About this plugin
RGBmind Ephemere is a secure, lightweight, and cybersecurity-focused temporary login and timed user access manager for WordPress.
Need to create a secure temporary login for a developer, support agent, freelance designer, IT contractor, auditor, or client? RGBmind Ephemere allows administrators to grant temporary access with automated expiration timers, login limits, instant kill-switch lockout, and real-time active session revocation.
Unlike basic login plugins, RGBmind Ephemere is built to meet strict WordPress development standards and cybersecurity principles (IAM – Identity & Access Management). All temporary access restrictions are enforced locally with zero external tracking and zero custom database bloat.
The core plugin is 100% free, fully functional, and unrestricted. For advanced agency workflows (such as passwordless One-Click Magic Links, GDPR Access Audit Log, Activity Tracking, and Real-Time Webhook/Email Security Alerts), a separate commercial companion add-on is available.
Key Features for Temporary Login & Access Control
- ⚡ 1-Click Quick Temporary Login: Generate temporary user accounts in seconds directly from the JIT dashboard, with email alias support ( [email protected], [email protected] ).
- ⏱️ Precise Expiration & Timed Access: Schedule automated expiration down to the exact minute, synchronized with your WordPress site timezone.
- 🔒 Maximum Login Limits (Threshold): Limit allowed logins (e.g. allow only 3 logins). Once reached, the temporary user is automatically locked out.
- 🛡️ Instant Account Lockout (Kill-Switch): Instantly revoke access with a single checkbox toggle, without altering user passwords or deleting accounts.
- 🛑 Real-Time Active Session Invalidation: If an active temporary user is browsing the admin dashboard when their expiration arrives, their session and authentication cookies are revoked immediately.
- 👥 Role & Permission Management (RBAC): Create and customize user roles, clone capabilities from standard roles, and enforce the Principle of Least Privilege.
- 📊 Multi-Format Data Export: Export temporary accounts and access audit logs to CSV, OpenXML Excel (.xlsx), and JSON with formula injection protection.
- 📅 Registration & Creation Date Tracking: View exact registration dates and relative time elapsed ( Created: 2 hours ago ) in the JIT table, user profiles, and exports.
- 🔍 Search & Filter Toolbar: Filter temporary users by role, lockout status, or username directly from the administrative dashboard.
- 🌐 Translation Ready (i18n): Fully internationalized with POT template included, adhering to WordPress core localization standards.
Architecture & Cybersecurity
- Zero Custom Database Tables: Uses native WordPress user metadata ( get_user_meta, update_user_meta, delete_user_meta ) and wp_options.
- Zero External Server Latency: 100% local execution, zero external API tracking calls, fully GDPR compliant.
- Strict Permission Checks: Only users with the promote_users capability (Administrators) can view or modify temporary parameters.
- CSRF Protection: Every action is guarded by WordPress cryptographic nonces.
- Clean Uninstallation: uninstall.php completely wipes all created user metadata and options upon plugin deletion.
Commercial Companion Add-on (PRO)
For web agencies and IT maintenance professionals requiring advanced capabilities, the separate commercial companion add-on RGBmind Ephemere PRO seamlessly integrates with this free plugin:
- ⚡ One-Click Temporary Login Link (Magic Link):
Generate an encrypted, single-use login link from the user profile or dashboard. Contractors and auditors can log in with a single click without sharing passwords. Only the SHA-256 hash is persisted in the database.
- 🛡️ Detailed Access Audit Log & Forensics:
View the last 20 logins directly in the user profile and central dashboard, showing exact timestamps, authentication method, duration, and configurable IP addresses (Full Clear Text or GDPR Anonymized).
- ⏱️ Real-Time Activity Tracking & Session Duration:
Monitor contractor session duration, active online status, and visited admin pages in real time.
- 🔔 Real-Time Security Email & Webhook Alerts:
Receive immediate notifications whenever a temporary account expires, reaches its login cap, or is locked out. Supports HTTP Webhooks for Slack, Discord, Zapier, or Make integrations.
com/ephemere to learn more about the PRO companion add-on.