DOCS · 03 · UPDATED 2026-10allwpcare.com/plugins/welltend-site-and-admin-toolkit/docs/safety-and-undo/
Docs

Safety and undo

How the Toolkit keeps changes reversible: instant Undo, safety copies, snapshots in WellTend Snapshots, recovery from a lockout, and what uninstall removes.

Updated Oct 17, 2026

Changing a live site should never be a leap of faith. Here is what protects you.

Undo after every change#

Switching a module on or off saves immediately and shows an Undo message for a few seconds. Text, code, address and password fields use a Save button instead, with a dot that shows unsaved changes, so you decide when a value goes live.

Safety copies for risky modules#

Risky modules show what will change and how to get back, and ask for a confirmation. Then they save a copy of your settings before switching on.

  • If WellTend Snapshots is active, the copy is a normal snapshot. You can compare it with the live site and restore it with an undo.
  • Either way, the Toolkit keeps its own copies of the last three states of each risky module. If a change turns out wrong two steps later, you can still go back to an earlier copy.

Undo asks you to confirm when it would switch a risky module back on, or switch off a module that lets people in again (Disable User Account).

Every setting in your snapshots#

With WellTend Snapshots active, each Toolkit module is a settings source named toolkit.<module id>. Snapshots, plain-language comparisons, exports and restores all include it. Passwords and API keys, such as an SMTP password, are marked secret and are never exported.

This protects your settings, not your content. It is not a backup of posts, media or users. Keep taking your normal site backups.

If you lock yourself out#

Modules that can affect sign-in, such as a changed login address or a site password, ship with a recovery path that works without the dashboard:

  • a WP-CLI command to switch a module off, for example wp awc toolkit disable change_login_url
  • a constant, AWC_DISABLE_MODULES, that you can add to your own wp-config.php to pause all modules until you are back in

The plugin never writes to wp-config.php itself. You add the constant by hand, and only when you need it.

What the modules never do#

  • No edits to wp-config.php or .htaccess.
  • No WordPress constants defined at run time.
  • No outgoing requests unless the module's job needs one. Version rollback talks only to WordPress.org to find and download versions.
  • No change unless you are an administrator with a valid nonce.

Uninstalling#

Deactivating the plugin switches every module off, which reverses it. Deleting the plugin removes its saved settings only if you turned on Delete data on uninstall. By default it keeps them, so reinstalling puts you back where you were.