TrustedLogin

<p>The right way to provide support for WordPress customers. Offering secure login and one-time secret sharing.</p>
<h3>Use TrustedLogin to log into your customers’ sites securely and easily</h3>
<p>Do you provide support for WordPress websites? TrustedLogin allows you to log into your customers’ sites securely. The TrustedLogin Connector plugin connects your WordPress site to the <a href="https://www.trustedlogin.com" rel="nofollow ugc">TrustedLogin</a> service.</p>
<h3>How it works</h3>
<ol>
<li><a href="https://app.trustedlogin.com" rel="nofollow ugc">Create an account on TrustedLogin.com</a></li>
<li>Install the TrustedLogin Connector plugin on your WordPress site</li>
<li>Integrate the TrustedLogin SDK into your code</li>
</ol>
<p>Your users will then be able to grant you access to their site and provide you with an Access Key. With this plugin, you can log into their site using the Access Key.</p>
<h3>Start free, no credit card required</h3>
<p>TrustedLogin includes a free plan that lets you connect customer sites and start handling support access right away. No credit card, no trial countdown. Upgrade your TrustedLogin account when your team needs more capacity or premium features. <a href="https://app.trustedlogin.com" rel="nofollow ugc">Create your free account at TrustedLogin.com</a> and you can have the Connector installed and your first team connected in minutes.</p>
<h3>Share passwords and credentials with encrypted, time-limited links</h3>
<p>Stop pasting passwords, API keys, and other short-lived credentials into email and chat, where they sit in archives forever and get accidentally re-shared. Anyone you’ve granted the Create Secrets capability (support agents, internal admins, or customers themselves) can generate an encrypted link that expires on a schedule you set, optionally requires a passphrase, and can either burn after the first view or stay reusable until its expiration. Every reveal lands in your audit trail.</p>
<h3>How it works</h3>
<ol>
<li>Open the <strong>Secrets</strong> page in your WordPress dashboard</li>
<li>Paste the credential, set an optional passphrase and expiration, and choose whether the link should burn after the first view or stay reusable</li>
<li>Share the generated link with the other party</li>
</ol>
<p>The recipient opens the link, sees the credential, and the rules you set take effect. Every reveal, every failed passphrase attempt, and every destruction is logged, so you always know who saw what and when.</p>
<h3>See every support session at a glance</h3>
<p>The Login Activity dashboard puts every access event on one screen: a per-agent breakdown with a stacked bar chart, daily or weekly buckets you can scope from one day to twelve months back, and a clickable legend that filters the view to a single teammate. Refused login attempts include the exact reason and the recommended next step right inside the dashboard, so you never have to guess what went wrong.</p>
<p>Administrators see every team. Other capability holders see only the teams they’re approved to support. When a support escalation lands and you need to know who touched what, and when, the answer is one click away.</p>
<h3>Add Grant Access to any Gravity Forms form</h3>
<p>If you already use Gravity Forms to take support requests, onboarding intake, or sales inquiries, you don’t need a separate page to capture site access. Drop the TrustedLogin field into any form. Requesters paste their site URL, click a button, complete the grant flow in a popup, and the access key lands in the form entry alongside the rest of their submission.</p>
<p>The field works in the Gravity Forms editor, on the front-end form, and on the entry-detail page. It honors the form’s label placement so it matches the rest of the form’s look, and the entry-detail view ships with a one-click login link so agents can open the customer’s site directly from the entry.</p>
<h3>Grant access from inside Help Scout, Freescout, or your own helpdesk</h3>
<p>When a customer is already in a conversation with your support team, they shouldn’t have to leave that conversation to grant access. The Connector ships webhook integrations for <a href="https://www.helpscout.com/" rel="nofollow ugc">Help Scout</a> and <a href="https://freescout.net/" rel="nofollow ugc">Freescout</a> that show a button right inside the helpdesk thread. The customer clicks, completes the grant, and the access key appears in the agent’s inbox without ever leaving the ticket.</p>
<p>Webhooks are HMAC-signed end-to-end and configured through the helpdesk’s standard webhook interface. Building your own helpdesk integration? The same webhook surface is available to any provider you wire up.</p>
<h3>Fine-grained capability control without rewriting WordPress roles</h3>
<p>Not everyone on your team needs to do everything. The Permissions matrix lets you grant or revoke the four TrustedLogin capabilities (Sign in to client sites, View Activity, Create Secrets, and Manage Secrets) per WordPress role, all from a single admin screen. Your editors might handle access grants but not secret management. Your contractors might view activity but not log in themselves. Every capability change is recorded in the audit log.</p>
<p>The matrix respects WordPress’s role system without forcing you to edit it. Granting any TrustedLogin capability to a low-trust role triggers a type-to-confirm modal, so you can’t accidentally hand a Subscriber the keys to a customer site.</p>
<h3>Manage support access across multiple teams and products</h3>
<p>Whether you support more than one SaaS product, run multiple client engagements, or operate as an agency with several brands, the Connector lets you register multiple teams in a single install. Each team has its own access settings, approved roles, helpdesk integration (or no helpdesk at all), and webhook signing secret.</p>
<p>Login Activity, Permissions, and Secrets all respect team scoping. Capability holders see only the teams they’re approved to support. Administrators see everything in one place.</p>


TrustedLogin Connector


Genius way to solve complicated problem.



We have been using TrustedLogin in our plugin Content Control for some time now. It not only provides users a 1-click option to provide our support team with temporary admin access, but properly allows sharing that access within our team for a limited time.



This makes it both easy to use and integrate into your existing processes, painless for the user, more secure than generating user accounts, and makes cleanup a breeze as access self-expires.



Further it take a lot of the liability off of our team when asking for credentials and such. Only team members with proper access to our own sites can gain access to the users site, so even if the token were leaked, only our team can utilize it. 



We look forward to rolling it out in our larger plugins in the near future, such as Popup Maker & User Menus, helping us support nearly 1 Million users.


Makes assisting customers less of a messy "process" & a lot less risky

The right way to provide support for WordPress customers. Offering secure login and one-time secret sharing.

Andy Fragen

<p>This plugin sets the following debug constants in <code>wp-config.php</code> on plugin activation and removes them on plugin deactivation. Any errors will result in a PHP Exception being thrown. Debug constants per <a href="https://developer.wordpress.org/advanced-administration/debug/debug-wordpress/" rel="nofollow ugc">Debugging in WordPress</a>.</p>
<p>Default settings:</p>
<pre><code>define( 'WP_DEBUG_LOG', true );
define( 'SCRIPT_DEBUG', true );
define( 'SAVEQUERIES', true );
</code></pre>
<p> <br />
    @ini_set( ‘display_errors’, 1 ); is set when the plugin is active. <code>WP_DEBUG</code> is set to true when the plugin is first run, thereafter it can be turned off in the Settings.</p>
<p>The Settings page allows the user to set the following.</p>
<pre><code>define( 'WP_DEBUG', true ); // Default on initial plugin installation.
define( 'WP_DEBUG_DISPLAY', false ); // Default when not declared is true.
define( 'WP_DISABLE_FATAL_ERROR_HANDLER', true ); // WordPress 5.2 WSOD Override.
</code></pre>
<p>When the plugin is deactivated best efforts are made to re-add pre-existing constants to their former state. When the plugin is activated the default settings and any saved settings are restored.</p>
<p>This plugin uses the <a href="https://github.com/wp-cli/wp-config-transformer" rel="nofollow ugc">wp-cli/wp-config-transformer</a> command for writing constants to <code>wp-config.php</code>.</p>
<p><a href="https://github.com/norcross/debug-quick-look" rel="nofollow ugc">Debug Quick Look</a> from Andrew Norcross is included with this plugin to assist in reading the debug.log file. If you already have this plugin installed you should delete it when WP Debugging is not active.</p>
<p><a href="https://wordpress.org/plugins/query-monitor/" rel="ugc">Query Monitor</a> and <a href="https://wordpress.org/plugins/debug-bar/" rel="ugc">Debug Bar</a> plugins are optional dependencies to aid in debugging and troubleshooting. The notice for installation will recur 45 days after being dismissed.</p>
<p>If you have a non-standard location for your <code>wp-config.php</code> file you can use the filter <code>wp_debugging_config_path</code> to return the file path for your installation.</p>
<p>The filter <code>wp_debugging_add_constants</code> allows the user to add constants to <code>wp-config.php</code>.</p>
<p>The filter returns an array where the key is the name of the constant and the value is an array of data containing the value as a string and a boolean to indicate whether or not the value should be passed without quotes.</p>
<pre><code>$my_constants = [
    'my_test_constant' =>
    [
        'value' => 'abc123',
        'raw' => false,
    ],
    'another_test_constant' => [ 'value' => 'true' ],
];
</code></pre>
<p>The <code>value</code> option contains the constant’s value as a string.</p>
<p>The <code>raw</code> option means that instead of placing the value inside the config as a string it will become unquoted. The default is <code>true</code>. Set as <code>false</code> for non-boolean values.</p>
<p>Example:</p>
<pre><code>add_filter(
    'wp_debugging_add_constants',
    function( $added_constants ) {
        $my_constants = [
            'my_test_constant'      => [
                'value' => '124xyz',
                'raw'   => false,
            ],
            'another_test_constant' => [ 'value' => 'true' ],
        ];
        return array_merge( $added_constants, $my_constants );
    },
    10,
    1
);
</code></pre>
<p>This will create the following constants.</p>
<pre><code>define( 'MY_TEST_CONSTANT', '124xyz' );
define( 'ANOTHER_TEST_CONSTANT', true );
</code></pre>
<h3>Development</h3>
<p>PRs are welcome against the <a href="https://github.com/afragen/wp-debugging" rel="nofollow ugc">develop branch on GitHub</a>.</p>


WP Debugging

This helps me support customers and get better debugging information about errors happening on their site without having to ask for sensitive login info. Simple and does a great job, I've used it or recommended it a dozen times in the last month.

Great support tool

I can't tell you the number of times I've had to handle a support request that involved a white screen. Thank you, @afragen, for building this awesome tool to help define constants for a file that isn't easily accessible without passing around credentials.

Super Handy!

Thanks for the useful plugin, we're going to start recommending this to our customers.

Useful Plugin

Thank you for this useful and beautiful plugin, helps me a lot.

Very useful

Quick access to the log files speeds up development!

Great plugin

With this plugin it's at last possible to debug a remote site wihtout having access to the cpanel!

Very useful!


Every time I come across an obscure problem on WordPress sites, I start looking for it by installing this plugin.Thanks to the developers for a great tool!


Perfect tool for debug.

Yet another one of your plugins that I love and use all the time!  Thank you.  (Side note: is there a place to buy you a coffee or donate for your time?)

Another great debugging plugin


I've been using the WP Debugging plugin since 2024, and it has been a lifesaver. The error log feature alone helped me track down several issues that would have taken hours to find manually.



The fact that it integrates with Query Monitor is a nice bonus too. If you do any WordPress development or troubleshooting, just install this plugin. Five stars, no hesitation.


Absolutely essential for debugging – saved me countless times!

A support/troubleshooting plugin for WordPress.

TrustedLogin Connector vs WP Debugging