If you've ever built a form in Gravity Forms, you've probably run into this problem: a submitter needs to come back and change something after they've already submitted.
Maybe they got their email address wrong. Maybe they're registering for an event and want to update their meal preference later. Maybe it's a multi-step process where they submit basic information first and add supporting documents in a follow-up visit.
The default answer in WordPress is to give them an account and have them log in. But that's a lot of friction for what should be a simple task — and for most use cases, it's completely unnecessary.
The Problem With WordPress Accounts for Form Editing
Creating a WordPress account just so someone can edit a form entry creates several real problems:
It's friction you can't afford. Every extra step between a submitter and their goal is an opportunity for them to give up. A login flow — especially for someone who doesn't use your site regularly — is a significant barrier.
It creates account management overhead. Every account is a support ticket waiting to happen. Forgotten passwords, locked accounts, and "I never made an account" emails all land in your inbox.
It doesn't fit the use case. Someone who submitted a conference registration doesn't need ongoing access to your WordPress admin. They need to fix one field one time.
The Better Approach: Tokenized Return Links
A tokenized return link is a URL that contains a cryptographically secure, unique code tied to a specific form entry. When the submitter clicks it, your system validates the token and opens their pre-filled form — no login required.
This is how most modern SaaS products handle things like order modifications, appointment rescheduling, and survey updates. It's secure, it's frictionless, and it doesn't require you to maintain user accounts for people who aren't actually "users" of your site.
How to Implement This in Gravity Forms
The cleanest way to add this to a Gravity Forms install is with ReEntry for Gravity Forms, a free plugin that handles the entire flow:
- Install and activate ReEntry on your WordPress site
- Enable it per form — open any form in the Gravity Forms editor and go to the ReEntry tab
- Set your return page — create a page with the
shortcode and point ReEntry to it - Configure expiry — choose how long the return link stays valid (7 days, 30 days, 90 days, 1 year, or never)
- That's it. Every new submission automatically gets a return link delivered in the confirmation message or notification email
What the Submitter Experiences
From the submitter's perspective, the flow is seamless:
- They fill out and submit your form
- They receive a confirmation with a link that says something like "Need to make changes? Return to your submission →"
- When they click it, the form opens pre-populated with their original answers
- They make their changes and resubmit
- Their original entry is updated in place
No account creation. No password. No login page. Just the link.
Is It Secure?
Yes, when implemented correctly. ReEntry uses PHP's random_bytes() to generate each token — the same cryptographic standard used for session tokens and API keys. Each token is unique to one entry, can be set to expire, and can be revoked by an admin at any time from the entry detail view.
The return link doesn't expose any entry data in the URL itself — the token is just a reference that your server validates server-side before loading anything.
Common Use Cases
This pattern works well for any form where the submitter might need to return:
- Event registrations — update dietary preferences, session choices, guest details
- Job or volunteer applications — submit now, add references or documents later
- Healthcare intake — capture basic info first, insurance details in a follow-up
- Conference speaker submissions — bio first, slides and session details closer to the event
- HOA and permit applications — initial request, then supporting documents
- Group registrations — group leader submits, returns to add participant roster
Getting Started
ReEntry for Gravity Forms is free. Download it from lunr.pro/plugins/reentry, install it on your WordPress site, and enable it on any form in under a minute.
No GravityView required. No GravityKit required. No other add-ons or subscriptions. It works with any Gravity Forms license tier.
ReEntry for Gravity Forms is a free plugin by LunrPro. Pro features including field-level locking, access logs, and token rotation are available as an upgrade.