Magic Login Pro extends WordPress with passwordless login options and controls. Users can sign in with a unique magic link instead of entering a password.

How email login works

A user enters an email address, receives a unique magic link in their inbox, then clicks it to authenticate and log in. Email delivery uses WordPress mail functions, so it depends on the website’s mail configuration. An SMTP service is recommended for better delivery. Links expire after five minutes by default. Change the token lifespan in settings; setting it to 0 disables automatic expiration.

More ways to sign in and register

SMS Login sends magic links by text message. QR Code Login lets visitors authenticate by scanning a QR code. Registration can be enabled on the login form or provided through a shortcode. Outgoing emails can include auto-login links for pending actions, such as replying to a comment or completing checkout.

Request controls and redirects

• Brute force protection limits login attempts and can temporarily block an IP address. Login request throttling limits how often users can generate links.
• IP Check can require a user to log in from the same IP address that requested the link. Domain restrictions can limit which domains may use a magic link.
• Login redirects can send users to a selected page after sign-in, with various destinations for different user roles.
• Login messages can be customized with email placeholders.

Magic Login includes native honeypot protection for its forms. Pro also supports reCAPTCHA, Cloudflare Turnstile, and Friendly Captcha for login and registration forms.

Connected services and administrative utilities

WooCommerce integration supports magic login for returning customers during checkout. Easy Digital Downloads includes magic login to its checkout experience, and FluentCRM can send magic login links through the CRM.

The REST API connects Magic Login with custom applications. WP-CLI commands can create login links, generate QR codes, and export or import settings. Settings can also be exported, imported, or reset in the WordPress admin panel.

Setup and documentation

Install Magic Login Pro on the WordPress website, configure the login, registration, protection, redirect, and integration options you need, then add a login or registration form to the relevant workflow. Test the email, SMS, QR code, and connected service paths you plan to use.

The Pro edition includes documentation and one-on-one help from the support team. Documentation includes a hook reference for further customization.