New to the community? Start here

Disallow simultaneous login from multiple device

I want to have an option that the user on WordPress only logs in one time. If they want to log in from another device or browser they can’t and I want to set time for the session if they do not have activity.

Wed, 6 Mar 2019 12:33:39
More Defender Pro discussions
Defender Pro
  • Adam
    • Support Gorilla

    Hello Marcos

    I hope you’re well today and thank you for your question!

    Currently there’s no such option in Defender (and other plugins of ours) so it’s not possible “out of the box” with it. As a workaround, plugins such as the ones suggested during the live chat session could be used to achieve this:

    https://wordpress.org/plugins/loggedin/

    https://wordpress.org/plugins/wp-bouncer/

    However, I believe such feature would make a great addition to our Defender so I’ve already put that idea in from of our developers so they’d consider adding it to the plugin in future.

    If you have any additional questions or suggestion on this, let me know please.

    Kind regards,

    Adam

  • Adam
    • Support Gorilla

    Hello again Marcos

    I’ve talked to our developers and I got some additional question, if you don’t mind: could you give us some example “usage scenario”, please?

    I’m asking mostly about the what should be happening if a user is already logged in from one device and tries to login on the other one – should they be “kicked off” on that first one and logged in on that “new” one or rather not allowed to login on that new one until they log off from the first one?

    Should that be a “strict 1 device” limit or maybe an option to set the number of the maximum allowed devices at the same time?

    Finally, assuming that user is locked out on a “new” device because he’s still logged in on the other one but for some reason they don’t have that other one at hand – so they can’t logout there – how would they be able to bypass that? To explain that a bit more, a common scenario could be like this:

    – I’m logging in to the site from my workstation at my office

    – when I’m leaving the office I’m not really logging out, just leaving the workstation on or hibernating it – while still logged in

    – then I’m trying to login to the site from my laptop somewhere far from the office (where there’s nobody trusted around to actually log me out from there) and I’m locked out because of “1 device” limit

    Would you mind sharing some additional feedback on this?

    Best regards,

    Adam

  • Thad
    • New Recruit

    We would love to have this sort of functionality added in as well!

    If it could be setup to limit the user login to one device at a time (or a specific number of login instances – essentially simultaneous connections from one account). Give the user the option of automatically logging them out of other instances to allow the current connection to go live. WordPress allows this through the User Profile which allows a user to ‘Logout Everywhere Else’ (Profile -> Account Management -> Sessions).

    Our first need for this is to offer streaming video of events to our paid users/members but we would like to block account sharing.

    • Adam
      • Support Gorilla

      Hi Thad

      Good shot with that already existing “logout” feature! You’re right – there’s already a tool so it seems that would mostly be a matter of “automating” it.

      Thank you also for that example case scenario. I’m discussing that with our developers :slight_smile:

      Best regards,

      Adam