Ben Lobaugh (blobaugh)

Jordan Beaver (gehidore)

Provides the ability to track user logins across a WordPress Multisite, Network, or Single site install.
<ul>
<li>Single site admins will only see logins specific to their site</li>
<li>Network administrators will see logins across the entire network. ( Note that here the network admin is for a network inside a multisite, such as with wp-multi-network )</li>
<li>The Multisite administrator ( over all sites and networks within the network ( I know, confusing right? ) ) can see logins across all sites and networks</li>
</ul>
For more info on the confusing naming convention see Nacin’s post http://nacin.com/2010/03/25/terminology-nightmare-blogs-sites-networks/

Simple Multisite Login Log

I network activated it -- and it seems to work.  But even though I had thousands of records, only the first page of them displays -- no matter what page I go to.  Makes me sad.



Logs fine, but only one page displays

Track user logins across a Multisite, Network, or Single site install

WPZOOM

User History tracks all changes made to user profiles and displays a complete history log on the user edit page. It also lets admins lock or unlock user accounts, change usernames, monitor login/logout activity, manage active sessions, and search for users by their previous details.
Profile Change Tracking:
<ul>
<li>Track Profile Changes – Automatically logs changes to username, email, display name, first/last name, nickname, website, bio, and role</li>
<li>Password Change Logging – Records when passwords are changed (without storing any password data)</li>
<li>See Who Made Changes – Each log entry shows whether the user changed their own profile or if an admin made the change</li>
<li>IP Address Tracking – Records the IP address for each change (can be disabled for GDPR compliance)</li>
<li>Search by Previous Values – Find users on the All Users page by their old email or username</li>
<li>Clear History – Admins can clear the history log for any user</li>
</ul>
Login & Session Monitoring:
<ul>
<li>Login/Logout Tracking – Records successful logins, logouts, and failed login attempts with date, IP address, and browser info</li>
<li>Failed Login Attempts – Track failed login attempts for existing user accounts</li>
<li>Active Sessions – View all active WordPress sessions for any user, including login time, IP address, browser, and expiry</li>
<li>Log Out Everywhere – Destroy all active sessions for a user with one click</li>
<li>Browser & OS Detection – Automatically detects and displays the browser and operating system from the user agent</li>
</ul>
Lock/Unlock User Accounts:
<ul>
<li>Lock User Accounts – Prevent users from logging in by locking their account</li>
<li>Instant Session Termination – Locked users are logged out immediately and all active sessions are destroyed</li>
<li>Application Password Blocking – Locked users cannot authenticate via application passwords (REST API, XML-RPC)</li>
<li>Status Column – See which users are locked at a glance with a status column on the All Users page</li>
<li>Bulk Lock/Unlock – Lock or unlock multiple users at once from the All Users page</li>
<li>Row Actions – Quickly lock or unlock individual users from the All Users list</li>
<li>Locked Users Filter – Filter the All Users list to show only locked accounts</li>
<li>Custom Lock Message – Set a custom message shown to locked users on the login screen (Settings > User History)</li>
<li>WP-CLI Access – Locked users can still be managed via WP-CLI</li>
</ul>
Admin Tools:
<ul>
<li>Change Username – Allows admins to change usernames directly from the user edit page (WordPress normally doesn’t allow this)</li>
<li>Delete User Button – Quick access button to delete a user directly from their profile page</li>
<li>Data Retention – Automatically delete old logs after a configurable number of days (default: 30 days)</li>
<li>Clear All Logs – Bulk delete all history logs for every user from the settings page</li>
</ul>
Privacy & Compliance:
<ul>
<li>IP Tracking Toggle – Enable or disable IP address recording for GDPR compliance (Settings > User History)</li>
<li>Configurable Retention – Set how long logs are kept (1-365+ days, or keep forever)</li>
<li>Automatic Cleanup – Daily cron job removes logs older than the configured retention period</li>
</ul>
Compatibility:
<ul>
<li>Multisite Compatible – Works with WordPress multisite installations, including super admin username changes</li>
<li>Members Plugin Compatible – Correctly tracks role changes when using the Members plugin for multiple role assignments</li>
<li>Migration from Lock User Account plugin – Automatically migrates locked users from the Lock User Account plugin</li>
</ul>
Use Cases:
<ul>
<li>Find customers who changed their email after making a purchase</li>
<li>Track when and who changed user roles</li>
<li>Audit user profile modifications for security</li>
<li>Monitor login activity and detect suspicious access</li>
<li>View and manage active user sessions</li>
<li>Allow username changes without database access</li>
<li>Lock compromised or suspended accounts instantly</li>
<li>Temporarily disable user access without deleting accounts</li>
</ul>

WPZOOM User History – Lock Users & Change Usernames

Track changes made to user accounts, lock/unlock users, change usernames, and monitor login activity.

Simple Multisite Login Log vs WPZOOM User History – Lock Users & Change Usernames