The right way to provide support for WordPress customers. Secure logins and encrypted secret sharing.
Log into your customers’ sites without a password crossing the ticket
Do you provide support for WordPress websites? When a bug needs a look at the actual site, the usual options are a password typed into a support ticket or a temporary account you have to walk the customer through creating. TrustedLogin replaces both with one click: the customer grants access, your site encrypts the handoff before anything leaves the customer’s server, and the TrustedLogin Connector plugin on your own WordPress site is where you log in from.
Every ticket that needs a login costs you a day: the ask, the wait, then a password typed into the thread that is now your liability. Integrate TrustedLogin into your own plugin and your agent fixes the bug on the first reply instead. Every grant is scoped to the role you chose, expires on its own, and lands in one dashboard that answers “who was in this site, and when” from a record rather than from memory. Agencies run a client fleet the same way: when an engagement ends there is nothing to revoke, because nobody was holding a permanent password to begin with.
How it works
- Create an account on TrustedLogin.com
- Install the TrustedLogin Connector plugin on your WordPress site
- Integrate the TrustedLogin SDK into your code
Your users will then be able to grant you access to their site and provide you with an Access Key. With this plugin, you can log into their site using the Access Key.
Start free, no credit card required
TrustedLogin includes a free plan that lets you connect customer sites and start handling support access right away. No credit card, no trial countdown. Upgrade your TrustedLogin account when your team needs more capacity or premium features. Create your free account at TrustedLogin.com and you can have the Connector installed and your first team connected in minutes.
Share passwords and credentials with encrypted, time-limited links
Stop pasting passwords, API keys, and other short-lived credentials into email and chat, where they sit in archives forever and get accidentally re-shared. Anyone you’ve granted the Create Secrets capability (support agents, internal admins, or customers themselves) can generate an encrypted link that expires on a schedule you set, optionally requires a passphrase, and can either burn after the first view or stay reusable until its expiration. Every reveal lands in your audit trail.
How it works
- Open the Secrets page in your WordPress dashboard
- Paste the credential, set an optional passphrase and expiration, and choose whether the link should burn after the first view or stay reusable
- Share the generated link with the other party
The recipient opens the link, sees the credential, and the rules you set take effect. Every reveal, every failed passphrase attempt, and every destruction is logged, so you always know who saw what and when.
See every support session at a glance
The Login Activity dashboard puts every access event on one screen: a per-agent breakdown with a stacked bar chart, daily or weekly buckets you can scope from one day to twelve months back, and a clickable legend that filters the view to a single teammate. Refused login attempts include the exact reason and the recommended next step right inside the dashboard, so you never have to guess what went wrong.
Administrators see every team. Other capability holders see only the teams they’re approved to support. When a support escalation lands and you need to know who touched what, and when, the answer is one click away.
Add Grant Access to any Gravity Forms form
If you already use Gravity Forms to take support requests, onboarding intake, or sales inquiries, you don’t need a separate page to capture site access. Drop the TrustedLogin field into any form. Requesters paste their site URL, click a button, complete the grant flow in a popup, and the access key lands in the form entry alongside the rest of their submission.
The field works in the Gravity Forms editor, on the front-end form, and on the entry-detail page. It honors the form’s label placement so it matches the rest of the form’s look, and the entry-detail view ships with a one-click login link so agents can open the customer’s site directly from the entry.
See customer access from inside Help Scout, Freescout, or your own helpdesk
When a customer has granted your support team access, your agent shouldn’t have to leave the ticket to use it. The Connector ships webhook integrations for Help Scout and Freescout that show a one-click login link right inside the helpdesk thread, matched to the customer’s email. Building your own helpdesk integration? The same webhook surface is available to any provider you wire up.
Webhooks are HMAC-signed end-to-end and configured through the helpdesk’s standard webhook interface.
Fine-grained capability control without rewriting WordPress roles
Not everyone on your team needs to do everything. The Permissions matrix lets you grant or revoke the four TrustedLogin capabilities (Sign in to client sites, View Activity, Create Secrets, and Manage Secrets) per WordPress role, all from a single admin screen. Your editors might handle access grants but not secret management. Your contractors might view activity but not log in themselves. Every capability change is recorded in the audit log.
The matrix respects WordPress’s role system without forcing you to edit it. Granting any TrustedLogin capability to a low-trust role triggers a type-to-confirm modal, so you can’t accidentally hand a Subscriber the keys to a customer site.
Manage support access across multiple teams and products
Whether you support more than one SaaS product, run multiple client engagements, or operate as an agency with several brands, the Connector lets you register multiple teams in a single install. Each team has its own access settings, approved roles, helpdesk integration (or no helpdesk at all), and webhook signing secret.
Login Activity, Permissions, and Secrets all respect team scoping. Capability holders see only the teams they’re approved to support. Administrators see everything in one place.
Screenshots
Login Activity inside WordPress: every access attempt at a glance, broken out per agent across daily time buckets with a clickable legend.
Sites dashboard at TrustedLogin.com: every customer site your team can support, with connection status, expiry, and one-click "Log in" for each.
Site detail: the access key, expiration, last sync, endpoint URL, and a Revoke button when the session is done.
WordPress onboarding: paste your TrustedLogin account credentials, pick which roles can grant support access, and you're live.
Access Key Log-In: paste a customer's access key and pick which of their connected sites to land on.
Secrets dashboard: every secret your team has shared, with status, view counts, expiration, and a one-click Create Secret button.
Permissions matrix: grant or revoke the four TrustedLogin capabilities per WordPress role from a single screen.
Help Desk integration: your agent sees a customer's granted access and logs in, right inside the Help Scout or Freescout ticket thread.