ExpiryFlow – Temporary User Access & Expiry Manager

Giving temporary access to contractors, guest writers, or support agents is a standard part of managing a WordPress site. The problem? Administrators often forget to revoke that access.

These “Zombie Accounts” are a major security risk and lead to database bloat over time.

ExpiryFlow solves this by automating the offboarding process. You set an expiry date at the moment of account creation, and the plugin handles the rest—from blocking login to permanent deletion.

Built with a performance-first, object-oriented architecture for modern WordPress sites.

For more information, visit the official plugin page: ExpiryFlow

Who is this for?

• Agencies & Developers giving temporary site access to contractors.
• Membership Sites offering limited-time “Trial” or “Preview” accounts.
• News & Blogs hiring guest contributors for specific projects.
• Security-Conscious Admins who want to ensure access is always revoked on time.

Core Features

• Expiry Date Management — Easily set an expiration date for any non-administrator user directly from the user profile or registration screen.
• Manual Status Control — Revoke access immediately with a single click using the “Account Status” toggle, overriding the automated expiry date.
• Real-Time Enforcement — Expired users are blocked immediately.
  Even if they are already logged in, the system re-validates their status hourly.
• Auto-Deletion System — Choose to have expired users automatically removed from your database after a configurable grace period.
• Content Preservation — When a user is auto-deleted, all their posts and comments are safely reassigned to a site administrator.
• Admin Immunity — Site administrators are protected from accidental expiration to ensure you never lose access to your own site.
• Clean Admin Interface — Adds “Status” and “Expires” columns to the Users list with color-coded badges for at-a-glance management.
• Developer Friendly — Namespaced, class-based architecture following PHP 8 standards and WordPress best practices.

Privacy First

This plugin is built with data minimization in mind. It helps you comply with GDPR by ensuring personal data (user accounts) is not kept longer than necessary. No external tracking, no “Powered by” links, and no remote data collection.

Future Roadmap

• Email Notifications — Automated warnings sent to users before their access expires.
• Bulk Actions — Set or clear expiry dates for multiple users at once from the Users list.
• Customizable Settings — Adjust the grace period and auto-deletion batch sizes.

More Plugins

• ButtonFlow — The easiest way to create high-converting, beautiful call-to-action buttons in WordPress.
• UserFlow — Remove dashboard access to non-admin users and easily control who can access your WordPress dashboard with simple configuration