RGBmind Ephemere – Temporary Login & Timed Access Control

RGBmind Ephemere is a secure, lightweight, and cybersecurity-focused temporary login and timed user access manager for WordPress.

Need to create a secure temporary login for a developer, support agent, freelance designer, IT contractor, auditor, or client? RGBmind Ephemere allows administrators to grant temporary access with automated expiration timers, login limits, instant kill-switch lockout, and real-time active session revocation.

Unlike basic login plugins, RGBmind Ephemere is built to meet strict WordPress development standards and cybersecurity principles (IAM – Identity & Access Management). All temporary access restrictions are enforced locally with zero external tracking and zero custom database bloat.

The core plugin is 100% free, fully functional, and unrestricted. For advanced agency workflows (such as passwordless One-Click Magic Links, GDPR Access Audit Log, Activity Tracking, and Real-Time Webhook/Email Security Alerts), a separate commercial companion add-on is available.

Key Features for Temporary Login & Access Control

• ⚡ 1-Click Quick Temporary Login: Generate temporary user accounts in seconds directly from the JIT dashboard, with email alias support (name+1@domain.com, name+role@domain.com).
• ⏱️ Precise Expiration & Timed Access: Schedule automated expiration down to the exact minute, synchronized with your WordPress site timezone.
• 🔒 Maximum Login Limits (Threshold): Limit allowed logins (e.g. allow only 3 logins). Once reached, the temporary user is automatically locked out.
• 🛡️ Instant Account Lockout (Kill-Switch): Instantly revoke access with a single checkbox toggle, without altering user passwords or deleting accounts.
• 🛑 Real-Time Active Session Invalidation: If an active temporary user is browsing the admin dashboard when their expiration arrives, their session and authentication cookies are revoked immediately.
• 👥 Role & Permission Management (RBAC): Create and customize user roles, clone capabilities from standard roles, and enforce the Principle of Least Privilege.
• 📊 Multi-Format Data Export: Export temporary accounts and access audit logs to CSV, OpenXML Excel (.xlsx), and JSON with formula injection protection.
• 📅 Registration & Creation Date Tracking: View exact registration dates and relative time elapsed (Created: 2 hours ago) in the JIT table, user profiles, and exports.
• 🔍 Search & Filter Toolbar: Filter temporary users by role, lockout status, or username directly from the administrative dashboard.
• 🌐 Translation Ready (i18n): Fully internationalized with POT template included, adhering to WordPress core localization standards.

Architecture & Cybersecurity

• Zero Custom Database Tables: Uses native WordPress user metadata (get_user_meta, update_user_meta, delete_user_meta) and wp_options.
• Zero External Server Latency: 100% local execution, zero external API tracking calls, fully GDPR compliant.
• Strict Permission Checks: Only users with the promote_users capability (Administrators) can view or modify temporary parameters.
• CSRF Protection: Every action is guarded by WordPress cryptographic nonces.
• Clean Uninstallation: uninstall.php completely wipes all created user metadata and options upon plugin deletion.

Commercial Companion Add-on (PRO)

For web agencies and IT maintenance professionals requiring advanced capabilities, the separate commercial companion add-on RGBmind Ephemere PRO seamlessly integrates with this free plugin:

• ⚡ One-Click Temporary Login Link (Magic Link):
  Generate an encrypted, single-use login link from the user profile or dashboard. Contractors and auditors can log in with a single click without sharing passwords. Only the SHA-256 hash is persisted in the database.
• 🛡️ Detailed Access Audit Log & Forensics:
  View the last 20 logins directly in the user profile and central dashboard, showing exact timestamps, authentication method, duration, and configurable IP addresses (Full Clear Text or GDPR Anonymized).
• ⏱️ Real-Time Activity Tracking & Session Duration:
  Monitor contractor session duration, active online status, and visited admin pages in real time.
• 🔔 Real-Time Security Email & Webhook Alerts:
  Receive immediate notifications whenever a temporary account expires, reaches its login cap, or is locked out. Supports HTTP Webhooks for Slack, Discord, Zapier, or Make integrations.

Visit rgbmind.com/ephemere to learn more about the PRO companion add-on.