Install
This is the repository archive. It installs, but the folder name will carry the branch suffix and updates will not flow.
Install straight from GitHub with WP-CLI:
wp plugin install https://github.com/george-stathopoulos/fixpass/archive/refs/heads/main.zipShow support where it breaks. Let them in safely. Get it fixed.
Website · Download · Documentation
Fixpass is a free WordPress plugin for the moment something on your site goes wrong and you need help. It does two things that usually take a long email thread:
- Safe, temporary access for your support team. One click creates a login link for a temporary administrator account. No password is shared, access ends by itself (1 day to a week), and the account is deleted when it does.
- Spotlight. Instead of describing the problem, point at it. Click the broken part of the page, or drag a box around it, add a note, and your support team opens that page with the spot highlighted: the address, your screen size and browser, and any errors on the page come with it.
Once support logs in, they get a Support session page with your spots, full site details, the debug log, scheduled tasks and troubleshooting mode, which switches plugins off in their browser only, so your visitors never notice.
Not on WordPress? FixPin brings Spotlight to any website, as a free app and browser extension.
Lost in translation no more: your support team sees exactly what you see, and gets in without a password.
Features
| Give access | Full administrator access for 1, 2, 3 or 5 days, or a week. Extend by 24 hours (up to 30 days), end it any time. |
| Reusable or one-time link | Reusable (recommended): support logs in as often as they need until access ends. One-time: a single login. |
| Copy the details | One button copies the login link, your spots, site health and your plugins and themes, formatted for email or as plain text. |
| Live status | Waiting for support, support working on your site, logged out, ended. Updates by itself. |
| Spotlight | "Spotlight a problem" in the toolbar, on the site and in the dashboard. Up to 5 spots per page, each with a note. |
| Support session | Support sees your spots, site details, the debug log, errors, scheduled tasks and troubleshooting mode. Only support sees these. |
| Troubleshooting mode | Switch plugins off, or use a default theme, for support's browser only. |
| Clean up | The support account is deleted when access ends. Optionally, Fixpass deactivates and deletes itself too (with its history). |
| Support can extend | Optional: support adds 1 or 24 hours at a time, up to a limit you set (a number of days or a date). You're emailed each time. |
| Access history | See who did what (you, support, Fixpass): access given, extended and ended, logins, and what support did. Download (CSV), delete, or choose how long it's kept. |
| Two ways to start | "Show the problem, then give access" (recommended) or "Just give access". |
| Welcome tour | A short animated tour the first time, and any time after. |
Install
- Download
fixpass.zipfrom the latest release (under Assets), or build it yourself (see Development). Don't use GitHub's green Code → Download ZIP; that is the source, and Fixpass needs its built files. - In WordPress, go to Plugins → Add New → Upload Plugin, choose the zip, then Activate.
- You land on Fixpass, with a short tour.
Requires WordPress 6.5 or later and PHP 7.4 or later.
Quick start
- On the Fixpass page choose Show the problem, then give access (recommended) or Just give access.
- With the first, open the page with the problem and click Spotlight a problem in the toolbar. Click the problem or drag a box around it, add a note, then Continue. You land back on the Fixpass page with your spots.
- Choose how long support can stay and click Give access.
- Click Copy details and paste them into a reply to your support team.
- Watch the status: you'll see when support logs in and when they're done.
Documentation
Full guides are in docs/:
- Getting started
- Giving support access
- Spotlight
- For support teams
- Troubleshooting mode
- Security
- FAQ
- Developers
Security
Login links are random 256-bit codes; only a hash is stored. Password login is switched off for support accounts, they can't manage users, and every way access ends deletes the account. See docs/security.md, and report vulnerabilities privately as described in SECURITY.md.
Development
npm install
npm run build # build/ (the admin app)
npm run zip # dist/fixpass.zip, ready to upload
npm start rebuilds as you edit. dev/blueprint.json is a WordPress Playground blueprint for a test site with sample debug-log lines.
The website is built by website/build.mjs (the homepage, plus a help center generated from docs/); bin/publish-site.sh builds and publishes it to GitHub Pages.
Plugin code: fixpass.php, includes/ (PHP), assets/spotlight.js (the Spotlight overlay, plain JavaScript), src/ (the React admin app), mu-plugin/ (troubleshooting mode loader).
License
GPL-2.0-or-later. See LICENSE.