Loggedin · Version history
Loggedin changelog and version history
- Latest version
- 3.4.1
- Nov 8, 2026 (1 day ago)
- Releases
- 20
- since 2019
- In the last year
- 14
- about one every 28 days
- Tested up to
- WordPress 7.1.4
- PHP 7.4 or later
Releases each year
- 20192 releases
- 20202 releases
- 20231 release
- 20255 releases
- 202610 releases
202610 releases
Loggedin 3.4.1Latest
Loggedin 3.4.0
- New: Settings screen rebuilt with a sidebar of pages — Login limits, Lockout & recovery, Auto logout, Sessions, Add-ons and Help — and Save in the page header.
- New: Self-unlock — a user blocked by Block New can email themselves a link that signs out their other devices. Only offered after the right password; links are single-use and expire after 15 minutes.
- New: “Don’t limit administrators” setting.
- New: Set the blocked-login message on the Lockout & recovery page.
- New: A device signed out by a newer login is told why on the login screen, or sent to a page you choose.
- New: Auto logout is now free and built in — idle logout with a countdown, timeouts per role and session length.
- New: A password change or reset can sign the user out of their other devices. On for new sites. A password an LDAP or SSO plugin copies in as the user signs in doesn’t count.
- New: Sessions and Last login columns, and a “Sign out everywhere” action, on the Users screen.
- New: “Your sessions” on the profile screen.
- New: Logout Oldest and Logout All now also apply to logins that skip the login form (social login, magic links, popup logins).
- New: Switching to a user with User Switching isn’t treated as their login, so it signs out none of their devices.
- New: Add-ons can add pages, cards and fields from PHP with the loggedin_settings_schema filter.
- New: loggedin_sessions_displacing action before Logout All or Logout Oldest ends sessions, and loggedin_uninstalled after the plugin is deleted.
- New: loggedin_settings_properties filter, so an add-on’s own key in Loggedin’s settings is saved, and loggedin_session_device to name the devices in a user’s session list.
- New: A notice lists add-ons that need an update for the new settings screen.
- Improve: Block New checks the password first. A wrong password gets WordPress’s usual error, not the limit message.
- Improve: Add-ons built for the old screen keep working, and links from before 3.4.0 still open the right page.
- Improve: wp loggedin settings set accepts true/false, yes/no, on/off or 1/0 for on/off settings.
- Improve: Keyboard, screen reader and contrast fixes on the settings screen, the auto logout warning and the profile’s sign-out buttons. The current page and focused fields stay visible in Windows high contrast mode.
- Improve: Login modes added by other plugins through loggedin_logics can be saved.
- Improve: loggedin_destroy_all_sessions now fires for every way a user is signed out everywhere, including the Users screen, a password change and the unlock email.
- Improve: POST /loggedin/v1/settings accepts every setting, not only the limit and the login mode.
- Improve: Fewer database queries on each page: settings that are often unset are stored so they load with the rest, and pages that don’t sign anyone in no longer load the translations to check a setting.
- Fix: Checking a password without signing in, such as WooCommerce’s “current password” field, an application password, or the first step of two-factor login, no longer signs the user out of their other devices under Logout All or Logout Oldest. With a two-factor plugin, devices are signed out only o…
- Fix: The Block New message, and its unlock link, now show through Ultimate Member’s login form and Limit Login Attempts Reloaded, which replaced them with an “incorrect password” error.
- Fix: The old force-logout link now also checks that the user can manage options.
- Fix: Logout Oldest skips sessions that already expired, and ends as many as needed when the limit was lowered.
- Fix: wp loggedin sessions list no longer shows leftover sessions on a site that stores sessions elsewhere, such as Redis.
- Fix: Deleting the plugin now also removes the review notice’s settings, and on multisite removes Loggedin’s settings from every site.
- Changed: Requires WordPress 6.5.
Loggedin 3.3.1
- Fix: Some valid add-on license keys were rejected as invalid. Keys containing a % followed by two characters from 0–9 or a–f, in either case (for example %bB) were shortened before being sent to the licensing server. Affected add-ons could not be activated and so stopped receiving updates.
Loggedin 3.3.0
- New: Logout All Users — sign out every user on the site in one click from the Force Logout panel, with a confirmation dialog. Instant at any user count, and the admin who triggers it stays logged in.
- New: wp loggedin sessions destroy-all — the same site-wide logout from WP-CLI.
- New: REST endpoint POST /loggedin/v1/sessions/destroy-all backing the admin button.
- New: loggedin_logout_all_users action fired when a site-wide logout is triggered, and loggedin_session_invalidated action fired for each stale session as it is rejected.
- Improve: The site-wide logout goes through the standard WP_Session_Tokens API, so it works with any session storage backend.
Loggedin 3.2.0
- Improve: Faster settings reads — the plugin’s settings are now built once per request instead of on every read, cutting repeat work on each login and admin page load.
- Improve: Loggedin is now published under the Foxe Labs brand. Nothing about how the plugin works has changed.
- Improve: Updated every link in the plugin to the new foxelabs.com product pages and docs.foxelabs.com documentation.
- Improve: Removed the leftover Loggedin section on Settings → General. It only pointed at the real settings page and has been redundant since 2.0 — settings live under Users → Loggedin.
- Improve: Dropped the manual translation loading call — WordPress has loaded translations for wordpress.org plugins by itself since 4.6, so the call was redundant.
- Compat: Tested with WordPress 7.1.
Loggedin 3.1.0
- New: WP-CLI support — manage Loggedin from the command line with wp loggedin sessions (list, count, destroy) and wp loggedin settings (list, get, set). Run wp help loggedin for the full reference.
- New: wp loggedin sessions destroy <user> --token=<hash> signs a user out of a single device instead of all of them.
- New: loggedin_cli_init action so add-ons can register their own subcommands under the wp loggedin namespace.
- New: loggedin_destroy_session action fired when an individual session is destroyed.
- Improve: Renamed to “Loggedin – Session Manager, Limit Concurrent Logins & Force Logout” to reflect the plugin’s broader scope. Nothing about the concurrent-login limiting has changed — same settings, same behaviour, same plugin.
- Improve: The CLI refuses to write a setting the sanitizer would reject, so a typo can no longer silently reset your login logic to the default.
- Improve: CLI commands are only loaded on WP-CLI requests — a normal page load doesn’t pay for them.
Loggedin 3.0.2
- New: Review-request notice restored, powered by the duckdev/wp-review-notice library and scoped to the Loggedin settings screen with a 7-day delay.
- Improve: Legacy review-notice state migrated to the new storage keys so users who already dismissed the prompt stay dismissed.
- Improve: Admin notices now render inside the plugin’s centered page column instead of above the header.
- Fix: Left-hand gap between the plugin header and the admin sidebar caused by WordPress’s default #wpcontent padding.
Loggedin 3.0.1
- New: loggedin.admin.tabs JS filter — addons can register their own React component as a tab in the Loggedin admin nav, with optional before / after positioning hints. Powers the new Active Sessions addon.
- New: Cross-sell banner on the Force Logout panel routed through loggedin.settings.force_logout.cross_sell so addons can hide or replace it once installed.
- Improve: Addon card layout reworked — primary CTA pinned to the left of the footer, “More details” link on the right, title-cased license button labels.
- Fix: The v2 → v3 settings migration never ran on existing installs, leaving legacy option keys in place after the upgrade.
Loggedin 3.0.0
- New: Modern React-powered admin under Users → Loggedin with two tabs — Settings (concurrent-login limit + login logic + Force Logout panel) and Add-ons (catalogue + license management).
- New: REST API at /loggedin/v1/ for settings, session management and add-on licensing.
- New: Unified loggedin_settings option registered with show_in_rest, readable and writable by the React admin and by external integrations through the standard core-data flow.
- New: Force Logout panel now accepts a user ID, email or username — the resolver detects the input shape automatically.
- New: Add-ons module powered by Freemius — official add-ons (Real-time Logout, Limit Per User, Limit Per Role) self-register via the new loggedin_register_addon filter and appear in the Add-ons tab.
- New: JavaScript extension slot — add-ons can append their own React PanelBody to the Settings tab via the loggedin.settings.panels filter.
- New: Documented PHP hook surface — loggedin_init, loggedin_settings_defaults, loggedin_admin_script_vars, loggedin_addons_catalog, loggedin_destroy_oldest_session and more.
- Improve: Reorganised plugin structure (PSR-4 namespaces under DuckDev\Loggedin\) and aligned with WordPress Coding Standards.
- Improve: Comprehensive sanitisation pass across every input and option write path.
- Improve: PHP 7.4 is now the minimum supported version.
- For the full release history, see the changelog.
Loggedin 2.0.4
20255 releases
Loggedin 2.0.3
Loggedin 2.0.2
Loggedin 2.0.1
Loggedin 2.0
Loggedin 1.3.2
20231 release
Loggedin 1.3.1
20202 releases
Loggedin 1.3.0
Loggedin 1.2.0
20192 releases
Loggedin 1.1.0
Loggedin 1.0.1
Questions about Loggedin’s releases
What is the latest version of Loggedin?
3.4.1, released on Nov 8, 2026 (1 day ago). It’s tested up to WordPress 7.1.4 and needs PHP 7.4 or later.
How often is Loggedin updated?
14 releases in the last year, about one every 28 days. Its first release on WordPress.org dates from April 2019.
Know when your rivals ship
Track your plugin and its rivals: TrackWP sees each new release in the nightly snapshot and alerts you, with what it did to their rank.
Start freeRelease dates come from the day each version’s folder was made in Loggedin’s WordPress.org SVN repository; the notes from its readme’s changelog, as its authors wrote it.