/ Plugin Category

/ User Management & Authentication

/ User Registration & Login

/ Loggedin – Limit Concurrent Sessions

Loggedin – Limit Concurrent Sessions

By Joel James

User Management & Authentication / User Registration & Login

Reviewed by Omar Dabbas

Trusted WordPress expert with 20+ years of experience evaluating plugins for the WP ecosystem.

Loggedin – Limit Concurrent Sessions Review - In-Depth Analysis

Limit the number of concurrent logins for user accounts. Prevent account sharing and manage sessions effectively.

Performance Overview

WPS Score

6.81/10

User Rating

4.9/5 (based on 111+ reviews)

Active Installations

8,000+

Update Frequency

Below Average It is calculated using the weighted average of same category plugins.

Security Score

5 / 10 (Medium Risk) It is calculated using the weighted average of all versions.

What It Does

Loggedin is a lightweight WordPress plugin that lets you easily limit the number of simultaneous active sessions a user can have. This is a crucial feature for membership sites, online courses, and other platforms where you need to prevent users from sharing their accounts.

With Loggedin, you can set global limits on the maximum number of concurrent logins for all users. You can choose to block new logins when the limit is reached or automatically log out the oldest session to allow a new one. This helps in preventing account sharing effectively.

The plugin also provides admin control, allowing you to force log out a user from the admin dashboard. It is built with a hook-based architecture, making it highly customizable and extensible for developers.

Enhance Loggedin's functionality with simple yet powerful add-ons. For more granular control, the Limit Per User addon allows you to set specific login limits for individual users. The Real-time Logout add-on ensures a seamless experience by checking for logouts in real time.

If you encounter any bugs, you can report them directly on the Loggedin GitHub repository. For support, please use the WordPress.org support forums.

Comparing to Alternatives

Loggedin – Limit Concurrent Sessions is a focused plugin for managing user sessions with several alternatives available that offer similar functionality.

Top alternatives

Strengths

Highly rated with 95.5% five-star reviews indicating strong user satisfaction
Simple and lightweight, making it easy to use without unnecessary complexity
Effectively prevents concurrent logins, useful for eLearning and membership sites
Works well in combination with other security measures like two-factor authentication
No paid version needed, fully functional as a free plugin

Weaknesses

Has a known medium severity security vulnerability fixed in version 1.3.2
Limited advanced features compared to some alternatives with pro versions
No official pro version means fewer premium support options
May not cover all session management needs for complex enterprise environments

User Sentiment Analysis

With 98% of ratings being 4 or 5 stars, users overwhelmingly praise the plugin's reliability and simplicity.

Positive highlights

"Works EXACTLY as is should!" — jonluciano
"Great plugin, in use by us since at least two years." — jacseq
"Works perfectly for me, combined with 2 factor authentication." — zchas42
"Love it, works like a charm." — DL
"A must have plugin." — frazard99

Common complaints

Weaknesses

Security vulnerability fixed recently, which may concern cautious users
Lacks a paid version, so no premium features or dedicated support

Who Should Use This?

Best for

Site owners who need a straightforward, reliable solution to limit concurrent user sessions without extra complexity or cost.

Not ideal for

Users requiring advanced session management features or enterprise-level support might find this plugin insufficient.

Pricing & Value

Free version includes

The free version includes all core features needed to limit concurrent sessions effectively without restrictions.

Final Verdict

Loggedin – Limit Concurrent Sessions is a highly effective and well-regarded plugin for managing user sessions with minimal fuss. Its simplicity and strong user ratings make it an excellent choice for most WordPress site owners looking to prevent concurrent logins.

However, users should be aware of a past security vulnerability that has been addressed and consider whether the lack of a pro version meets their needs. Alternatives exist with more features, but this plugin offers great value as a free, lightweight solution.

Other Notable Features

Here are a few other notable features of this free Loggedin – Limit Concurrent Sessions plugin.

Limit

Logout

Sessions

User Login

Screenshots

FAQ

In the WordPress admin, go to Users Loggedin. You’ll see two tabs — Settings for the cap and login logic, and Add-ons for installing and licensing first-party extensions.

The duration of a WordPress login session is controlled by WordPress, not Loggedin.

“Remember Me” checked at login session lasts 14 days.
“Remember Me” not checked session lasts 2 days.

Customize the duration with the standard auth_cookie_expiration filter:

 function custom_auth_cookie_expiration( $expire ) {     return MONTH_IN_SECONDS; // 30 days for every login. }  add_filter( 'auth_cookie_expiration', 'custom_auth_cookie_expiration' );

Yes, you can bypass the limit for certain users or roles by adding a few lines of code to your theme’s functions.php file or a custom plugin.

To bypass specific user IDs, use the following code:

 function loggedin_bypass_users( $bypass, $user_id ) {     // Add the user IDs you want to bypass to this array.     $allowed_users = array( 1, 2, 3, 4, 5 );     return in_array( $user_id, $allowed_users ); }  add_filter( 'loggedin_bypass', 'loggedin_bypass_users', 10, 2 );

To bypass specific user roles, use this code:

 function loggedin_bypass_roles( $prevent, $user_id ) {     // Add the roles you want to bypass to this array.     $allowed_roles = array( 'administrator', 'editor' );     $user = get_user_by( 'id', $user_id );     $roles = ! empty( $user->roles ) ? $user->roles : array();     return ! empty( array_intersect( $roles, $allowed_roles ) ); }  add_filter( 'loggedin_bypass', 'loggedin_bypass_roles', 10, 2 );

Yes, via the loggedin_error_message filter:

 add_filter( 'loggedin_error_message', function ( $message ) {     return 'Your account is already signed in elsewhere. Sign out from another device to continue.'; } );

See the developer docs for every filter and action the plugin exposes.