RGBmind Ephemere

RGBmind Ephemere is a lightweight, secure, and cybersecurity-focused access control plugin designed to manage temporary and time-limited user access on any WordPress site.

Built to meet strict WordPress development standards and cybersecurity principles, the plugin allows administrators to grant access to external developers, partner agencies, IT contractors, auditors, or clients with the guarantee that access will be automatically and reliably revoked when predefined limits are reached.

The plugin is 100% free, fully functional, and unrestricted. For advanced agency and enterprise workflows (such as passwordless One-Click Magic Links, GDPR Access Audit Log, and Security Alerts), a separate commercial companion add-on is available.

Key Free Features

• Precise Expiration Schedule: Set exact expiration date and time using native HTML5 datetime-local inputs, fully synchronized with your WordPress site timezone.
• Maximum Login Threshold: Limit total allowed logins (e.g. allow only 3 logins). Once the threshold is met, the account is automatically locked out.
• Instant Account Lockout: Instantly revoke access with a single checkbox toggle, without altering user passwords or deleting accounts.
• Access Monitoring: Real-time read-only view of login counts and last login timestamp, with an option to reset the counter when re-enabling access.
• Real-Time Active Session Invalidation: If an active temporary user is browsing the admin dashboard when their expiration time arrives, their session and authentication cookies are revoked immediately.
• Multi-Language & i18n Ready: Fully internationalized with POT template, ready for community translations via translate.wordpress.org, automatically adapting to your site and user profile locale.

Architecture & Cybersecurity

• Zero Custom Database Tables: Uses native WordPress user metadata (get_user_meta, update_user_meta, delete_user_meta) and wp_options.
• Zero External Server Latency: 100% local execution, zero external API tracking calls, fully GDPR compliant.
• Strict Permission Checks: Only users with the promote_users capability (Administrators) can view or modify temporary parameters.
• CSRF Protection: Every action is guarded by WordPress cryptographic nonces.
• Clean Uninstallation: uninstall.php completely wipes all created user metadata and options upon plugin deletion.

Commercial Companion Add-on (PRO)

For web agencies and IT maintenance professionals requiring advanced capabilities, the separate commercial companion add-on RGBmind Ephemere PRO seamlessly integrates with this free plugin:

• ⚡ One-Click Temporary Login Link (Magic Link):
  Generate an encrypted, single-use login link from the user profile. Contractors and auditors can log in with a single click without sharing passwords. Only the SHA-256 hash is persisted in the database.
• 🛡️ Detailed Access Audit Log:
  View the last 10 logins directly in the user profile, showing exact timestamps, authentication method, and GDPR-anonymized IP addresses.
• 🔔 Real-Time Security Email & Webhook Alerts:
  Receive immediate email notifications whenever a temporary account expires, reaches its login cap, or is locked out. Supports HTTP Webhooks for Slack, Discord, Zapier, or Make integrations.

Visit rgbmind.com/ephemere to learn more about the PRO companion add-on.