How to Create a Secure Access Link for White-Glove Migration

White-Glove Migration allows a CRM Expert to migrate your WordPress site on your behalf. Instead of sharing your WordPress administrator credentials, you can generate a secure, time-limited access link using a dedicated plugin. This link provides temporary administrative access exclusively to your CRM Expert, ensuring your site remains protected.

Before You Begin

You must have administrator access to the WordPress site you wish to migrate.

Part 1: Install the Migration Plugin

Follow these steps to install the required plugin:

  1. Download the migration plugin from the provided source. It will download as a .zip file—do not extract it.
  2. Log into your WordPress admin dashboard.
  3. Navigate to PluginsAdd Plugin.
  4. Click Upload Plugin.
  5. Select Choose File, pick the downloaded .zip file, and click Install Now.
  6. Once installed, click Activate Plugin to enable it.
  1. In your WordPress admin sidebar, locate and click on the migration plugin’s menu item. You will be taken to a welcome screen.
  2. Click Generate secure access link. No account login is required.
  3. Under Link active for, select how long the link should remain valid—options range from 24 hours to 7 days, with 3 days set as the default.

    Note: If generating the link on a Friday, Saturday, or Sunday, the minimum duration is 4 days to ensure usability into the workweek.

  4. Review the notice confirming that the link grants full admin access and is usable only by a CRM Expert.
  5. Click Generate secure access link.
  6. A confirmation window will appear summarizing the link’s permissions and expiration. Click Generate link to proceed.
  1. Your secure access link is now active and automatically copied to your clipboard. If needed, you can click Copy to copy it again.
  2. Paste the link into the Secure access link field within your White-Glove Migration request form and submit it.

The link will resemble: https://your-wordpress-site.com/wp-json/crm-token/secure/<token>

While the link is active, the plugin screen displays a countdown timer until expiration. You can:

  • Regenerate: Create a new link, immediately invalidating the previous one. Only one link can be active at a time.
  • Revoke link: Instantly deactivate the link. Confirm by selecting Revoke link in the prompt. To restore access, generate and share a new link.

If no action is taken, the link will expire automatically at the end of the chosen duration.

Frequently Asked Questions

Is this secure?

Yes. Your WordPress password is never shared, the link is exclusive to CRM Experts, it expires automatically, and you can revoke it at any time.

Do I need to share my username and password?

No. The secure access link completely replaces password sharing.

What if the migration takes longer than expected?

Generate a new link with a longer duration (up to 7 days) and share it with your CRM Expert.

How can I revoke access immediately?

Go to the secure access link screen in your WordPress admin and click Revoke link.

It becomes invalid automatically. If access is still required, generate and share a new link.