Loggedin
Limit how many active logins each WordPress user can have.
- Set a maximum number of simultaneous logins per user
- Choose to block the new login or log out the oldest session
- Works site-wide with a single setting
- Lightweight, with no impact on front-end performance
- License
- GPL-2.0-or-later
- Language
- PHP
- Requires
- PHP 7.4+
- Since
- 2016
- Installs
- 8,000+ active installs
- Rating
- 4.9★ (110 ratings)
Loggedin in the WordPress admin
Everything Loggedin adds to wp-admin, and where to find it.
Pick a number, pick what happens next
Set the maximum active logins per account, then choose the behaviour at the limit — block the new login, end the oldest session, or end all of them.
The whole core plugin is this one panel. Everything else is an add-on.
A clear message, not a silent failure
With Block New selected, a user who has reached the limit is told why the login was refused instead of being bounced back to an empty form.
Choose Logout Oldest instead and the newest login always wins.
Add only what you need
The Add-ons tab lists every first-party add-on with a button to buy it, manage its license, or open its page. The core plugin stays lean.
Add-ons declare the core plugin as a requirement, so WordPress won't activate one without it.
About Loggedin
Cap concurrent sessions per user in WordPress — block new logins or override the oldest to keep shared and sensitive accounts under control.
What it does
Loggedin limits how many active sessions a single WordPress account can have at once. When the limit is reached you decide what happens next — reject the new login, or end the oldest session automatically.
Why it exists
Shared accounts and leaked passwords are a real risk. Loggedin gives site owners a simple, dependable control over concurrent access without a heavyweight security suite. Maintained since 2016, rated 4.9★.
Extend Loggedin when you need more.
The core plugin stays lean. Each add-on is a small, opt-in plugin that snaps into the same settings screen — install only the ones you need.
Active Sessions
A searchable admin list of everyone signed in right now, with per-device detail and one-click sign-out — for a single session, a whole user, or many users at once.
Learn more →Auto Logout
Automatically log out inactive WordPress users after a set idle timeout — with a warning countdown, per-role timeouts, and control over how long a login lasts.
Learn more →Real-time Logout
Polls the server on an interval so a session ended elsewhere bounces open tabs straight back to the login screen, instead of lingering until the next click.
Learn more →Limit Per User
Give one account more (or fewer) concurrent sessions than your global limit, straight from the user's profile screen.
Learn more →Limit Per Role
Give administrators more headroom and keep subscribers tighter — a concurrent-session limit per WordPress role, built-in or custom.
Learn more →Frequently asked questions
How do I limit concurrent logins in WordPress?
Install Loggedin and set a maximum number of simultaneous sessions per user. It works site-wide from a single setting, so once the limit is set every account is capped without any per-user configuration.
What happens when a user hits the login limit?
You choose. Loggedin can either block the new login attempt and leave existing sessions alone, or allow the new login and automatically log out the oldest session. Blocking is the stricter option; the override keeps a locked-out user from having to wait.
Can I set different login limits for different user roles?
The core plugin applies one limit site-wide. The Limit Per Role add-on sets separate caps per role — for example one session for subscribers and three for editors — and Limit Per User overrides the cap for individual accounts.
Does Loggedin slow down my site?
No. The session check runs at login, not on every page view, so there is no front-end performance cost. The plugin is deliberately small — it does one job rather than bundling a full security suite.
Guides for Loggedin
Walkthroughs and write-ups covering Loggedin in practice.
How to force log out a WordPress user from every device, instantly
Ending a WordPress session on the server is easy — the user's open tabs just don't notice until they click something. Here are four ways to force a user out of every device, from the button hidden in core to a polling script that bounces their tabs to the login screen within a minute, with honest pros and cons for each.
Read more →
How to limit concurrent logins and stop account sharing in WordPress
WordPress lets one account stay signed in on as many devices as it likes — a phone, a laptop, and three friends' browsers all at once. Here are four ways to cap concurrent logins per user, from a ten-line snippet to a free plugin with three enforcement modes, with honest pros and cons for each.
Read more →
How to automatically log out inactive users in WordPress
WordPress keeps a login alive for 2 days — 14 with "Remember Me" — no matter how long the browser sits untouched. Here are four ways to add an idle timeout that signs inactive users out, from a one-line snippet to a full warning-countdown setup, with honest pros and cons for each.
Read more →Learn how we can help you build better.
Questions about a plugin, a licence, or an expert advisor — ask and get a straight answer from the team that wrote the code.