Frankie Jarrett

<p><strong>Did you find this plugin helpful? Please consider <a href="https://wordpress.org/support/view/plugin-reviews/user-session-control" rel="ugc">leaving a 5-star review</a>.</strong></p>
<p>WordPress 4.1 “Dinah” introduced the awesome power of user session management.</p>
<p>However, you are limited to only being able to destroy your own sessions, and you cannot destroy them individually.</p>
<p>This plugin allows Administrators to view and manage all sessions by all users on an individual basis.</p>
<ul>
<li>Displays a custom “God view” screen of all active user sessions</li>
<li>Sort sessions by user, role, creation date, expiry date or IP address</li>
<li>Quickly and easily destroy sessions you think may be a security risk</li>
<li>Respects the timezone, date format and time format saved under General Settings</li>
<li>View all user sessions from all blogs on your network via the Network Admin</li>
</ul>
<p><strong>Languages supported:</strong></p>
<ul>
<li>English</li>
<li>Deutsch</li>
<li>Español</li>
<li>Français</li>
<li>Português</li>
</ul>
<p><strong>Development of this plugin is done <a href="https://github.com/fjarrett/user-session-control" rel="nofollow ugc">on GitHub</a>. Pull requests welcome. Please see <a href="https://github.com/fjarrett/user-session-control/issues" rel="nofollow ugc">issues reported</a> there before going to the plugin forum.</strong></p>


User Session Control

This plugin is fine (as far as I can tell) on vanilla wordpress but is very unsafe on multisite and does not appera to be supported so no fix is imminent

Unsafe on multisite

Works well and does what it says, without heavy lifting, fancy interfaces or such.

Works with WP 5.7 and PHP 7.4. Currently unlisted because of lack of updates Please update it!

Nice and useful

View and manage all active user sessions in a custom admin screen.

Michael Finkenberger

<p><strong>WP Access Control Center</strong> is a powerful security control center for WordPress administrators who want full control over authentication, sessions, and password policies.</p>
<p>Take control of your site’s access layer with real-time session monitoring, flexible two-factor authentication, and powerful emergency tools — all in one place.</p>
<h3>🛡️ Security Overview Dashboard 📊</h3>
<ul>
<li>General indicator about the current site security status</li>
<li>Status overview about the most important security settings</li>
<li>Live view of main session KPIs (refresh: 5s)</li>
<li>Next step recommendations to get your site more secure</li>
<li>Can be made <em>sticky</em> to stay visible when scrolling down</li>
</ul>
<h3>🔐 Two-Factor Protection</h3>
<ul>
<li>Email-based verification codes</li>
<li>TOTP support (Google Authenticator, Microsoft Authenticator, Authy, etc.)</li>
<li>Role-based enforcement</li>
<li>Grace periods for smooth rollout</li>
<li>Backup codes for account recovery</li>
<li>Trusted devices to reduce login friction</li>
</ul>
<h3>👁️ Live Session Control</h3>
<ul>
<li>Real-time overview of all active sessions (AJAX-powered)</li>
<li>Inspect session details and parameters</li>
<li>Instantly terminate individual or all sessions</li>
<li>Monitor user activity as it happens</li>
</ul>
<h3>🔑 Password Policies</h3>
<ul>
<li>Enforce password strength requirements</li>
<li>Prevent password reuse</li>
<li>Define role-based password expiration</li>
<li>Real-time feedback during password creation</li>
</ul>
<h3>⚡ Bulk Password Reset</h3>
<ul>
<li>Reset passwords for roles or selected users</li>
<li>Optionally terminate related sessions</li>
<li>Automatic email notifications (fully customizable)</li>
</ul>
<h3>🔄 Security Key Rotation</h3>
<ul>
<li>One-click regeneration of WordPress KEYs & SALTs</li>
<li>Immediately invalidates all active sessions</li>
<li>Essential for incident response</li>
</ul>
<h3>⏱️ Advanced Session Control</h3>
<ul>
<li>Configure session lifetime per role</li>
<li>Separate rules for “Remember Me”</li>
<li>Automatic cleanup of expired sessions</li>
</ul>
<h3>🎨 Login Experience Designer</h3>
<ul>
<li>Customize the 2FA login page</li>
<li>Background images (outer & inner)</li>
<li>Flexible CSS customization</li>
<li>Safe defaults – no changes unless configured</li>
</ul>
<p><strong>No external services required.</strong> Everything runs locally within your WordPress installation.</p>


WP Access Control Center

Take full control over authentication, sessions, and password security in WordPress – including real-time session monitoring, 2FA, and emergency tools

User Session Control vs WP Access Control Center