Description

Easy, secure, and passwordless authentication for WordPress.

Plugin Website: https://handyplugins.co/magic-login-pro/

How does it work? 🪄

Magic login uses a technique called “magic links”. The magic link is a unique link sent directly to your email inbox which allows users to authenticate once.

PRO Features 🎩

Here are the premium features that come with Magic Login Pro:

CLI Command: Use WP-CLI to create login links.
Brute Force Protection: Limit rate of login attempts and block IP temporarily.
Login request throttling: Limit login link generation for a certain time of period.
IP Check: Enhance the security by restricting users to log in from the same IP address that requested the link.
Domain Restriction: Allow only certain domains to use the magic link.
Login Email Customization: Customize login message by using email placeholders.
Login Redirect: Redirect users to a specific page right after login. You can also redirect different pages based on the user role.

By upgrading to Magic Login Pro you also get access to one-on-one help from our knowledgeable support team and our extensive documentation site.

Learn more about Magic Login Pro

Contributing & Bug Report

Bug reports and pull requests are welcome on Github. Some of our features are pro only, please consider before sending PR.

Documentation

Our documentation can be found on https://handyplugins.co/magic-login-pro/docs/

Screenshots

Settings Page
Login Email
Login Block

Blocks

This plugin provides 1 block.

Magic Login

Installation

Manual Installation

Upload the entire /magic-login directory to the /wp-content/plugins/ directory.
Activate Magic Login through the ‘Plugins’ menu in WordPress.

FAQ

What is passwordless authentication?: Passwordless authentication is an authentication method in which a user can log in to a computer system without entering (and remembering) a password.
Is the magic links are secure?: Yes! In fact, we thought this is more secure than the regular login due to most of the users are using weak passwords. Since magic login generates a random token for a limited time frame it makes the links quite strong and secure. Also, tokens can be used only once.
When do login links expire?: It expires in 5 minutes by default. You can change TTL under the “Token Lifespan” on the settings page. Enter “0” to disable automatic expiration.
Why am I not getting login links?: Magic Login uses WordPress built-in mail functions. So, it depends on your configuration. We highly recommend to use an SMTP service for better email delivery.
How can I use a passwordless login form on any page?: You can use [magic_login_form] shortcode or block. Learn More.

Reviews

There are no reviews for this plugin.

Contributors & Developers

“Magic Login — Passwordless Authentication for WordPress” is open source software. The following people have contributed to this plugin.

Translate “Magic Login — Passwordless Authentication for WordPress” into your language.

Interested in development?

Browse the code, check out the SVN repository, or subscribe to the development log by RSS.

Changelog

1.3 (April 19, 2022)

Tested with WP 6.0
UI updates.
Fire wp_login hook as WP Core does on successful login.
Add new filter: magic_login_email_headers.
Fix email title html escaping.
Small tweaks and improvements.

1.2.2

Tested with WP 5.9
Update Shared UI
Fix compatibility issue with TML plugin
Add redirection cancellation option to the login block.
Check logged-in while saving the settings
Small tweaks and improvements.

1.2.1

New: Integrate with the standard login form.
Fix: Enqueue admin assets on the settings page only.
Allow login block only once for a post.
Small tweaks and improvements.

1.2

New: Magic Login Block — It’s much easier to add and customize the login form in the block editor.
Customizable token intervals added. (removed 1-60 minutes restriction)
New placeholder added: {{EXPIRES_WITH_INTERVAL}} to display TTL with the interval.
Updated Shared UI
Improved documentation on settings page.
New: Show an error message when the user doesn’t exist.
New filter: Added magic_login_invalid_token_error_message to customize error message.

1.1.3

Fix: Scheduled expired token cleanup

1.1.2

Update Shared UI
Shortcode magic_login_form now supports redirect_to attribute
fix: don’t display login form if the user already logged-in

1.1.1

Hotfix: return shortcode output instead of printing

1.1

Tested with WP 5.8
Shortcode magic_login_form support added!
fix: make sure deactivate_plugins exists when manually switching versions

1.0.3

Update Shared UI
fix: add text-domain for missing strings

1.0.2

Update Shared UI
Tested with WP 5.7

1.0.1

Update Shared UI

1.0

First release