SwitchUser

Yes, SwitchUser uses signed session cookies and nonce protection to ensure all switch actions are secure.

Absolutely. SwitchUser adds a quick-switch action directly to the WooCommerce order details screen.

Yes, SwitchUser is fully compatible with WordPress Multisite networks.

In SwitchUser Pro, every switch is recorded in an audit log in your WordPress database: who switched, to whom, when and from which IP. You can view it in the dashboard, export it as CSV, and set how many days logs are kept. The free version records switch events in the PHP error log only.

Basic user switching plugins let an admin switch accounts. SwitchUser is built for stores and support teams that also need accountability and control: a full audit log (Pro), switching straight from a WooCommerce order, role permissions, protection for admin accounts, and automatic switch-back after inactivity (Pro).

Yes. Role permissions control who can switch and which accounts they can switch into. Pro adds per-user switch grants and an IP allowlist, so you can give a support agent switching access without making them an administrator.

No. SwitchUser never lets anyone switch into an account with an equal or higher role, so administrator accounts can't be switched into, even by other administrators. Pro adds locked-user protection for specific accounts and can require re-authentication before switching into privileged accounts.

The free version includes one-click switching from the Users list, profiles and WooCommerce orders, admin bar user search, role-based access control, automatic blocking of admin and equal-or-higher accounts, HMAC-signed cookie sessions, configurable session length (1–168 hours), Switch Back and Switch Off, and multisite support. Pro adds a full audit log dashboard, idle timeout, re-authentication for privileged switches, IP allowlist, scheduled switching windows, per-user grants, locked user protection, email alerts, automatic updates and priority support.

Audit logs (Pro) are stored only in your own WordPress database and are never sent to an outside service. You can set how long logs are kept (30 days by default), so old records are deleted automatically. The free version writes switch events, including the IP address, to your server's PHP error log.

Pro costs $49 per year for 1 site, with 5-site and 10-site licenses available, billed yearly or every 2 years (save 30% with the 2-year option). Every purchase includes a 14-day money-back guarantee.