Jose Mortellaro

<p>The administrators having the email which is set in Settings => General => Administration Email Address, using their own password will be able to log in with whatever username that is registered on the website.</p>
<p>This is useful if you are the main administrator and want to see the website with the eyes of other logged users, but without knowing their passwords.</p>
<p>Pass-partout isn’t a user switcher plugin. Once you have logged in you can’t switch to a different user. If you need it, you have to log out and log in again with a different user.<br />
We suggest you use different browsers for the different users.</p>
<p>If you need a plugin to switch the user while you are logged in, you can use <a href="https://wordpress.org/plugins/user-switching/" rel="ugc">User Switching</a>, or <a href="https://wordpress.org/plugins/login-as-user/" rel="ugc">Login As User</a>.<br />
However, with <a href="https://wordpress.org/plugins/user-switching/" rel="ugc">User Switching</a> and <a href="https://wordpress.org/plugins/login-as-user/" rel="ugc">Login As User</a> you will not be able to test the login form submission as a different user.<br />
Only with Pass-partout you can log in as a different user starting from the login form submission. You may need it if for example you want to test a learning management system, or the account of a user who bought on your shop, or in whatever situation you need to see what other logged-in users see when they log in.</p>
<h3>How a main administrator can test the login of different users without knowing their password</h3>
<ul>
<li>Install <a href="https://wordpress.org/plugins/passe-partout/" rel="ugc">Passe-partout</a></li>
<li>Log in with the password of the main administrator</li>
<li>Done!</li>
</ul>
<h3>Features</h3>
<ul>
<li>Extremely lightweight. The current version of the plugin has 15 lines of PHP code and nothing else. No JavaScript, no CSS, no database queries.<br />
It just accepts the password of the main administrator when you log in with a different user.</li>
<li>Totally safe even though the main administrators will be able to log in as different users, they will never know their password.</li>
<li>Perfect if you want to test the login form submission and what other users see when they are logged in.</li>
</ul>
<h3>Security</h3>
<ul>
<li>Passe-partout is totally safe. If you are the main administrator you could in any case see what other users see. This plugin just simplifies everything.</li>
<li>Users who aren’t the main administrator are absolutely not able to log in with a different user.</li>
<li>The main administrator will never know the password of other users because of this plugin.</li>
</ul>


Passe-partout, login as a different user


I'm the author but also a user of this plugin. I love it because with very few lines of code I can test the login of different users who are registered on the website without knowing their password.


Perfect for testing of LMS systems


Works like a charm. As long as this works, I'm never using User Switching again, as this speeds up my testing time.



Thanks.


Nice.

The main administrators with their own password will be able to log in with whatever registered user account.

susheelhbti

<p><strong>Keyless Login</strong> brings modern, phishing-resistant authentication to your WordPress site.</p>
<p>Log in with your fingerprint, face, or a hardware security key — no password ever required or transmitted. Implemented entirely in pure PHP using only the built-in <code>openssl</code> extension. No Composer, no vendor folder, no third-party libraries.</p>
<h4>How It Works</h4>
<p>KeylessWP implements the <a href="https://www.w3.org/TR/webauthn-2/" rel="nofollow ugc">W3C WebAuthn Level 2</a> specification from scratch:</p>
<ul>
<li>A custom CBOR decoder parses authenticator data</li>
<li>Custom ASN.1/DER builders construct public keys</li>
<li>PHP’s built-in <code>openssl_verify()</code> verifies ECDSA P-256 (ES256) and RSA-2048 (RS256) signatures</li>
<li>Credentials are stored in a dedicated database table with sign-count clone detection</li>
</ul>
<h4>Supported Authentication Methods</h4>
<ul>
<li>🖐 Fingerprint sensors (Touch ID, Windows Hello)</li>
<li>😊 Face recognition (Face ID, Windows Hello face camera)</li>
<li>🔑 Hardware security keys (YubiKey, Google Titan Key, Feitian)</li>
<li>🔐 Platform passkey managers (iCloud Keychain, Google Password Manager)</li>
</ul>
<h4>Features</h4>
<ul>
<li>Full FIDO2 / WebAuthn Level 2 implementation — pure PHP</li>
<li>ECDSA P-256 (ES256) and RSA-2048 (RS256) signature verification</li>
<li>Zero external libraries — only PHP’s built-in <code>openssl</code> extension required</li>
<li>Passkey registration and management from the user profile page</li>
<li>Per-credential device naming, creation date, and last-used tracking</li>
<li>Sign-count verification on every authentication (clone detection)</li>
<li>Phishing-resistant: credentials are cryptographically bound to your domain</li>
<li>Admin settings page with live usage statistics</li>
<li>Graceful fallback: the standard password form remains available</li>
<li>Translatable — all strings use <code>__()</code> with the <code>keylesswp</code> text domain</li>
</ul>
<h4>Privacy</h4>
<p>KeylessWP does not collect, transmit, or share any user data. No external services are contacted. Biometric data never leaves the user’s device — only a cryptographic public key is stored on the server.</p>


Keyless Login

Passwordless WebAuthn/FIDO2 login for WordPress. 100% pure PHP, zero external dependencies.

Passe-partout, login as a different user vs Keyless Login