About this plugin
Dalmatian Dream Login As User adds a secure “Login as user” action to the WordPress Users screen for administrators with the dedicated dd_switch_users capability.
The plugin uses opaque per-session switch tokens, server-side transient state, nonce-protected switch and return actions, strict target validation, safe redirects, and cleanup on logout. It blocks nested impersonation and protects multisite super administrator accounts.
The plugin does not send data to external services and does not include telemetry, advertising, or remote code.
When switching accounts, the plugin preserves the administrator WordPress session in encrypted server-side state and creates a temporary target-user session. On return, it validates the administrator session and destroys only the temporary target session. AIOWPS logged-in-user tracking is temporarily suspended only while setting switch-related authentication cookies, so account switching does not appear as a new login.
Other authentication listeners remain active.
Privacy
Dalmatian Dream Login As User does not transmit personal data to external services. Switch-session state is stored temporarily in the local WordPress database using transients. The original administrator WordPress session token is encrypted using authenticated encryption before storage.
Switch state is removed when the session expires, the user returns to the administrator account, or the impersonated user logs out. The plugin also temporarily stores a hashed impersonation-session fingerprint to distinguish administrative switching from ordinary login/logout notifications.