Re-Authentication
Go to SwitchUser → Advanced → Advanced Security → Re-authenticate For Privileged Targets.
| Setting | Default | Description |
|---|---|---|
| Re-authenticate For Privileged Targets | Off | Ask the switcher to confirm their own password before switching into an account with elevated permissions |
Which Accounts Count as Privileged
A target account is privileged if it can do any of the following:
| Capability | Typical role |
|---|---|
edit_others_posts | Editor |
manage_woocommerce | Shop Manager |
edit_users | Anyone who can manage users |
Administrators are never switchable (see the role hierarchy), so they don't need this check. Authors, contributors, subscribers and customers are switched into without a prompt.
How It Works
- When you click Switch To on a privileged account, a password form appears first.
- Enter your own password (not the target's).
- After a successful confirmation, you won't be asked again for 10 minutes.
Switches from the admin-bar quick switcher show the same form.
The setting works independently of Block Admin Targets - you can use both.