TrustedLogin

<p>The right way to provide support for WordPress customers. Offering secure login and one-time secret sharing.</p>
<h3>Use TrustedLogin to log into your customers’ sites securely and easily</h3>
<p>Do you provide support for WordPress websites? TrustedLogin allows you to log into your customers’ sites securely. The TrustedLogin Connector plugin connects your WordPress site to the <a href="https://www.trustedlogin.com" rel="nofollow ugc">TrustedLogin</a> service.</p>
<h3>How it works</h3>
<ol>
<li><a href="https://app.trustedlogin.com" rel="nofollow ugc">Create an account on TrustedLogin.com</a></li>
<li>Install the TrustedLogin Connector plugin on your WordPress site</li>
<li>Integrate the TrustedLogin SDK into your code</li>
</ol>
<p>Your users will then be able to grant you access to their site and provide you with an Access Key. With this plugin, you can log into their site using the Access Key.</p>
<h3>Start free, no credit card required</h3>
<p>TrustedLogin includes a free plan that lets you connect customer sites and start handling support access right away. No credit card, no trial countdown. Upgrade your TrustedLogin account when your team needs more capacity or premium features. <a href="https://app.trustedlogin.com" rel="nofollow ugc">Create your free account at TrustedLogin.com</a> and you can have the Connector installed and your first team connected in minutes.</p>
<h3>Share passwords and credentials with encrypted, time-limited links</h3>
<p>Stop pasting passwords, API keys, and other short-lived credentials into email and chat, where they sit in archives forever and get accidentally re-shared. Anyone you’ve granted the Create Secrets capability (support agents, internal admins, or customers themselves) can generate an encrypted link that expires on a schedule you set, optionally requires a passphrase, and can either burn after the first view or stay reusable until its expiration. Every reveal lands in your audit trail.</p>
<h3>How it works</h3>
<ol>
<li>Open the <strong>Secrets</strong> page in your WordPress dashboard</li>
<li>Paste the credential, set an optional passphrase and expiration, and choose whether the link should burn after the first view or stay reusable</li>
<li>Share the generated link with the other party</li>
</ol>
<p>The recipient opens the link, sees the credential, and the rules you set take effect. Every reveal, every failed passphrase attempt, and every destruction is logged, so you always know who saw what and when.</p>
<h3>See every support session at a glance</h3>
<p>The Login Activity dashboard puts every access event on one screen: a per-agent breakdown with a stacked bar chart, daily or weekly buckets you can scope from one day to twelve months back, and a clickable legend that filters the view to a single teammate. Refused login attempts include the exact reason and the recommended next step right inside the dashboard, so you never have to guess what went wrong.</p>
<p>Administrators see every team. Other capability holders see only the teams they’re approved to support. When a support escalation lands and you need to know who touched what, and when, the answer is one click away.</p>
<h3>Add Grant Access to any Gravity Forms form</h3>
<p>If you already use Gravity Forms to take support requests, onboarding intake, or sales inquiries, you don’t need a separate page to capture site access. Drop the TrustedLogin field into any form. Requesters paste their site URL, click a button, complete the grant flow in a popup, and the access key lands in the form entry alongside the rest of their submission.</p>
<p>The field works in the Gravity Forms editor, on the front-end form, and on the entry-detail page. It honors the form’s label placement so it matches the rest of the form’s look, and the entry-detail view ships with a one-click login link so agents can open the customer’s site directly from the entry.</p>
<h3>Grant access from inside Help Scout, Freescout, or your own helpdesk</h3>
<p>When a customer is already in a conversation with your support team, they shouldn’t have to leave that conversation to grant access. The Connector ships webhook integrations for <a href="https://www.helpscout.com/" rel="nofollow ugc">Help Scout</a> and <a href="https://freescout.net/" rel="nofollow ugc">Freescout</a> that show a button right inside the helpdesk thread. The customer clicks, completes the grant, and the access key appears in the agent’s inbox without ever leaving the ticket.</p>
<p>Webhooks are HMAC-signed end-to-end and configured through the helpdesk’s standard webhook interface. Building your own helpdesk integration? The same webhook surface is available to any provider you wire up.</p>
<h3>Fine-grained capability control without rewriting WordPress roles</h3>
<p>Not everyone on your team needs to do everything. The Permissions matrix lets you grant or revoke the four TrustedLogin capabilities (Sign in to client sites, View Activity, Create Secrets, and Manage Secrets) per WordPress role, all from a single admin screen. Your editors might handle access grants but not secret management. Your contractors might view activity but not log in themselves. Every capability change is recorded in the audit log.</p>
<p>The matrix respects WordPress’s role system without forcing you to edit it. Granting any TrustedLogin capability to a low-trust role triggers a type-to-confirm modal, so you can’t accidentally hand a Subscriber the keys to a customer site.</p>
<h3>Manage support access across multiple teams and products</h3>
<p>Whether you support more than one SaaS product, run multiple client engagements, or operate as an agency with several brands, the Connector lets you register multiple teams in a single install. Each team has its own access settings, approved roles, helpdesk integration (or no helpdesk at all), and webhook signing secret.</p>
<p>Login Activity, Permissions, and Secrets all respect team scoping. Capability holders see only the teams they’re approved to support. Administrators see everything in one place.</p>


TrustedLogin Connector


Genius way to solve complicated problem.



We have been using TrustedLogin in our plugin Content Control for some time now. It not only provides users a 1-click option to provide our support team with temporary admin access, but properly allows sharing that access within our team for a limited time.



This makes it both easy to use and integrate into your existing processes, painless for the user, more secure than generating user accounts, and makes cleanup a breeze as access self-expires.



Further it take a lot of the liability off of our team when asking for credentials and such. Only team members with proper access to our own sites can gain access to the users site, so even if the token were leaked, only our team can utilize it. 



We look forward to rolling it out in our larger plugins in the near future, such as Popup Maker & User Menus, helping us support nearly 1 Million users.


Makes assisting customers less of a messy "process" & a lot less risky

The right way to provide support for WordPress customers. Offering secure login and one-time secret sharing.

TrustedLogin Connector vs Awesome Support – WordPress HelpDesk & Support Plugin