Stop Clients From Breaking Their Own Websites

Nothing changes for clients until you apply a policy. Once activated, the plugin sits silently in the background. When you assign a policy to a user role or specific user, those restrictions take effect immediately. Clients will see the Client Portal if you enable it, or a filtered version of wp-admin based on your policy rules. There is zero disruption during setup.

Yes. Temporary Access Elevation lets you grant a specific client access to a blocked screen or capability for a set duration — 1 hour, 24 hours, 7 days, or a custom window. When the timer expires, access is automatically revoked. No need to remember to manually remove it. The elevation is logged in the activity log with start and end timestamps.

AgencyLocks has three break-glass recovery methods. First, you can add a constant to wp-config.php that disables all policies instantly. Second, a signed URL generated during setup bypasses all restrictions when accessed. Third, WP-CLI commands let you disable policies from the command line. You will never be permanently locked out of your own site.

Yes. The "Builder Safe" policy template is specifically designed for sites using Elementor, Divi, Beaver Builder, and other page builders. It allows clients to edit content within the builder while blocking access to theme settings, global widgets, template management, and other areas that could break the design. You can also create custom policies with granular builder-specific rules.

AgencyLocks runs entirely on your WordPress installation. No data is sent to external servers. All policies, snapshots, activity logs, and portal content are stored in your WordPress database. The plugin does not phone home, does not require an external API connection to function, and does not collect telemetry. Your client data stays on your server.

Yes. AgencyLocks supports both single-site and multisite WordPress installations. On multisite, you can network-activate the plugin and manage policies centrally from the network admin, or activate it on individual subsites for per-site control. Policies can be applied network-wide or scoped to specific subsites.

Absolutely. The Client Portal has no hardcoded AgencyLocks branding. You can set your agency logo, brand colors, and custom welcome text. Clients will see your brand, not ours. This applies to the portal interface, email notifications, and any client-facing elements of the plugin.

Before any client-initiated change — options update, menu edit, plugin activation, post edit — AgencyLocks automatically creates a snapshot of the affected data. Each snapshot is timestamped and labeled with what triggered it. To rollback, click the "Rollback" button next to any snapshot. Before executing the rollback, a pre-rollback safety snapshot is created so you can always undo the undo. Snapshots cover options tables, navigation menus, active plugin lists, and post content.

Policies are permanent rules that define what clients can and cannot do on an ongoing basis. Safe Mode is a temporary, total lockout designed for deployments and maintenance windows. When you enable Safe Mode, all client users are immediately locked out of wp-admin and see a branded "maintenance" message. When you disable it, their normal policy-based access resumes. Think of policies as guardrails and Safe Mode as a full stop.

For most agencies, no. The setup wizard configures your first policy, enables the Safety Net with default settings, and optionally activates the Client Portal. You can start using AgencyLocks immediately after the wizard completes. Advanced configuration like custom policies, REST API blocking, and WP-CLI integration is available when you need it, but it is not required to get started.