Limit how many active logins each WordPress user can have.
Loggedin limits how many active sessions a single WordPress account can have at once. When the limit is reached you decide what happens next — reject the new login, or end the oldest session automatically.
Shared accounts and leaked passwords are a real risk. Loggedin gives site owners a simple, dependable control over concurrent access without a heavyweight security suite. Maintained since 2016, rated 4.9★.
// Add-ons
The core plugin stays lean. Each add-on is a small, opt-in plugin that snaps into the same settings screen — install only the ones you need.
A searchable admin list of everyone signed in right now, with per-device detail and one-click sign-out — for a single session, a whole user, or many users at once.
Polls the server on an interval so a session ended elsewhere bounces open tabs straight back to the login screen, instead of lingering until the next click.
Give one account more (or fewer) concurrent sessions than your global limit, straight from the user's profile screen.
Give administrators more headroom and keep subscribers tighter — a concurrent-session limit per WordPress role, built-in or custom.
Foxe