4WP Account

4WP Account is a membership-ready user account hub: user registration, a front-end user profile cabinet, email/password sign-in, and social network login (OAuth). Native Gutenberg blocks each have a matching shortcode. WooCommerce is optional.

A plugin by 4wp.dev. 4WP is our project brand; the letters “WP” appear only as part of that brand name, not as a reference to WordPress. This plugin is not affiliated with, endorsed by, or sponsored by WordPress.

Source code: github.com/4wpdev/4wp-account

Membership and user account

• One account page for guests (sign-in / registration) and members (cabinet)
• User profile shell with a configurable account menu (dashboard, WooCommerce, extras)
• User registration follows Settings → General → Anyone can register
• Email/password works without WooCommerce
• Optional replacement of wp-login.php — only when the chosen page already has a login block or shortcode

Social login

Enable providers under 4WP Account → Auth / Register:

• Live: email/password, Google, GitHub, TikTok
• Coming soon: Facebook, X

Buttons can use native brand colors and icons, a solid fill, or icon-only.

Gutenberg blocks and shortcodes

Every block has a shortcode equivalent:

• forwp/account — [forwp_account] — account page (sign-in or cabinet)
• forwp/account-menu — [forwp_account_menu] — header user menu
• forwp/account-link — [forwp_account_link] — header/menu account link
• forwp/auth-buttons — [forwp_account_signin_buttons] — social sign-in buttons
• [forwp_account_login provider="gmail"] — single provider button (shortcode only)

Place them in the Site Editor or on a page. Sign-in methods are configured in Auth / Register. Appearance of the guest card is under Appearance. The account page is selected in Settings → Pages.

Also included

• REST API — /wp-json/forwp-account/v1/auth/{provider} and OAuth callbacks
• Optional social buttons on WooCommerce login/register forms
• Hide the admin bar for subscribers; redirect subscribers away from /wp-admin/

Privacy

OAuth tokens are exchanged server-side. Profile email and name from the provider are stored in WordPress user records. No data is sent to 4wp.dev.

Development

Run tests: composer install && composer run lint && composer run test

External services

This plugin connects to third-party OAuth providers when a visitor starts social login and when an administrator saves API credentials.

Google

• When: User clicks Google sign-in; server exchanges the authorization code and reads profile email.
• Terms: Google API Terms of Service
• Privacy: Google Privacy Policy

GitHub

• When: User clicks GitHub sign-in; server exchanges the code and reads the primary verified email.
• Terms: GitHub Terms of Service
• Privacy: GitHub Privacy Statement

TikTok

• When: User clicks TikTok sign-in; server exchanges the Login Kit code (enable in Auth / Register).
• Terms: TikTok Terms of Service
• Privacy: TikTok Privacy Policy

Meta (Facebook) — planned

• When: Not enabled in this release. Listed in admin as coming soon.
• Terms: Meta Platform Terms
• Privacy: Meta Privacy Policy