WP Manifestindependent plugin directory
manifest / security / tn-tame-session-defaults

TN Tame Session Defaults

Taming your WordPress user sessions, to help reduce the chance of session hijacking

by Tim Nash · github.com/timnashcouk/tn-tame-session-defaults · website

11stars
2release downloads
1forks

Install

The author publishes release zips, so WP-CLI can install straight from GitHub:

wp plugin install https://github.com/timnashcouk/tn-tame-session-defaults/releases/download/v1.2.1/tn-tame-session-defaults-1.2.1.zip

From the readme

Tame Session Defaults Tame Session Defaults is a small WordPress plugin that reduces authentication session lifetimes. Shorter sessions reduce the window of opportunity for session hijacking. It also includes controls for: - Shortening session lengths by default. - Fine-tuning session lengths with filters, including per user or role. - Validating selected logged-in request areas against the stored session IP address and user agent. - Limiting users to one active session by destroying other sessions on login. - Requiring re-authentication before configured sensitive admin operations. Install This is probably best used as an MU plugin. You can also copy the plugin code into your own starter or skeleton projects. Usage By default, the plugin reduces the normal logged-in session lifetime from 2 days to 2 hours. If "Remember Me" is checked, it reduces the session lifetime from 2 weeks to 24 hours. tntamesessiondefault Filters the default session length. The value is an integer expiry length in seconds. The logged-in user ID is passed as the second argument. tntamesessiondefaultremember Filters the session length when "Remember Me" is checked. The value is an integer expiry le

Read the full README on GitHub →

Releases

TagPublishedAssetDownloads
v1.2.1Jun 16, 2026tn-tame-session-defaults-1.2.1.zip2
V1.1.0Feb 17, 2024