{"id":11773,"date":"2026-08-24T16:06:12","date_gmt":"2026-08-24T08:06:12","guid":{"rendered":"https:\/\/aeosub.com\/kvwb-emergency-backup-access\/"},"modified":"2026-08-24T16:06:12","modified_gmt":"2026-08-24T08:06:12","slug":"kvwb-emergency-backup-access","status":"publish","type":"post","link":"https:\/\/aeosub.com\/zh\/kvwb-emergency-backup-access\/","title":{"rendered":"KVWB Emergency Backup Access"},"content":{"rendered":"
\"KVWB<\/div>\n
\n
LethaldiranMX Insight<\/div>\n
\n
\n

The KVWB Emergency Backup Access plugin addresses a critical governance gap in WordPress site management by establishing a secure, “break-glass” protocol for non-administrative stakeholders. By decoupling the ability to generate a full site backup from full administrative privileges, it empowers website owners to safeguard their digital assets during operational crises, such as when a primary developer or agency becomes unresponsive. This elegant delegation of emergency power relies on a time-limited, email-verified access window, ensuring that the site owner can secure a complete snapshot of their files and database without compromising daily security configurations.<\/p>\n

Best Fit & Operational Role:<\/strong> This plugin is an ideal operational safeguard for small-to-medium business owners, non-technical founders, and organizations that outsource their day-to-day WordPress administration to third-party agencies or freelancers. Positioned as an emergency governance tool within the WordPress stack, it bridges the gap between absolute trust and risk mitigation. It solves the common operational bottleneck of “hostage” or abandoned sites by ensuring the owner always has a clear path to data sovereignty and migration readiness, specifically leveraging the reliable, industry-standard UpdraftPlus engine to execute the actual backup process.<\/p>\n

Potential Limitations & Pitfalls:<\/strong> The primary operational dependency is its hard reliance on the UpdraftPlus plugin; if UpdraftPlus is misconfigured, deactivated, or fails due to server-level resource limits during execution, this emergency mechanism will also fail. Additionally, because the free version deliberately omits real-time administrator email notifications to prevent an uncooperative admin from preemptively blocking the backup, teams must actively monitor the internal activity logs to audit usage. Beyond these architectural dependencies and the inherent risks of managing password-reset links in the Pro “emergency passport” feature, no major performance overhead or security vulnerabilities were identified based on available information.<\/p>\n<\/div>\n<\/div><\/div>\n

\n
\n \"KVWB <\/p>\n
\n
Plugin Specification<\/div>\n

WordPress.org Official Data<\/small>\n <\/div>\n<\/p><\/div>\n\n\n\n\n\n\n\n
Developer<\/th>\nkvwb<\/a><\/td>\n<\/tr>\n
Version<\/th>\nv0.9.17<\/td>\n<\/tr>\n
Active Installs<\/th>\n0 +<\/td>\n<\/tr>\n
Requires \/ Tested<\/th>\n6.5 \/ 7.1<\/td>\n<\/tr>\n
Last Updated<\/th>\n2026-08-24 8:04am GMT<\/td>\n<\/tr>\n
Official Link<\/th>\nView Details -><\/a><\/td>\n<\/tr>\n<\/table><\/div>\n
The emergency button for your website: a pre-designated user can make a full backup in an emergency \u2014 without becoming an administrator.<\/div>\n

Break-Glass Access gives a website owner a safe “emergency button”. The administrator chooses, in advance, one existing user (any role except administrator) who is allowed to make a full backup when it is really needed \u2014 for example when the regular web administrator is unreachable. That user keeps their own role and only receives one extra right: “make an emergency backup”. They never become an administrator.<\/p>\n

In an emergency, the chosen user requests a code. The code is sent by email to that user’s own account address. After entering the correct code, a temporary emergency window opens with a single button. The plugin drives UpdraftPlus and makes a full backup of files and database. With that backup, a (new) web administrator can restore the site on another server and give the owner the right access there.<\/p>\n

The emergency window closes automatically (you choose 2, 4 or 8 hours, and 1-5 code requests per day) and every step is visible in the activity log. In the free version the administrator is deliberately not emailed \u2014 activity is visible in the log. With Pro the administrator is emailed the moment emergency access is activated and when a backup is made, and can then contact the client. By design the administrator cannot interrupt a running emergency backup \u2014 this plugin protects the site owner precisely in situations where the administrator is unreachable or uncooperative.<\/p>\n

Pro adds an “emergency passport”: the welcome email a user receives when they are granted emergency access becomes a keepsake document with everything needed to secure the site \u2014 login name, the address the mail was sent to, a login link (also when the login URL is hidden), a password-reset link and, if set, a masked phone number and a private email address. The real password is never included.<\/p>\n

The free version is fully functional on its own and works everywhere without any account or key.<\/p>\n

Backup tool<\/h4>\n

Break-Glass Access uses the free UpdraftPlus plugin to make the actual backup. UpdraftPlus is a required plugin: install and activate it in advance via Plugins \u2192<\/span> Add New (the plugin also shows a reminder with a direct install link). The plugin never installs anything automatically.<\/p>\n

A backup is powerful \u2014 handle it with care<\/h4>\n

Whoever has the backup file can log in on a restored copy of the site. Store and share backups carefully.<\/p>\n

Pro version<\/h4>\n

There is also a paid Pro version (a separate premium plugin). It adds service-based delivery and convenience: up to 5 emergency users, SMS verification, an extra backup mail server so the code still arrives when your site cannot send email, email alerts to the administrator when emergency access starts and when a backup is made, remote revocation, an emergency passport in the welcome email, a configuration self-test, and an extra email address for the code. Everything in this free plugin is complete and stays fully functional regardless of Pro.<\/p>\n

External services<\/h3>\n

The plugin works fully standalone. The free version connects to no external service at all<\/strong> (apart from installing UpdraftPlus from WordPress.org, below). The following connections are Pro features and require an active licence:<\/p>\n

    \n
  1. Extra backup mail server (Pro; on by default when Pro is active, can be switched off under Settings \u2192<\/span> Verification).<\/strong> If your site cannot send email itself, the plugin asks the Break-Glass Access service (noodtoegang.nl) to deliver the emergency code, so a broken site mailbox never locks the user out. When enabled and the administrator saves the plugin settings, the site registers its URL, a site secret and the emergency users’ email addresses with the service; in an emergency the code and recipient address are then sent over HTTPS. The service only mails pre-registered addresses and does not log codes. Switch it off and no data is sent to the service. See https:\/\/noodtoegang.nl\/privacyverklaring\/ for the privacy policy.<\/li>\n
  2. SMS verification (Pro).<\/strong> With an active licence and SMS enabled, the emergency code is also sent to the Break-Glass Access service, which forwards it as a text message to the configured phone number. The request contains the licence key, site URL, phone number and the message.<\/li>\n
  3. WordPress.org.<\/strong> UpdraftPlus (the required backup tool) is installed by you from the official WordPress.org plugin directory, using the standard WordPress plugin installer, only when you choose to install it. The plugin never installs anything automatically. This applies to both the free and Pro versions.<\/li>\n<\/ol>\n

    No data is sent to any service without the actions described above. There is no tracking or telemetry.<\/p>\n

    For developers<\/h3>\n
      \n
    • Capability kvwb_make_backup<\/code> \u2014 granted per user to the chosen emergency user (no separate role).<\/li>\n
    • Filter kvwb_nt_trigger_backup<\/code> \u2014 take over how the backup is triggered.<\/li>\n
    • Filter kvwb_nt_purchase_url<\/code> \u2014 change the URL of the “View Pro” button.<\/li>\n
    • Filter kvwb_nt_mail_logo_url<\/code> \u2014 set a logo for the plugin’s emails (empty by default: the free plugin loads no external image when a recipient opens an email; the emails use a text header instead).<\/li>\n
    • Filter kvwb_nt_send_sms<\/code> \u2014 short-circuit SMS sending (return true\/false), for local testing or a custom gateway.<\/li>\n
    • Filter kvwb_nt_sms_endpoint<\/code> \/ constant KVWB_NT_SMS_URL<\/code> \u2014 override the SMS service endpoint (HTTPS only).<\/li>\n
    • Filter kvwb_nt_send_failsafe_mail<\/code> \u2014 short-circuit the backup email delivery (return true\/false), for local testing.<\/li>\n
    • Filter kvwb_nt_mail_endpoint<\/code> \/ constant KVWB_NT_MAIL_URL<\/code> and filter kvwb_nt_register_endpoint<\/code> \/ constant KVWB_NT_REGISTER_URL<\/code> \u2014 override the backup delivery endpoints (HTTPS only).<\/li>\n
    • Constant KVWB_NT_DEV<\/code> (wp-config.php; local testing ONLY) \u2014 shows the emergency code on screen so you can test without working email.<\/li>\n<\/ul>\n
      Editorial note: This overview combines WordPress.org official plugin metadata with an AI-assisted LethaldiranMX editorial review. Plugin data should be verified on the official WordPress.org listing before installation.<\/div>","protected":false},"excerpt":{"rendered":"

      The emergency button for your website: a pre-designated user can make a full backup in an emergency \u2014 without becoming an administrator.<\/p>","protected":false},"author":1,"featured_media":11774,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"footnotes":""},"categories":[252],"tags":[869,3006,3007,3008,664,555],"class_list":["post-11773","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-trends","tag-backup","tag-break-glass","tag-emergency-access","tag-recovery","tag-security","tag-wordpress-plugin"],"_links":{"self":[{"href":"https:\/\/aeosub.com\/zh\/wp-json\/wp\/v2\/posts\/11773","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/aeosub.com\/zh\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/aeosub.com\/zh\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/aeosub.com\/zh\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/aeosub.com\/zh\/wp-json\/wp\/v2\/comments?post=11773"}],"version-history":[{"count":0,"href":"https:\/\/aeosub.com\/zh\/wp-json\/wp\/v2\/posts\/11773\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/aeosub.com\/zh\/wp-json\/wp\/v2\/media\/11774"}],"wp:attachment":[{"href":"https:\/\/aeosub.com\/zh\/wp-json\/wp\/v2\/media?parent=11773"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/aeosub.com\/zh\/wp-json\/wp\/v2\/categories?post=11773"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/aeosub.com\/zh\/wp-json\/wp\/v2\/tags?post=11773"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}