English 
Français 
Italiano 
Español 
Português 
Deutsch WordPress Access
See who can log in to every client site, in one place. Glow flags new administrators, role changes, unused accounts and sites with a single admin, and lets you fix them without logging in to each site.
- Every login on every client site, grouped by person
- Alerts for new admins and role changes
- Fix risky accounts without logging in to each site
Everyone with a login, across every site
Client sites collect logins: an old freelancer, the client’s nephew, a developer who left two years ago. On one site that is easy to check. Across forty it never happens.
Glow reads the accounts on every site and groups them by email address, so you see each person once, with every site they can log in to and their role on each.
Know when something changes
Glow flags the changes worth a second look: a new administrator, someone moved to a higher role, an account nobody has used in months, or a site with only one administrator.
You choose which roles to track. Administrators, editors and shop managers are tracked by default, and customer and subscriber accounts are left out.
Fix it from Glow
Most findings come with a fix. Remove an account or change its role on one site, or on every site that person can log in to, in one go.
When a site has only one administrator, add a backup admin login with one click, so a lost password never locks you out.
Require two-factor sign-in for administrators
A stolen administrator password is the fastest way into a client site. Require two-factor sign-in for administrators on any site, and anyone without it is asked to set it up with an authenticator app before they can use wp-admin.
One-click login from Glow still works, so your team is never slowed down. Codes and recovery codes stay on the client site and never reach Glow.
Digital agency and web development teams trust Glow:
WordPress Management Tools
WordPress Management Tools
WordPress Management Tools
WordPress Management Tools
FAQs for WordPress Access
What does Glow need on each site?
The Glow plugin, version 4.5.0 or later. Sites on an older version are listed with a note to update the plugin, which you can do from Glow.
Which accounts does Glow read?
Accounts with the roles you choose to track. Administrators, editors and shop managers are tracked by default. Customer and subscriber accounts are never read into Glow, so a shop’s customer list stays on the shop.
Can Glow change accounts on its own?
No. An account only changes when someone on your team presses a fix button. Each change is sent to the site as a signed request that can only be used for that one action.
Is it ready to use?
Yes. WordPress Access is available to every agency, under Tools in the Glow dashboard. Tell us what you would change.
Can I require two-factor sign-in for administrators?
Yes, on any site with Glow plugin 4.7.0 or later. Administrators set it up with any authenticator app, such as Google Authenticator or 1Password. If the site already runs a two-factor plugin, Glow leaves it to that plugin. For login protection, file scans and auto-patch, see Glow Security.
Other Features
One click access
Login to your clients’ websites with one click. No more spreadsheets, usernames or passwords. Bliss!
More about One click accessVulnerabilities
Get alerts for security vulnerabilities in WordPress core, plugins and themes running on your clients’ sites.
More about VulnerabilitiesSecurity
Auto-patch vulnerable plugins, stop password guessing and scan files daily. Included in every plan.
More about Security