpress.org/support/plugin/user-toolkit/reviews/?filter=3) * [ 0 2-star reviews ](https://wordpress.org/support/plugin/user-toolkit/reviews/?filter=2) * [ 0 1-star reviews ](https://wordpress.org/support/plugin/user-toolkit/reviews/?filter=1) [Add my review](https://wordpress.org/support/plugin/user-toolkit/reviews/#new-post) [See all reviews](https://wordpress.org/support/plugin/user-toolkit/reviews/) ## Contributors * [ Deryck ](https://profiles.wordpress.org/deryck/) ## Support Got something to say? Need help? [View support forum](https://wordpress.org/support/plugin/user-toolkit/) ## Donate Would you like to support the advancement of this plugin? [ Donate to this plugin ](https://www.paypal.com/donate/?hosted_button_id=XHK37YBVVMP58)