Universal User Management Across Sites

mySites.guru lets you manage the user accounts on all of your sites from one place. Search for a person across every connected site, change email addresses and passwords, edit group membership, block and unblock accounts, and delete them, without logging in to each site individually.

This feature was rebuilt in September 2026, and the current write-up lives here:

• One Search Finds That User on Every Site You Manage covers both parts of the tool in detail, with screenshots: the full user manager now built into every site’s page, and the portfolio-wide search that finds one person across every Joomla and WordPress site you manage.

What it does, in short

Each connected site has a User Manager tab on its page inside mySites.guru, showing that site’s accounts live, with filters for active, blocked, unactivated and super admin accounts. From there you can add an account, edit one, set a password, block or unblock it on Joomla, delete it, and change which user groups it belongs to.

Universal User Management in the left menu searches every connected site at once for a username, name or email address, and returns every site that person has an account on, with their last login and registration date. From the results you can change name, username, email and password across every site you tick, and block or unblock on the Joomla ones.

Both read your sites live at the moment you ask. mySites.guru does not store your users’ details, and that includes any password you set with the tool.

Common uses

• When a staff member or contractor leaves, search their email address to see every client site they still have an account on, then change the password or block them everywhere in one pass.
• When a client forgets their password, find them and set a new one without hunting for your own login to their site.
• When someone changes their name or email address, correct it across every site that person has an account on rather than site by site.
• When investigating a compromise, search by name or email address to track down accounts you do not recognise. The rogue admin account detection in the standard audit is the other side of this, and finds planted accounts you would not know to search for.
• When you do need to be inside the site itself, one-click login takes you to any site’s admin console.

Not currently supported

• Removing two-factor authentication from a Joomla account, or retrieving its backup codes, as a direct action.
• Blocking a WordPress account, which WordPress itself has no way to express.
• Changing group or role membership from the cross-site search. Group ids differ on every site, so group changes are made per site, in that site’s own editor.

Managing your team’s access to mySites.guru itself is a separate feature from managing the users on your clients’ sites.