What the Rank Math Application Password incident means for your own support team
Rank Math’s plugin created an admin credential without asking. A dated teardown of what happened, and a six-question check for your own support access.
-
-
When your plugin’s “Help & Support” button grants itself admin
A Rank Math credential nobody consented to, a WPForms token that expired but still worked, and what building support access right actually requires.
-
GravityKit: the support team that built the access tool it needed
GravityKit built TrustedLogin to stop waiting on customer emails for site access. 2,589 support logins since August 2024, dogfooded on its own tickets.
-
How to give your support team access to a customer’s WordPress site (without emailing a password)
A customer pasted their admin password into a ticket. Here’s what to ask for instead — Application Passwords, a temporary-login plugin, or scoped access.
-
Why I stopped asking customers to email me a login
GravityKit’s support team used to wait on customer emails for a login. Why I built TrustedLogin instead, and what it still can’t do.
-
Temporary Login Without Password vs. TrustedLogin: your own site or your customers’ sites
Temporary Login Without Password and TrustedLogin solve different problems. Here’s what each one actually grants, and which one fits your support workflow.