How to revoke admin access from someone who no longer needs it
The ticket closed weeks ago and the Administrator account is still there — how to find and remove leftover WordPress access, account and Application Password both.
-
-
What the Rank Math Application Password incident means for your own support team
Rank Math’s plugin created an admin credential without asking. A dated teardown of what happened, and a six-question check for your own support access.
-
When your plugin’s “Help & Support” button grants itself admin
A Rank Math credential nobody consented to, a WPForms token that expired but still worked, and what building support access right actually requires.
-
GravityKit: the support team that built the access tool it needed
GravityKit built TrustedLogin to stop waiting on customer emails for site access. 2,589 support logins since August 2024, dogfooded on its own tickets.
-
How to give your support team access to a customer’s WordPress site (without emailing a password)
A customer pasted their admin password into a ticket. Here’s what to ask for instead — Application Passwords, a temporary-login plugin, or scoped access.
-
Why I stopped asking customers to email me a login
GravityKit’s support team used to wait on customer emails for a login. Why I built TrustedLogin instead, and what it still can’t do.