With our WordPress session eraser, you can set the interval at which the WordPress sessions of your WP users are deleted in just a few clicks.
What is a session?
A session in WordPress is nothing more than a kind of personal access card that the logged-in user receives on your website for the duration of their login. Think of it like the pass you'd receive when visiting parliament. This pass would last for the duration of your stay and contain the following information:
Name
Address
Level of access authorization (restriction to certain areas, etc.)
Duration of your visit
A WP session is basically the same principle. Like in the parliament example, the session data of your users in WordPress covers:
User name
IP address
User level (admin, editor, author etc.)
How long the session is valid
The session also contains a hash so that each session is unique (a user can also be logged in from several devices).
If a user actively logs out or the validity period has expired, the session is deleted - at least, this is the normal case. There are, however, some themes and plugins (e.g. certain shop or member themes) that do not delete these sessions from the database and thus store user data longer than required or allowed.
Our session eraser solves this problem
The WordPress session eraser deletes the WordPress sessions of all your users from the database after an interval defined by you. You can set this interval individually for each Box in the Box settings:
Simply follow these steps:
Click on the Settings tab in your Box overview.
Go to the Security menu to the left
Select WP Session Eraser.
The defined interval is always absolute. This means if you set the interval at, for example, 8 hours, the sessions will be deleted at the following times:
00:00
08:00 a.m.
16:00 p.m.
💡 By automatically deleting unnecessarily stored session data, you implement the GDPR principle of data minimization. WordPress session eraser thus helps you take another step towards GDPR compliance.