{"id":116691,"date":"2020-02-04T18:06:13","date_gmt":"2020-02-04T18:06:13","guid":{"rendered":"https:\/\/wordpress.org\/plugins\/login-as-customer-or-user\/"},"modified":"2026-05-09T04:08:53","modified_gmt":"2026-05-09T04:08:53","slug":"login-as-customer-or-user","status":"publish","type":"plugin","link":"https:\/\/ast.wordpress.org\/plugins\/login-as-customer-or-user\/","author":13610376,"comment_status":"closed","ping_status":"closed","template":"","meta":{"version":"4.1.0","stable_tag":"4.1.0","tested":"6.9.4","requires":"5.0","requires_php":"7.4","requires_plugins":null,"header_name":"Login as User or Customer \u2014 User Switching","header_author":"wp-buy","header_description":"Login as Customer or user WordPress plugin allows admins to have easy access to the frontend as a specific customer and thus solve problems or provide better and faster support","assets_banners_color":"4f5960","last_updated":"2026-05-09 04:08:53","external_support_url":"","external_repository_url":"","donate_link":"","header_plugin_uri":"","header_author_uri":"https:\/\/wp-buy.com","rating":3,"author_block_rating":0,"active_installs":100,"downloads":13810,"num_ratings":0,"support_threads":0,"support_threads_resolved":0,"author_block_count":0,"sections":["description","installation","faq","changelog"],"tags":{"1.3":{"tag":"1.3","author":"osamaesh","date":"2020-10-24 14:23:02"},"1.6":{"tag":"1.6","author":"osamaesh","date":"2020-12-23 10:14:50"},"2.2":{"tag":"2.2","author":"osamaesh","date":"2021-06-01 00:04:12"},"2.3":{"tag":"2.3","author":"osamaesh","date":"2021-06-16 14:01:34"},"2.4":{"tag":"2.4","author":"osamaesh","date":"2021-07-28 08:38:46"},"2.5":{"tag":"2.5","author":"osamaesh","date":"2021-08-05 08:22:23"},"2.6":{"tag":"2.6","author":"osamaesh","date":"2021-08-08 12:25:18"},"2.7":{"tag":"2.7","author":"osamaesh","date":"2021-09-11 13:02:32"},"2.8":{"tag":"2.8","author":"osamaesh","date":"2021-10-25 09:21:06"},"2.9":{"tag":"2.9","author":"osamaesh","date":"2021-11-03 09:16:09"},"3.1":{"tag":"3.1","author":"osamaesh","date":"2022-05-25 11:31:40"},"3.2":{"tag":"3.2","author":"osamaesh","date":"2022-09-23 06:26:03"},"3.3":{"tag":"3.3","author":"osamaesh","date":"2023-04-06 12:06:43"},"3.5":{"tag":"3.5","author":"wp-buy","date":"2023-06-11 09:46:58"},"3.6":{"tag":"3.6","author":"wp-buy","date":"2023-09-11 15:18:15"},"3.7":{"tag":"3.7","author":"wp-buy","date":"2023-09-16 15:56:43"},"3.8":{"tag":"3.8","author":"osamaesh","date":"2024-02-06 12:16:28"},"3.9.1":{"tag":"3.9.1","author":"osamaesh","date":"2026-05-05 23:58:14"},"4.0.0":{"tag":"4.0.0","author":"osamaesh","date":"2026-05-06 12:39:49"},"4.1.0":{"tag":"4.1.0","author":"osamaesh","date":"2026-05-09 04:08:53"}},"upgrade_notice":[],"ratings":{"1":6,"2":0,"3":1,"4":0,"5":6},"assets_icons":{"icon-128x128.png":{"filename":"icon-128x128.png","revision":2583435,"resolution":"128x128","location":"assets","locale":"","width":128,"height":128},"icon-256x256.png":{"filename":"icon-256x256.png","revision":2583435,"resolution":"256x256","location":"assets","locale":"","width":256,"height":256}},"assets_banners":{"banner-772x250.png":{"filename":"banner-772x250.png","revision":2408835,"resolution":"772x250","location":"assets","locale":"","width":950,"height":300}},"assets_blueprints":{},"all_blocks":[],"tagged_versions":["1.3","1.6","2.2","2.3","2.4","2.5","2.6","2.7","2.8","2.9","3.1","3.2","3.3","3.5","3.6","3.7","3.8","3.9.1","4.0.0","4.1.0"],"block_files":[],"assets_screenshots":{"screenshot-1.png":{"filename":"screenshot-1.png","revision":2244917,"resolution":"1","location":"assets","locale":"","width":520,"height":329},"screenshot-2.png":{"filename":"screenshot-2.png","revision":2244917,"resolution":"2","location":"assets","locale":"","width":1001,"height":413},"screenshot-3.png":{"filename":"screenshot-3.png","revision":2444878,"resolution":"3","location":"assets","locale":"","width":1101,"height":916}},"screenshots":{"1":"Users page \u2014 Login As button next to each user","2":"WooCommerce orders page \u2014 Login As column (Pro)","3":"Front-end notice bar \u2014 shown while switched into another account"}},"plugin_section":[],"plugin_tags":[248715,42294,168751,3749,286],"plugin_category":[38],"plugin_contributors":[181722,125473,78387],"plugin_business_model":[],"class_list":["post-116691","plugin","type-plugin","status-publish","hentry","plugin_tags-login-as-customer","plugin_tags-login-as-user","plugin_tags-switch-user","plugin_tags-user-switching","plugin_tags-woocommerce","plugin_category-authentication","plugin_contributors-mohmmedalagha","plugin_contributors-osamaesh","plugin_contributors-wp-buy","plugin_committers-osamaesh","plugin_committers-wp-buy"],"banners":{"banner":"https:\/\/ps.w.org\/login-as-customer-or-user\/assets\/banner-772x250.png?rev=2408835","banner_2x":false,"banner_rtl":false,"banner_2x_rtl":false},"icons":{"svg":false,"icon":"https:\/\/ps.w.org\/login-as-customer-or-user\/assets\/icon-128x128.png?rev=2583435","icon_2x":"https:\/\/ps.w.org\/login-as-customer-or-user\/assets\/icon-256x256.png?rev=2583435","generated":false},"screenshots":[{"src":"https:\/\/ps.w.org\/login-as-customer-or-user\/assets\/screenshot-1.png?rev=2244917","caption":"Users page \u2014 Login As button next to each user"},{"src":"https:\/\/ps.w.org\/login-as-customer-or-user\/assets\/screenshot-2.png?rev=2244917","caption":"WooCommerce orders page \u2014 Login As column (Pro)"},{"src":"https:\/\/ps.w.org\/login-as-customer-or-user\/assets\/screenshot-3.png?rev=2444878","caption":"Front-end notice bar \u2014 shown while switched into another account"}],"raw_content":"<!--section=description-->\n<p><strong>Login as User or Customer<\/strong> is a powerful user switching plugin that lets admins and support staff instantly switch into any user account \u2014 without knowing their password. It's the fastest way to see exactly what your customer sees, troubleshoot issues, and provide hands-on support directly from your WordPress dashboard.<\/p>\n\n<blockquote>\n  <p><strong>WooCommerce store owners:<\/strong> This plugin is purpose-built for you. Switch to a customer from the Orders screen, manage their cart, and create orders on their behalf \u2014 ideal for phone orders and assisted sales. WooCommerce features require the <a href=\"https:\/\/www.wp-buy.com\/product\/login-as-customer-or-user-pro\/\">Pro version<\/a>.<\/p>\n<\/blockquote>\n\n<p>[vimeo https:\/\/vimeo.com\/584505898]<\/p>\n\n<h4>Who is this for?<\/h4>\n\n<ul>\n<li><strong>WooCommerce stores<\/strong> \u2014 assist customers with orders, cart issues, and account problems without asking for their password<\/li>\n<li><strong>Membership sites<\/strong> \u2014 verify what members see after logging in<\/li>\n<li><strong>Agencies &amp; developers<\/strong> \u2014 test roles and permissions across any user account instantly<\/li>\n<li><strong>Support teams<\/strong> \u2014 reproduce customer-reported bugs in one click<\/li>\n<\/ul>\n\n<h4>Free Features<\/h4>\n\n<ul>\n<li><strong>One-click user switching<\/strong> \u2014 switch to any non-admin account from the Users screen<\/li>\n<li><strong>Switch from user profile<\/strong> \u2014 Login As button on the Edit User screen<\/li>\n<li><strong>Go Back in one click<\/strong> \u2014 a persistent bar on the front end returns you to your original account instantly<\/li>\n<li><strong>No password needed<\/strong> \u2014 access any account without exposing credentials<\/li>\n<li><strong>Role-based access control<\/strong> \u2014 choose which roles are allowed to use the switch feature<\/li>\n<li><strong>2FA compatible<\/strong> \u2014 works alongside most two-factor authentication plugins<\/li>\n<li><strong>Multisite compatible<\/strong> \u2014 works on WordPress network installations<\/li>\n<li><strong>Nonce-protected<\/strong> \u2014 every switch action is verified with a WordPress nonce<\/li>\n<li><strong>Secure session storage<\/strong> \u2014 switch state stored server-side using WordPress transients, not exposed cookies<\/li>\n<\/ul>\n\n<h4>Pro Features<\/h4>\n\n<ul>\n<li>\u2b50 <strong>WooCommerce Orders page<\/strong> \u2014 Login As button next to every order<\/li>\n<li>\u2b50 <strong>WooCommerce Order detail<\/strong> \u2014 switch to the customer from the single order screen<\/li>\n<li>\u2b50 <strong>Cart management<\/strong> \u2014 add, remove, and edit products in the customer's cart<\/li>\n<li>\u2b50 <strong>Create orders on behalf of customers<\/strong> \u2014 perfect for phone and assisted sales<\/li>\n<li>\u2b50 <strong>Advanced role management<\/strong> \u2014 granular control over who can switch to whom<\/li>\n<li>\u2b50 <strong>Custom redirect URL<\/strong> \u2014 choose where you land after switching<\/li>\n<li>\u2b50 <strong>Activity log<\/strong> \u2014 track every switch action for auditing purposes<\/li>\n<li>\u2b50 <strong>Shortcode support<\/strong> \u2014 place Login As buttons anywhere on your site<\/li>\n<\/ul>\n\n<p><a href=\"https:\/\/www.wp-buy.com\/product\/login-as-customer-or-user-pro\/\">Upgrade to Pro \u2192<\/a><\/p>\n\n<h4>How It Works<\/h4>\n\n<ol>\n<li>Go to <strong>Users<\/strong> in your WordPress admin<\/li>\n<li>Click <strong>Login as this user<\/strong> next to any non-admin account<\/li>\n<li>You are instantly switched into that account \u2014 no password required<\/li>\n<li>Browse the site as that user<\/li>\n<li>Click <strong>Go back<\/strong> in the bar at the bottom of the screen to return to your admin account<\/li>\n<\/ol>\n\n<h4>Security<\/h4>\n\n<p>Security is the foundation of this plugin. Every action is protected by multiple layers:<\/p>\n\n<ul>\n<li><strong>Nonce verification<\/strong> on every switch and return action<\/li>\n<li><strong>Capability checks<\/strong> \u2014 only users with <code>edit_users<\/code>, <code>manage_options<\/code>, or <code>manage_woocommerce<\/code> can switch<\/li>\n<li><strong>Admin account protection<\/strong> \u2014 switching into administrator accounts is blocked<\/li>\n<li><strong>Server-side session storage<\/strong> \u2014 switch state stored in WordPress transients with a 1-hour TTL that refreshes on every page load<\/li>\n<li><strong>HttpOnly + SameSite=Lax cookies<\/strong> \u2014 session tokens protected against XSS and CSRF<\/li>\n<li><strong>No data sharing<\/strong> \u2014 no data is sent to any external service<\/li>\n<\/ul>\n\n<p>Security vulnerabilities are managed through the <a href=\"https:\/\/patchstack.com\/database\/vdp\/login-as-customer-or-user\">Patchstack Vulnerability Disclosure Program<\/a>. All reported issues are reviewed, patched, and disclosed responsibly.<\/p>\n\n<h4>Privacy<\/h4>\n\n<p>This plugin does not send data to any third party, does not include any third-party resources, and never will.<\/p>\n\n<p>The plugin uses a single browser cookie (<code>loginas_session_token<\/code>) to identify the current switch session. The cookie stores only a random 64-character token \u2014 no user data. The actual session data (user IDs) is stored server-side in WordPress transients.<\/p>\n\n<h4>Compatibility<\/h4>\n\n<ul>\n<li>WordPress 5.0+<\/li>\n<li>WordPress Multisite<\/li>\n<li>WooCommerce (Pro)<\/li>\n<li>PHP 7.4, 8.0, 8.1, 8.2, 8.3<\/li>\n<li>Compatible with most 2FA and security plugins<\/li>\n<\/ul>\n\n<h3>Security<\/h3>\n\n<p>This plugin is enrolled in the <a href=\"https:\/\/patchstack.com\/database\/vdp\/login-as-customer-or-user\">Patchstack Vulnerability Disclosure Program<\/a>.<\/p>\n\n<p>To report a security vulnerability, please use the Patchstack mVDP link above. Do not report security issues through the WordPress support forum.<\/p>\n\n<!--section=installation-->\n<p><strong>From the WordPress dashboard:<\/strong><\/p>\n\n<ol>\n<li>Go to <strong>Plugins \u2192 Add New<\/strong><\/li>\n<li>Search for <strong>Login as User or Customer<\/strong><\/li>\n<li>Click <strong>Install Now<\/strong> then <strong>Activate<\/strong><\/li>\n<li>Visit <strong>Login AS<\/strong> in the admin menu to configure settings<\/li>\n<\/ol>\n\n<p><strong>Manual installation:<\/strong><\/p>\n\n<ol>\n<li>Download <code>login-as-customer-or-user.zip<\/code><\/li>\n<li>Go to <strong>Plugins \u2192 Add New \u2192 Upload Plugin<\/strong><\/li>\n<li>Upload the zip and click <strong>Activate Plugin<\/strong><\/li>\n<\/ol>\n\n<!--section=faq-->\n<dl>\n<dt id=\"who%20can%20switch%20user%20accounts%3F\"><h3>Who can switch user accounts?<\/h3><\/dt>\n<dd><p>Only users with the <code>edit_users<\/code>, <code>manage_options<\/code>, or <code>manage_woocommerce<\/code> capability. You can further restrict this to specific roles in the plugin settings under <strong>Login AS \u2192 Settings<\/strong>.<\/p><\/dd>\n<dt id=\"can%20i%20switch%20into%20an%20administrator%20account%3F\"><h3>Can I switch into an administrator account?<\/h3><\/dt>\n<dd><p>No. Switching into any account with administrator-level capabilities (<code>edit_users<\/code> or <code>manage_options<\/code>) is blocked for security reasons.<\/p><\/dd>\n<dt id=\"how%20do%20i%20switch%20back%20to%20my%20original%20account%3F\"><h3>How do I switch back to my original account?<\/h3><\/dt>\n<dd><p>A bar appears at the bottom of the page while you are switched in. Click <strong>Go back<\/strong> to return to your original admin account instantly.<\/p><\/dd>\n<dt id=\"does%20this%20work%20with%20woocommerce%3F\"><h3>Does this work with WooCommerce?<\/h3><\/dt>\n<dd><p>Yes \u2014 WooCommerce features are available in the <a href=\"https:\/\/www.wp-buy.com\/product\/login-as-customer-or-user-pro\/\">Pro version<\/a>. This includes a Login As button on the orders list, a meta box on the single order screen, cart management, and the ability to create orders on behalf of customers.<\/p><\/dd>\n<dt id=\"does%20this%20work%20with%20two-factor%20authentication%20%282fa%29%3F\"><h3>Does this work with two-factor authentication (2FA)?<\/h3><\/dt>\n<dd><p>Yes. The plugin is compatible with most 2FA solutions. The 2FA prompt is bypassed when switching because you authenticate as the admin, not the target user.<\/p><\/dd>\n<dt id=\"does%20this%20work%20on%20wordpress%20multisite%3F\"><h3>Does this work on WordPress Multisite?<\/h3><\/dt>\n<dd><p>Yes. The plugin works on Multisite installations.<\/p><\/dd>\n<dt id=\"what%20happens%20if%20i%20close%20my%20browser%20while%20switched%20in%3F\"><h3>What happens if I close my browser while switched in?<\/h3><\/dt>\n<dd><p>The switch session is stored as a WordPress transient with a 1-hour TTL that refreshes on every page load. If the transient expires or is evicted from the cache, the session ends and you will be returned to a normal logged-out state. Simply log back into your admin account.<\/p><\/dd>\n<dt id=\"does%20the%20plugin%20send%20any%20data%20externally%3F\"><h3>Does the plugin send any data externally?<\/h3><\/dt>\n<dd><p>No. The plugin does not send data to any third party, does not include any third-party resources, and does not use external APIs.<\/p><\/dd>\n<dt id=\"how%20can%20i%20report%20security%20bugs%3F\"><h3>How can I report security bugs?<\/h3><\/dt>\n<dd><p>You can report security bugs through the Patchstack Vulnerability Disclosure Program. The Patchstack team help validate, triage and handle any security vulnerabilities. <a href=\"https:\/\/patchstack.com\/database\/vdp\/40615b8f-1f6a-4c82-8567-1e2f4dd0689c\">Report a security vulnerability.<\/a><\/p><\/dd>\n\n<\/dl>\n\n<!--section=changelog-->\n<h4>v 4.1.0<\/h4>\n\n<ul>\n<li>New: Redesigned settings page with modern UI<\/li>\n<li>New: \"Enable Plugin In\" section \u2014 control where the Login As button appears (Users Page \/ User Profile Page)<\/li>\n<li>New: User Profile Page now shows a Login As button directly on the Edit User screen<\/li>\n<\/ul>\n\n<h4>v 4.0.0<\/h4>\n\n<ul>\n<li>Fixed: \"Go back\" button failed for editors and non-admin roles \u2014 the capability check was incorrectly applied to the switched-in user instead of the original admin<\/li>\n<li>Improved: Session TTL refreshes on every page load \u2014 session stays alive while user is active<\/li>\n<li>Improved: Cookie domain now respects WordPress COOKIE_DOMAIN constant<\/li>\n<li>Improved: Pro upgrade notice in WooCommerce uses a clear badge instead of a broken link<\/li>\n<li>Improved: Review notice waits 7 days after activation before appearing<\/li>\n<\/ul>\n\n<h4>v 3.9.1<\/h4>\n\n<ul>\n<li>Security hardening for the user switching workflow<\/li>\n<li>Removed insecure cookie\/session-based account switching<\/li>\n<li>Added nonce and capability checks for all switch and return actions<\/li>\n<li>Restricted switching to non-privileged target accounts only<\/li>\n<li>Implemented secure server-side session storage using WordPress transients<\/li>\n<li>Added proper session cleanup on logout and switch-back<\/li>\n<\/ul>\n\n<h4>v 3.7<\/h4>\n\n<ul>\n<li>Removing unwanted images<\/li>\n<li>Fixed return to admin function - hot fix 3<\/li>\n<\/ul>\n\n<h4>v 3.6<\/h4>\n\n<ul>\n<li>Fixed return to admin issue - hot fix 2<\/li>\n<\/ul>\n\n<h4>v 3.5<\/h4>\n\n<ul>\n<li>Fixed return to admin issue - hot fix<\/li>\n<li>New responsive interface<\/li>\n<\/ul>\n\n<h4>v 3.3<\/h4>\n\n<ul>\n<li>Security bug fixes<\/li>\n<\/ul>\n\n<h4>v 3.2<\/h4>\n\n<ul>\n<li>Bug fixes and styling improvements<\/li>\n<\/ul>\n\n<h4>v 3.1<\/h4>\n\n<ul>\n<li>Updated tested up to<\/li>\n<\/ul>\n\n<h4>v 2.9<\/h4>\n\n<ul>\n<li>Bug fixing in users and orders page<\/li>\n<\/ul>\n\n<h4>v 2.8<\/h4>\n\n<ul>\n<li>Bug fixing in user switching with 2FA<\/li>\n<\/ul>\n\n<h4>v 2.7<\/h4>\n\n<ul>\n<li>Bug fixing in users page and WooCommerce orders page<\/li>\n<\/ul>\n\n<h4>v 2.6<\/h4>\n\n<ul>\n<li>Bug fixing in users page (remove limitation)<\/li>\n<li>Adding new option \u2014 Go Back button position<\/li>\n<\/ul>\n\n<h4>v 2.5<\/h4>\n\n<ul>\n<li>Bug fixing in button position<\/li>\n<\/ul>\n\n<h4>v 2.4<\/h4>\n\n<ul>\n<li>Adding Spanish (Argentina) translation by Mr. gnukleo<\/li>\n<\/ul>\n\n<h4>v 2.3<\/h4>\n\n<ul>\n<li>Bug fixing in the WooCommerce cart<\/li>\n<\/ul>\n\n<h4>v 2.2<\/h4>\n\n<ul>\n<li>Enable plugin for Admin by default<\/li>\n<\/ul>\n\n<h4>v 2.1<\/h4>\n\n<ul>\n<li>Code fixes<\/li>\n<\/ul>\n\n<h4>v 1.9<\/h4>\n\n<ul>\n<li>Bug fixing in permissions \u2014 editor can no longer switch to admin<\/li>\n<li>Bug fixing in plugin options Roles section<\/li>\n<\/ul>\n\n<h4>v 1.8<\/h4>\n\n<ul>\n<li>Bug fixing in the AJAX request<\/li>\n<\/ul>\n\n<h4>v 1.7<\/h4>\n\n<ul>\n<li>Change logout box location from top to left<\/li>\n<li>Redirect admin to the correct page after logout<\/li>\n<\/ul>\n\n<h4>v 1.6<\/h4>\n\n<ul>\n<li>Adding wp-buy control panel page<\/li>\n<\/ul>\n\n<h4>v 1.5<\/h4>\n\n<ul>\n<li>Bug fixing in the orders page and users page<\/li>\n<\/ul>\n\n<h4>v 1.4<\/h4>\n\n<ul>\n<li>Bug fixing in CSS z-index issue<\/li>\n<\/ul>\n\n<h4>v 1.3<\/h4>\n\n<ul>\n<li>Adding Vote message<\/li>\n<\/ul>\n\n<h4>v 1.2<\/h4>\n\n<ul>\n<li>Bug fixes in the Login as user message<\/li>\n<\/ul>\n\n<h4>v 1.1<\/h4>\n\n<ul>\n<li>First beta release<\/li>\n<\/ul>","raw_excerpt":"Instant user switching for WordPress \u2014 switch to any user account in one click, with full WooCommerce support for customer service teams.","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/ast.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin\/116691","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/ast.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin"}],"about":[{"href":"https:\/\/ast.wordpress.org\/plugins\/wp-json\/wp\/v2\/types\/plugin"}],"replies":[{"embeddable":true,"href":"https:\/\/ast.wordpress.org\/plugins\/wp-json\/wp\/v2\/comments?post=116691"}],"author":[{"embeddable":true,"href":"https:\/\/ast.wordpress.org\/plugins\/wp-json\/wporg\/v1\/users\/wp-buy"}],"wp:attachment":[{"href":"https:\/\/ast.wordpress.org\/plugins\/wp-json\/wp\/v2\/media?parent=116691"}],"wp:term":[{"taxonomy":"plugin_section","embeddable":true,"href":"https:\/\/ast.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_section?post=116691"},{"taxonomy":"plugin_tags","embeddable":true,"href":"https:\/\/ast.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_tags?post=116691"},{"taxonomy":"plugin_category","embeddable":true,"href":"https:\/\/ast.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_category?post=116691"},{"taxonomy":"plugin_contributors","embeddable":true,"href":"https:\/\/ast.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_contributors?post=116691"},{"taxonomy":"plugin_business_model","embeddable":true,"href":"https:\/\/ast.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_business_model?post=116691"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}