One-click admin login

One-click admin login takes you from the dashboard straight into a site’s wp-admin, signed in, without typing a password. Once your sites are connected you may never use their login pages again.

Using it

Open any connected site in the dashboard and click the WP Admin button in the top bar. A new tab opens and lands directly in that site’s admin area.

Choosing the account

The first time you use it on a site, the dashboard asks which administrator account to log in as and lists the site’s admins to pick from. Your choice is remembered per site, so subsequent clicks go straight through. You can change the account any time on the site’s Settings page, under One-click login account.

How it works

Behind the scenes the dashboard mints a short-lived, signed link using the site’s private connection secret. The connector plugin verifies the signature, checks that the link has not expired and has not been used before, confirms the chosen account is still an administrator, and only then signs you in. The link is valid for two minutes and works exactly once; a copied or intercepted link is useless afterwards.

Security notes

• Only accounts that can manage the site (administrators) can be used, and the connector re-checks that on every login.
• Every one-click login is recorded in the site’s activity log, including who triggered it from the dashboard.
• Because your dashboard account can now reach wp-admin on all your sites, protect it accordingly: use a strong password and turn on two-factor authentication (see the Your account and security guide).
• In a team workspace, one-click login is a member-level capability; viewers cannot use it.