Short-lived signed tokens
Access is granted through a cryptographically signed, single-use token valid for seconds, not a stored password. Nothing reusable is transmitted or held.
One-click login
Open any site's WordPress admin in one click
No password manager lookup, no shared credentials, no separate admin account per person. Click the site, land in wp-admin as yourself, and have the session recorded automatically.
Included on every plan. No add-on pricing.
Recent sessionsLive
Sessions today
18
6 team members
Avg duration
4m 20s
Stored passwords
0
none required
Revocations
2
contractor offboarded
JTJonah T. to northridge-dental.com
ClosedAMAmara O. to harvest-collective.store
ClosedJTJonah T. to bramble-fields.org
ActiveRCRea C. to meridian-partners.com
Closed The problem
The friction adds up faster than you think
Twenty seconds to find the credential, ten to log in, five to dismiss the notices. Call it under a minute. Do it fifteen times a day and you have lost a meaningful part of the week to the act of arriving somewhere, before any work has happened.
The security cost is worse than the time cost. Every extra admin account on every client site is another credential to rotate, another target, and another thing to forget about when somebody leaves.
What this looks like without a platform
- Hunting through a password manager fifteen times a day
- One admin account per team member per site, multiplying fast
- Orphaned admin accounts left behind after a project ends
- No record of who logged into what
How it works
How secure one-click login works
Mapped to your WPCentrify identity
You arrive in WordPress as a user tied to your WPCentrify account, with a WordPress role that matches your permission level. A technician does not silently become a site administrator.
Recorded as a session
Every login is logged with who, which site, when, and how long. If a client asks who was in their site on Tuesday, there is an answer.
Revoked centrally
Remove someone from your team and their ability to reach every connected site ends at once. There is no per-site cleanup.
In practice
WordPress SSO for agencies: details that matter day to day
Land where you were going
Jump straight to the plugins screen, a specific post, or the WooCommerce orders list rather than always arriving at the dashboard.
Works with security plugins
Compatible with the common firewall and login-hardening plugins, including sites that have moved or protected the login URL.
Optional client-side disable
Any site owner can revoke one-click access from within WordPress at any time, which is worth telling nervous clients.
Two-factor respected
If your WPCentrify account requires 2FA, that requirement gates one-click login too.
At scale
Built for a portfolio, not a single site
- Reach any site from search, from the site list, or from an alert
- Deep link into a specific admin screen
- Per-site and per-role access control
- Full session history in the audit log
- No permanent admin accounts created on client sites
- Instant revocation across the whole portfolio
Answers
Questions about one-click login
What people ask before they turn this on.
It is more secure in practice. There is no reusable password to steal, access is scoped to a role, every session is recorded, and revocation is instant and central rather than a per-site chore.
Yes. One-click login does not depend on the standard login page and works with the common security plugins that move or protect it.
Yes, from within their own WordPress installation at any time. Site owners keep ultimate control, which is the correct arrangement.
Early access open
Try one-click login on your own sites
Connect a site in under two minutes and see this working against something real. Free during early access.
Free during early access. Keep your data, export any time.