Configure

WordPress x Sync User Accounts

Synchronize WordPress users between two or more independent websites with secure omni-way user sync, password hash synchronization, retry queues, event deduplication, and safe role protection.

Built by Angvlar SRL.



Key Features


* Omni-way synchronization between two or more WordPress sites

* User creation synchronization with skip-if-existing protection

* Profile update synchronization across connected sites

* Password hash synchronization without storing plain passwords

* Optional user deletion propagation with configurable delay

* Optional selected user meta synchronization

* Per-remote-site retry queue for failed sync attempts

* Queue row locking to prevent duplicate delivery during overlapping cron runs

* Event deduplication and loop prevention

* HMAC-signed REST communication between sites

* External cron endpoint for reliable queue processing

* Private health endpoint protected by cron key by default

* Optional lightweight public health mode

* Admin queue screen for reviewing pending and failed sync jobs

* Admin logs screen for monitoring synchronization activity

* Automatic pruning for completed queue rows, processed events, and logs

* Configurable retention periods and maintenance batch limits

* No core WordPress file modifications



Security & Role Protection


* Passwords are synchronized as WordPress password hashes only

* Plain passwords are never stored or logged

* Roles are not copied between sites

* Remote users are created with a configurable safe default role

* Privileged role escalation is blocked by design

* Administrator, editor, shop manager, and super admin roles are protected

* Shared secret based authentication for connected sites

* HMAC request signing to verify sync requests



Queue & Reliability


* Failed sync requests can be retried automatically

* Configurable maximum retry attempts

* Configurable request timeout

* Processing timeout protection for stuck queue rows

* Idempotent behavior helps avoid duplicate user creation

* Event tracking helps prevent synchronization loops between connected sites

* Maintenance cleanup keeps logs, queue rows, and processed events under control



Use Cases


* Synchronize customers between multiple WordPress websites

* Keep user accounts aligned across connected brand, shop, or membership sites

* Share user login credentials between independent WordPress installations

* Maintain user profile updates across multiple related websites

* Connect separate WordPress sites without using WordPress Multisite



Requirements


* WordPress installed and active on each connected site

* PHP 7.4 or newer

* WordPress 6.0 or newer

* REST API available on each connected site

* Same shared secret configured on all connected sites

* External cron recommended for reliable queue processing



Important Notes


This plugin is designed for independent WordPress installations that need user synchronization between multiple websites.

It does not require WordPress Multisite.

It does not copy roles between websites for safety reasons.

It does not store or expose plain text passwords.

Each connected site must be configured carefully with the correct Site ID, remote site URL, and shared secret.



Disclaimer


This plugin is intended for production WordPress environments, but should be tested carefully before use, especially on websites with custom authentication, custom user roles, membership systems, checkout flows, or login restrictions.

Compatibility with heavily customized authentication systems, third-party user management plugins, or custom password handling cannot be guaranteed without testing.

Angvlar SRL is not affiliated with WordPress, WooCommerce, or Automattic.