Sign in to wp-admin in one click

Every site page has a WP Admin button in the top right. Click it and the site’s WordPress dashboard opens in a new tab, already signed in.

Which WordPress account it uses

1. The administrator you picked under Site settings › Sign in as, if you picked one.
2. Otherwise, the administrator on the site with the same email address as your WP Foreman account, if there is one.
3. Otherwise, the site’s first administrator account.

Choose the account

When a site has several administrators, open the site, go to Site settings › Sign in as, pick one from the list (it’s read from the site) and click Save. Choose Automatic to go back to the rules above. The same account is used when you let WP Foreman support sign in on a support request. Needs WP Foreman plugin 0.7.7 or newer on the site.

How it stays safe

• WP Foreman asks the site for a sign-in link over the same signed connection it uses for everything else. Nobody can request one without your WP Foreman account.
• The link works once and expires after 60 seconds. Opening it again shows “This sign-in link has expired”.
• The site only stores a fingerprint of the link, never the link itself.
• WordPress records it as a normal sign-in, so security and activity-log plugins see it.
• Each sign-in is listed in the site’s Recent work with who used it.