Attributes User Access
Attributes User Access replaces the generic wp-login.php screen with fully branded, on-theme login, lost password, password reset and registration pages — built with shortcodes or blocks, and completely compatible with WordPress core. It is a lightweight, developer-friendly authentication toolkit: you get clean front-end forms, flexible role-based redirects, and template overrides, without a page builder and without touching WordPress core. Why site owners use it The default WordPress login page sends every visitor to an unbranded /wp-admin/ screen. Attributes User Access lets you serve a login and registration experience that matches your site, control exactly where each role lands after signing in, and keep everything update-safe. Free features Custom authentication pages — Login, Lost Password, Reset Password and Registration, as shortcodes or blocks. Redirect the native login — send wp-login.php requests to your own branded pages. Role-based & context-aware redirection — define where users go after login and logout, per role. Theme template overrides — copy any form template into your theme (your-theme/attributes/front/forms/login-form.php) for full markup control; overrides survive updates. Built for developers — PSR-4 autoloading, object-oriented, extensible with action and filter hooks (e.g. attrua_login_form_fields, attrua_after_login_form). Lightweight by design — selective asset loading, transient caching, and minified production assets. Update-safe — adapts to WordPress core changes so your login pages keep working. Upgrade to Attributes User Access Pro Pro turns the plugin into a complete authentication, security and user-management suite — the kind of stack most sites assemble from five or six separate plugins (login customizer, 2FA, IP firewall, audit log, SMTP, password policy, maintenance mode), unified in one. Member pages — Account, Profile, Settings and Onboarding flows. Visual Form Builder — 20+ field types with validation, conditional logic, storage mapping to WordPress user columns/meta, and dynamic default-value tokens. Authentication methods — Two-Step (2FA), Passwordless email login, and Social OAuth sign-in. Security — IP blocking (single IP, CIDR range, IPv6, with expiry), reCAPTCHA, and a password policy (complexity, expiration, history). Audit log — 50+ security events across categories, retention control and CSV export. Registration control — email verification, disposable-email blocking and domain validation. Email & SMTP — Gmail / Google Workspace and Microsoft 365 via OAuth2, App Password, Resend or custom SMTP, plus templated emails and broadcast messaging. Maintenance mode — proper 503 response, role/IP whitelist, bypass URL and scheduling. Block Editor & Elementor — native form widgets with full style controls. Emergency admin access — an anti-lockout safeguard for administrators. Learn more and view pricing at attributeswp.com. All Pro plans include updates, support and a 30-day money-back guarantee.
Login by Magic
This plugin replaces the standard WordPress login form with one powered by Magic that enables passwordless email magic link login. Magic offers passwordless authentication and cryptographically secured user identity to your applications. With just a few lines of code, your application’s security is instantaneously upgraded, and your end users can enjoy a future-proof and blockchain-enabled login solution. Visit https://magic.link to learn more.
