Tim Nash

<p>WP User Sentry has three features:</p>
<h4>Email</h4>
<p>Emails the user’s email address, as set in their profile, on successful login.<br />
Email provides information about the login, the time/browser/operating system and IP<br />
Optionally get location from remote third party service.</p>
<h4>Profile View</h4>
<p>Generates a table, from the “session data” for a user, to shows when they logged in and their session information including:<br />
– Login Time<br />
– Browser<br />
– Operating System<br />
– Expiry Time (when the session is due to expire)</p>
<h4>Settings Page</h4>
<p>Provides settings for the plugin under wp-admin->settings->WP User Sentry</p>
<p>Configure if you wish to use a third party GEOAPI provider for determining country<br />
Configure which roles should have on login notifications enabled<br />
Configure the email being sent<br />
Configure If the email should be sent, if an existing session with the same useragent and IP exists.</p>
<h4>Actions & Filters</h4>
<p>Here is a list of action and filter hooks provided by the plugin:</p>
<ul>
<li><code>wp_user_sentry_notify</code> Filter to change if email should be sent return is bool, additional info user ID.</li>
<li><code>wp_user_sentry_email_message</code> Filter to change the email message generated by the plugin.</li>
<li><code>wp_user_sentry_email</code> Filter to change the email array generated by the plugin prior to sending mail.</li>
</ul>


WP User Sentry

Sends an email to the user, as they login, and provides an overview of sessions in profile

Michael Finkenberger

<p><strong>WP Access Control Center</strong> is a powerful security control center for WordPress administrators who want full control over authentication, sessions, and password policies.</p>
<p>Take control of your site’s access layer with real-time session monitoring, flexible two-factor authentication, and powerful emergency tools — all in one place.</p>
<h3>🔐 Two-Factor Protection</h3>
<ul>
<li>Email-based verification codes</li>
<li>TOTP support (Google Authenticator, Microsoft Authenticator, Authy, etc.)</li>
<li>Role-based enforcement</li>
<li>Grace periods for smooth rollout</li>
<li>Backup codes for account recovery</li>
<li>Trusted devices to reduce login friction</li>
</ul>
<h3>👁️ Live Session Control</h3>
<ul>
<li>Real-time overview of all active sessions (AJAX-powered)</li>
<li>Inspect session details and parameters</li>
<li>Instantly terminate individual or all sessions</li>
<li>Monitor user activity as it happens</li>
</ul>
<h3>🔑 Password Policies</h3>
<ul>
<li>Enforce password strength requirements</li>
<li>Prevent password reuse</li>
<li>Define role-based password expiration</li>
<li>Real-time feedback during password creation</li>
</ul>
<h3>⚡ Bulk Password Reset</h3>
<ul>
<li>Reset passwords for roles or selected users</li>
<li>Optionally terminate related sessions</li>
<li>Automatic email notifications (fully customizable)</li>
</ul>
<h3>🔄 Security Key Rotation</h3>
<ul>
<li>One-click regeneration of WordPress KEYs & SALTs</li>
<li>Immediately invalidates all active sessions</li>
<li>Essential for incident response</li>
</ul>
<h3>⏱️ Advanced Session Control</h3>
<ul>
<li>Configure session lifetime per role</li>
<li>Separate rules for “Remember Me”</li>
<li>Automatic cleanup of expired sessions</li>
</ul>
<h3>🎨 Login Experience Designer</h3>
<ul>
<li>Customize the 2FA login page</li>
<li>Background images (outer & inner)</li>
<li>Flexible CSS customization</li>
<li>Safe defaults – no changes unless configured</li>
</ul>
<p><strong>No external services required.</strong> Everything runs locally within your WordPress installation.</p>


WP Access Control Center

Take full control over authentication, sessions, and password security in WordPress – including real-time session monitoring, 2FA, and emergency tools

WP User Sentry vs WP Access Control Center