WP Mechanic connects your site to a family of companion Android applications. Scan a QR code once on the plugin screen and the app can list and edit your WordPress users, browse WooCommerce orders, products and customers, and more – without you ever typing an admin password into a phone.

Included applications (all pair from the “WP Mechanic” menu)

WordPress Users
WordPress Users Management
WordPress Acrobatics (approve a temporary login from your phone)
WooCommerce Customers, Orders and Products
Alphabetic Pagination, Woo Coming Soon and WP Docs

Security by design

Pairing QR codes expire after a few minutes and work only once.
Every paired device gets its own random key; keys are never printed in a web page.
Repeated wrong keys from one IP address are throttled.
Temporary logins (Acrobatics) must be approved by a paired app, expire quickly and are single use.

Optional Pro add-on

A separate “pro” folder can be dropped into the plugin directory to unlock extra tools (activity log, per-device key revocation, access controls, IP allow-list, users CSV export). Remove the folder and everything above keeps working. The Pro add-on is not part of the copy distributed on WordPress.org.

Author: Fahad Mahmood
Project URI: https://androidbubble.com/blog/wordpress/plugins/wordpress-mechanic

External services

WP Mechanic does not call any external service. It only shows links that open when you click them:

Google Play (play.google.com) – download links for the companion apps on the plugin screen.
Google Meet (meet.google.com) – optional “need help” link shown on a product page when ?help is added to the URL; the link can be changed per product with a meeting-link custom field.

Credits

QR codes are generated with the bundled “PHP QR Code” library by Dominik Dzienia (LGPL 3, http://phpqrcode.sourceforge.net/).