Magic Login – Magic Link & Passwordless Authentication for WordPress – Login Without Password vs Secure Passkeys

Easy, secure, and passwordless authentication for WordPress. Streamline the login process by sending links to your users. No more passwords to remember, no more password resets, and no more password strength requirements. Learn more about Magic Login Key Features 🌟 Passwordless Authentication: No more forgotten passwords or complex requirements. Magic Links: Secure, unique links sent directly to users’ email inboxes. Auto Login: Support for auto-login links in outgoing emails. It’s useful when pending action from a user, such as reply a comment, complete the checkout, etc. Native Honeypot Protection: Add a lightweight, no-CAPTCHA spam protection layer to Magic Login forms.Learn more User-Friendly: Simplifies the login process for all users. Enhanced Security: Reduces risks associated with weak passwords. Tools: Export, import, and reset plugin settings easily from the admin panel or WP-CLI. Learn more How does it work? 🪄 User enters their email address. A unique magic link is sent to their inbox. Clicking the link authenticates and logs in the user. PRO Features 🎩 Here are the premium features that come with Magic Login Pro: SMS Login: Send magic login links via SMS. Learn more. QR Code Login: Let users log in by scanning a QR code. Learn more. Registration: Enable easy user registration directly from the login form or with a shortcode. Learn more. CLI Command: Use WP-CLI to create login links, generate QR codes, export/import settings, and more. Learn more. Brute Force Protection: Limit rate of login attempts and block IP temporarily. Login request throttling: Limit login link generation for a certain period. IP Check: Enhance the security by restricting users to log in from the same IP address that requested the link. Domain Restriction: Allow only certain domains to use the magic link. Login Email Customization: Customize login message by using email placeholders. Login Redirect: Redirect users to a specific page right after login. You can also redirect different pages based on the user role. WooCommerce Integration: Seamless checkout experience for returning customers. Learn more. Easy Digital Downloads (EDD) Integration: Enhance the checkout experience with seamless magic login support. Learn more. FluentCRM Integration: Send magic login links directly via FluentCRM. Learn more. reCAPTCHA Integration: Safeguard your login and registration forms from spam with Google reCAPTCHA. Learn more. Cloudflare Turnstile Integration: Enhance spam protection for your login and registration forms using Cloudflare Turnstile. Learn more. Friendly Captcha Integration: Protect your login and registration forms from bots with privacy-friendly Friendly Captcha. Learn more. API Support: Integrate Magic Login with your custom applications using the REST API. By upgrading to Magic Login Pro you also get access to one-on-one help from our knowledgeable support team and our extensive documentation site. Explore Magic Login Pro Documentation Our documentation can be found on https://handyplugins.co/docs-category/magic-login-pro/ Hook reference: https://handyplugins.co/docs/magic-login-hooks-doc/ Contributing & Bug Report Bug reports and pull requests are welcome on GitHub. Some of our features are pro only, please consider before sending PR. If you like Magic Login, then consider checking out our other projects: Magic Login Pro – Easy, secure, and passwordless authentication for WordPress. * SessionQuota Pro – Limit concurrent sessions in WordPress. * Stream Integration Pro – Upload, sync, restore, and manage WordPress videos with Cloudflare Stream. * Easy Text-to-Speech – Convert written content into high-quality synthesized speech for WordPress. * Handywriter – AI-powered writing assistant for WordPress. * PaddlePress PRO – Paddle plugin for WordPress. * WP Accessibility Toolkit – Tools to help make your WordPress site more accessible. * Powered Cache – Caching and optimization for WordPress to help improve PageSpeed and Core Web Vitals.

Secure Passkeys is a powerful WordPress plugin that enables seamless passwordless authentication using WebAuthn technology. By eliminating the need for traditional passwords, it enhances security and improves the user login experience. With support for biometric authentication, security keys, and device-bound credentials, Secure Passkey provides a robust and user-friendly solution for modern authentication. Unlike traditional password-based authentication, Secure Passkey leverages cryptographic key pairs to ensure secure logins. The private key remains securely stored on the user’s device, while the public key is registered with the WordPress site. This method protects against phishing attacks and password breaches, ensuring that only authorized users can gain access. Secure Passkeys integrates effortlessly into WordPress, allowing users to register and manage their passkeys from their profile settings. Once registered, users can log in using their fingerprint, face recognition, or a hardware security key without the need to remember or enter a password. Features Passwordless Login: Secure authentication via WebAuthn with biometric devices, security keys, Touch ID, Face ID, and more. Enhanced User Experience: Password-free login for a smoother user journey. Integration Support: WordPress default login form WooCommerce login page MemberPress login form Easy Digital Downloads login form Ultimate Member login form Admin Management: Administrators can delete, activate, or deactivate users directly from plugin settings or user profiles. Passkeys Reminder Notice: New option to enable or disable the passkeys reminder notice in the WordPress admin area for users who have not yet enabled passkeys. Activity Logging: Monitor activity logs and track last login/registration of passkeys. Multiple Passkeys: Supports multiple passkey registrations per user, with the option to set a registration limit or allow unlimited registrations. Role Restrictions: Restrict and exclude specific user roles from using passkey authentication. Passkey Autofill: Passkeys automatically appear as a suggestion when clicking the username field — no button click required. Rate Limiting: Configurable rate limiting on login attempts to protect against automated attacks. Long-lived Session: Control whether passkey logins set a persistent session cookie or end when the browser is closed. Customizable Settings: Adjust timeout settings for passkey registration and login. User Verification: Enforce user verification for enhanced security. Frontend Customization: Easily customize frontend themes or add your own with basic frontend skills. Theme Support: Supports pre-built themes like YOOtheme (UIkit) for frontend shortcodes. Shortcodes: Embed passkey login and registration forms on custom frontend pages. Passkey Display: Show passkey details in admin user lists and profiles. Multisite: Supports WordPress Multisite and single-site installations. Database Optimization: Option to allow or disallow automatic deletion of old challenge records and activity logs (configurable schedule). Requirements WordPress 6.0 or newer. PHP version 7.4 or newer. License Secure Passkeys is licensed under the GNU General Public License v2 or later.