Descripcion
WordPress Administrator accounts often accumulate over time. Old developers, agencies, employees, and temporary accounts can remain active for years.
Trolla Last Login & Security gives you a focused overview of who currently has Administrator access, when each account was created, and when the account was last observed logging in.
Focused and useful
- See every current Administrator in one place.
- Identify accounts with a recorded login older than your inactivity threshold.
- See recently created Administrator accounts.
- See when Administrator access was granted after monitoring began.
- Distinguish « Never logged in » from historical logins the plugin could not know about.
- Receive an optional email when Administrator access is granted.
- View locally observed Last Login information on the standard Users screen.
Trolla Last Login & Security does not delete accounts, change roles, or claim that an account is malicious. It provides factual information so a site owner can make an informed review.
Lightweight and private
- No external services or API calls.
- No telemetry or analytics.
- No IP address, browser, geographic, password, cookie, or authentication-data logging.
- No frontend scripts or styles.
- No scheduled background jobs.
Trolla Last Login & Security does not transmit site or user information to external services. Monitoring data is stored locally in your WordPress database.
Login-history accuracy
WordPress does not store a native last-login timestamp. Trolla Last Login & Security starts recording successful logins after the plugin begins monitoring.
For an older account without an observed login, the plugin displays « No login recorded. » It does not claim the person has never logged in. « Never logged in » is only shown when the account itself was created after monitoring began and no login has been observed.
WordPress does not store historical role-grant dates. Existing Administrators therefore show « Before monitoring » in the Admin Since column. Exact dates are recorded for Administrator access granted while monitoring is active.
Privacy
Trolla Last Login & Security does not transmit site or user information to external services. Monitoring data is stored locally in your WordPress database.
The plugin stores:
- Successful-login timestamps in user metadata.
- A local marker when user-account creation is observed while monitoring is active.
- Timestamps for when monitoring first began and most recently resumed.
- The most recent time Administrator access was granted to a user.
- Inactivity, recent-account, email-alert, and uninstall preferences.
- Minimal Administrator role-grant events containing a user ID, event type, and timestamp.
- A per-user notice fingerprint when a review notice is dismissed.
It does not store IP addresses, user agents, geographic information, passwords, authentication information, cookies, or analytics identifiers.
Installacion
- Upload the
trolla-last-login-securityfolder to/wp-content/plugins/, or install the plugin through the WordPress Plugins screen. - Activate Trolla Last Login & Security.
- Open Users > Trolla Last Login & Security.
- Review the default thresholds and email-alert setting.
The plugin begins recording successful login timestamps from activation onward. Existing historical login activity cannot be reconstructed.
FAQ
-
Does this plugin send data anywhere?
-
No. It makes no external requests and includes no telemetry. Monitoring data remains in the site’s WordPress database.
-
Does it record IP addresses or browser information?
-
No. It records only successful-login timestamps and minimal Administrator role-grant events.
-
Why does an account say « No login recorded »?
-
The account existed before Trolla Last Login & Security started monitoring, and the plugin has not observed a successful login since then. The label preserves the uncertainty of older login history.
-
When is « Never logged in » shown?
-
Only when the user account was created after monitoring began and the plugin has not observed a successful login.
-
How are email alerts delivered?
-
The plugin calls WordPress’s
wp_mail()function and sends to the site’s Administration Email Address. It does not provide SMTP or mail-delivery configuration. -
What happens when I deactivate or delete the plugin?
-
Deactivation never removes data. By default, deletion also retains data so monitoring history survives a reinstall. Enable « Remove all Trolla Last Login & Security data when the plugin is deleted » in the plugin settings if deliberate cleanup is required.
-
Does it support WordPress Multisite?
-
Version 1 is designed for standard, site-level WordPress installations. Advanced and network-wide Multisite behavior has not been tested and is not claimed as supported.
Reviews
There are no reviews for this plugin.
Contributors & Developers
“Trolla Last Login & Security” is open source software. The following people have contributed to this plugin.
ContributorsTranslate “Trolla Last Login & Security” into your language.
Interested in development?
Browse the code, check out the SVN repository, or subscribe to the development log by RSS.
Changelog
1.0.0
- Initial release.