DD Login As User adds a secure “Login as user” action to the WordPress Users screen for administrators with the dedicated dd_switch_users capability.

The plugin uses opaque per-session switch tokens, server-side transient state, nonce-protected switch and return actions, strict target validation, safe redirects, and cleanup on logout. It blocks nested impersonation and protects multisite super administrator accounts.

The plugin does not send data to external services and does not include telemetry, advertising, or remote code.

Privacy

DD Login As User does not transmit personal data to external services. Switch-session state is stored temporarily in the local WordPress database using transients and is removed when the session expires, the user returns to the administrator account, or the impersonated user logs out.