WPZOOM User History - Lock Users & Change Usernames

Go to Users > All Users, click on any user to edit their profile, and scroll down to the "Account History" section.

On the user edit page, click the "Change" link next to the username field. Enter the new username and click "Change" to save.

No. The plugin only logs that a password was changed, along with the date and who changed it. No password values (hashed or otherwise) are ever stored.

Yes! On the All Users page, use the search box to search for any previous email, username, or name. Users who previously had matching values will appear in the results.

• Username (user_login)
• Email (user_email)
• Password (change event only)
• Display Name
• Nicename
• Website URL
• First Name
• Last Name
• Nickname
• Biographical Info
• Role (including multiple roles with Members plugin)

Yes. The plugin works on multisite installations and properly handles super admin username changes.

Yes. The plugin correctly tracks role changes when using the Members plugin, which allows assigning multiple roles to users.

There are several ways to lock a user:

1. User edit page - Go to a user's profile and click "Lock Account" in the Account Status section
2. Row action - Hover over a user on the All Users page and click "Lock"
3. Bulk action - Select multiple users on the All Users page, choose "Lock" from the Bulk Actions dropdown, and click Apply

• All active sessions are destroyed immediately
• The user cannot log in via the login form
• Application password authentication (REST API, XML-RPC) is blocked
• A customizable error message is shown on the login screen
• WP-CLI access is still allowed so admins can manage the account

Go to Settings > User History. You can set a custom message that locked users will see when they try to log in. Leave it empty to use the default message.

On the user edit page, scroll down to the Account History section and click the "Clear Log" button. To clear all logs for every user at once, go to Settings > User History and click "Clear All Logs".

Go to Settings > User History. Under "Data Retention", set the number of days to keep logs (default: 30). Old logs are automatically deleted daily. Set to 0 to keep logs indefinitely.

Yes! The Account History section on each user's edit page has a "Logins" tab that shows all login events, logouts, and failed login attempts with timestamps, IP addresses, and browser information.

On the user edit page, scroll down to Account History and click the "Sessions" tab. You can see all active sessions including login time, IP address, browser, and when each session expires. Click "Log Out Everywhere" to destroy all sessions.

Yes. Go to Settings > User History and uncheck "Record IP addresses" under the Privacy section. This helps with GDPR compliance.

Yes. When you activate User History, any users locked with the Lock User Account plugin will be automatically migrated to the new lock system.