WP Access Control Center is a powerful security control center for WordPress administrators who want full control over authentication, sessions, and password policies.
Take control of your site’s access layer with real-time session monitoring, flexible two-factor authentication, and powerful emergency tools — all in one place.
🛡️ Security Overview Dashboard 📊
- General indicator about the current site security status
- Status overview about the most important security settings
- Live view of main session KPIs (refresh: 5s)
- Next step recommendations to get your site more secure
- Can be made sticky to stay visible when scrolling down
🔐 Two-Factor Protection
- Email-based verification codes
- TOTP support (Google Authenticator, Microsoft Authenticator, Authy, etc.)
- Role-based enforcement
- Grace periods for smooth rollout
- Backup codes for account recovery
- Trusted devices to reduce login friction
👁️ Live Session Control
- Real-time overview of all active sessions (AJAX-powered)
- Inspect session details and parameters
- Instantly terminate individual or all sessions
- Monitor user activity as it happens
🔑 Password Policies
- Enforce password strength requirements
- Prevent password reuse
- Define role-based password expiration
- Real-time feedback during password creation
⚡ Bulk Password Reset
- Reset passwords for roles or selected users
- Optionally terminate related sessions
- Automatic email notifications (fully customizable)
🔄 Security Key Rotation
- One-click regeneration of WordPress KEYs & SALTs
- Immediately invalidates all active sessions
- Essential for incident response
⏱️ Advanced Session Control
- Configure session lifetime per role
- Separate rules for “Remember Me”
- Automatic cleanup of expired sessions
🎨 Login Experience Designer
- Customize the 2FA login page
- Background images (outer & inner)
- Flexible CSS customization
- Safe defaults – no changes unless configured
No external services required. Everything runs locally within your WordPress installation.
Screenshots
Two-Factor Protection – Have control over 2FA parameters and control the use of Application Passwords
Two-Factor Protection – Enable Email and TOTP authentication with enforcement options
Two-Factor Protection – Shape your users’ experience by balancing security and ease of use
Two-Factor Protection – Manage your indiviual 2FA methods in your user profile
Live Session Control – Monitor active user sessions in real time and terminate them instantly
Password Policies – Define strength requirements, reuse limits, and expiration rules
Bulk Password Reset – Reset passwords for roles or selected users with one click
Security Key Rotation – Instantly regenerate WordPress KEYs and SALTs
Login Experience Designer – Customize the 2FA login appearance with images and CSS