About this plugin
WordPress Administrator accounts often accumulate over time. Old developers, agencies, employees, and temporary accounts can remain active for years.
Trolla Last Login & Security gives you a focused overview of who currently has Administrator access, when each account was created, and when the account was last observed logging in.
Focused and useful
- See every current Administrator in one place.
- Identify accounts with a recorded login older than your inactivity threshold.
- See recently created Administrator accounts.
- See when Administrator access was granted after monitoring began.
- Distinguish “Never logged in” from historical logins the plugin could not know about.
- Receive an optional email when Administrator access is granted.
- View locally observed Last Login information on the standard Users screen.
Trolla Last Login & Security does not delete accounts, change roles, or claim that an account is malicious. It provides factual information so a site owner can make an informed review.
Lightweight and private
- No external services or API calls.
- No telemetry or analytics.
- No IP address, browser, geographic, password, cookie, or authentication-data logging.
- No frontend scripts or styles.
- No scheduled background jobs.
Trolla Last Login & Security does not transmit site or user information to external services. Monitoring data is stored locally in your WordPress database.
Login-history accuracy
WordPress does not store a native last-login timestamp. Trolla Last Login & Security starts recording successful logins after the plugin begins monitoring.
” It does not claim the person has never logged in. “Never logged in” is only shown when the account itself was created after monitoring began and no login has been observed.
WordPress does not store historical role-grant dates. Existing Administrators therefore show “Before monitoring” in the Admin Since column. Exact dates are recorded for Administrator access granted while monitoring is active.
Privacy
Trolla Last Login & Security does not transmit site or user information to external services. Monitoring data is stored locally in your WordPress database.
The plugin stores:
- Successful-login timestamps in user metadata.
- A local marker when user-account creation is observed while monitoring is active.
- Timestamps for when monitoring first began and most recently resumed.
- The most recent time Administrator access was granted to a user.
- Inactivity, recent-account, email-alert, and uninstall preferences.
- Minimal Administrator role-grant events containing a user ID, event type, and timestamp.
- A per-user notice fingerprint when a review notice is dismissed.
It does not store IP addresses, user agents, geographic information, passwords, authentication information, cookies, or analytics identifiers.