Title: Magic Login – Passwordless Authentication for WordPress – Login Without Password Author: handyplugins Published: 19 de Xaneiro, 2021 Last modified: 15 de Marzo, 2026 --- Buscar plugins ![](https://ps.w.org/magic-login/assets/banner-772x250.png?rev=2459184) ![](https://ps.w.org/magic-login/assets/icon.svg?rev=2783285) # Magic Login – Passwordless Authentication for WordPress – Login Without Password Por [handyplugins](https://profiles.wordpress.org/handyplugins/) [Descargar](https://downloads.wordpress.org/plugin/magic-login.2.7.1.zip) * [Detalles](https://gl.wordpress.org/plugins/magic-login/#description) * [Valoracións](https://gl.wordpress.org/plugins/magic-login/#reviews) * [Instalación](https://gl.wordpress.org/plugins/magic-login/#installation) * [Desenvolvemento](https://gl.wordpress.org/plugins/magic-login/#developers) [Soporte](https://wordpress.org/support/plugin/magic-login/) ## Descrición Easy, secure, and passwordless authentication for WordPress. Streamline the login process by sending links to your users. No more passwords to remember, no more password resets, and no more password strength requirements. **[Learn more about Magic Login](https://handyplugins.co/magic-login-pro/)** #### Key Features 🌟 * **Passwordless Authentication**: No more forgotten passwords or complex requirements. * **Magic Links**: Secure, unique links sent directly to users’ email inboxes. * **Auto Login**: Support for auto-login links in outgoing emails. It’s useful when pending action from a user, such as reply a comment, complete the checkout, etc. * **User-Friendly**: Simplifies the login process for all users. * **Enhanced Security**: Reduces risks associated with weak passwords. * **Tools**: Export, import, and reset plugin settings easily from the admin panel or WP-CLI. [Learn more](https://handyplugins.co/docs/magic-login-tools/) #### How does it work? 🪄 1. User enters their email address. 2. A unique magic link is sent to their inbox. 3. Clicking the link authenticates and logs in the user. #### PRO Features 🎩 Here are the premium features that come with Magic Login Pro: * **SMS Login:** Send magic login links via SMS. [Learn more](https://handyplugins.co/docs/passwordless-authentication-with-sms/). * **QR Code Login:** Let users log in by scanning a QR code. [Learn more](https://handyplugins.co/docs/qr-code-login/). * **Registration:** Enable easy user registration directly from the login form or with a shortcode. [Learn more](https://handyplugins.co/docs/magic-login-registration/). * **CLI Command:** Use WP-CLI to create login links, generate QR codes, export/ import settings, and more. [Learn more](https://handyplugins.co/docs/magic-login-cli-command/). * **Brute Force Protection:** Limit rate of login attempts and block IP temporarily. * **Login request throttling:** Limit login link generation for a certain period. * **IP Check:** Enhance the security by restricting users to log in from the same IP address that requested the link. * **Domain Restriction:** Allow only certain domains to use the magic link. * **Login Email Customization:** Customize login message by using email placeholders. * **Login Redirect:** Redirect users to a specific page right after login. You can also redirect different pages based on the user role. * **WooCommerce Integration:** Seamless checkout experience for returning customers. [Learn more](https://handyplugins.co/docs/magic-login-woocommerce-integration/). * **Easy Digital Downloads (EDD) Integration:** Enhance the checkout experience with seamless magic login support. [Learn more](https://handyplugins.co/docs/magic-login-edd-integration/). * **FluentCRM Integration:** Send magic login links directly via FluentCRM. [Learn more](https://handyplugins.co/docs/magic-login-fluent-crm/). * **reCAPTCHA Integration:** Safeguard your login and registration forms from spam with Google reCAPTCHA. [Learn more](https://handyplugins.co/docs/magic-login-spam-protection/#1-toc-title). * **Cloudflare Turnstile Integration:** Enhance spam protection for your login and registration forms using Cloudflare Turnstile. [Learn more](https://handyplugins.co/docs/magic-login-spam-protection/#2-toc-title). * **Friendly Captcha Integration:** Protect your login and registration forms from bots with privacy-friendly Friendly Captcha. [Learn more](https://handyplugins.co/docs/magic-login-spam-protection/#3-toc-title). * **API Support:** Integrate Magic Login with your custom applications using the REST API. By upgrading to Magic Login Pro you also get access to one-on-one help from our knowledgeable support team and our extensive documentation site. **[Explore Magic Login Pro](https://handyplugins.co/magic-login-pro/)** #### Documentation Our documentation can be found on [https://handyplugins.co/docs-category/magic-login-pro/](https://handyplugins.co/docs-category/magic-login-pro/) Hook reference: [https://handyplugins.co/docs/magic-login-hooks-doc/](https://handyplugins.co/docs/magic-login-hooks-doc/) #### Contributing & Bug Report Bug reports and pull requests are welcome on [GitHub](https://github.com/HandyPlugins/magic-login). Some of our features are pro only, please consider before sending PR. **If you like Magic Login, then consider checking out our other projects:** * [Magic Login Pro](https://handyplugins.co/magic-login-pro/) – Easy, secure, and passwordless authentication for WordPress. * [Easy Text-to-Speech for WordPress](https://handyplugins.co/easy-text-to-speech/)– Transform your textual content into high-quality synthesized speech with Amazon Polly. * [Handywriter](https://handyplugins.co/handywriter/) – AI-powered writing assistant that can help you create content for your WordPress. * [PaddlePress PRO](https://handyplugins.co/paddlepress-pro/) – Paddle Plugin for WordPress * [Powered Cache](https://poweredcache.com/) – Caching and Optimization for WordPress– Easily Improve PageSpeed & Web Vitals Score * [WP Accessibility Toolkit](https://handyplugins.co/wp-accessibility-toolkit/)– A collection of tools to help you make your WordPress more accessible. ## Capturas * [[ * Login Page * [[ * Settings Page * [[ * Login Email * [[ * Login Block ## Blocks Este plugin proporciona 1 bloque. * Magic Login ## Instalación #### Manual Installation 1. Upload the entire `/magic-login` directory to the `/wp-content/plugins/` directory. 2. Activate Magic Login through the ‘Plugins’ menu in WordPress. ## Preguntas frecuentes ### What is passwordless authentication? Passwordless authentication is an authentication method in which a user can log in to a computer system without entering (and remembering) a password. ### Are the magic links secure? Yes! In fact, we thought this is more secure than the regular login due to most of the users are using weak passwords. Since magic login generates a random token for a limited time frame it makes the links quite strong and secure. ### When do login links expire? It expires in 5 minutes by default. You can change TTL under the “Token Lifespan” on the settings page. Enter “0” to disable automatic expiration. ### Why am I not getting login links? Magic Login uses WordPress built-in mail functions. So, it depends on your configuration. We highly recommend to use an SMTP service for better email delivery. ### How can I use a passwordless login form on any page? You can use `[magic_login_form]` shortcode or block. [Learn More.](https://handyplugins.co/docs/add-magic-login-form-to-a-page/) ### Why are users redirected back to the page where they added the magic login form via shortcode? This behavior occurs because the magic login form is designed to use the current page as the target redirection URL by default. It’s a way to ensure a smooth user experience by bringing users back to the page they started from. However, if you wish to alter this behavior, you can easily do so by passing an empty redirect_to =”” parameter within the shortcode. [Learn More.](https://handyplugins.co/docs/magic-login-shortcode/) ## Comentarios ![](https://secure.gravatar.com/avatar/8ae54b3d9152e3406615a16202da0d53a4411a6165f955444833e186caaa6ddc? s=60&d=retro&r=g) ### 󠀁[Best plugin for passwordless login](https://wordpress.org/support/topic/best-plugin-for-passwordless-login/)󠁿 [torstenl](https://profiles.wordpress.org/torstenl/) 15 de Marzo, 2026 I use the Pro version of the plugin and I’m absolutely thrilled with it. In terms of features, support, and price, it’s my top choice. I would recommend this plugin to anyone who wants to simplify their work while still being GDPR compliant. ![](https://secure.gravatar.com/avatar/0af013840cbc524380be18440a43b187c43a4774c54d82caf96a383d86542ce4? s=60&d=retro&r=g) ### 󠀁[Powerfull and great support](https://wordpress.org/support/topic/powerfull-and-great-support-2/)󠁿 [johan.seidenfaden](https://profiles.wordpress.org/johanseidenfaden/) 11 de Febreiro, 2026 I am using the pro version and this really ads a frictionless UX for news sites that want readers to log in and do stuff. When I struggled with setting up dynamic redirects the support stepped in instantly. ![](https://secure.gravatar.com/avatar/05dfaacbace6890d905facc7bb3fdcb0a054da9af1ad7f18a507b6d149d2d067? s=60&d=retro&r=g) ### 󠀁[Great Plugin and FANTASTIC Support](https://wordpress.org/support/topic/great-plugin-and-fantastic-support-118/)󠁿 [ozredwine](https://profiles.wordpress.org/ozredwine/) 17 de Outubro, 2025 I am using Magic Login Pro and it is an amazing work by the team. It is easy to implement and get excellent security. I have no words to THANK the team for all the support even before I bought the plugin. Keep it up the good work and will try your other plugins too soon. ![](https://secure.gravatar.com/avatar/26291a3e27bd18f19210e959736696d8527c5888fa120aaeea76025b6df94891? s=60&d=retro&r=g) ### 󠀁[Limited in wrong places.](https://wordpress.org/support/topic/limited-in-wrong-places/)󠁿 [Joe Bloggs](https://profiles.wordpress.org/joe-bloggs/) 8 de Outubro, 2025 1 resposta I’m giving this 3 stars. I hope it’s fair.I like the plugin. It functions well. It’s simple and it works. The free version of the plugin is cut down to bare minimum functionality, which is perfectly fine. That’s understandable, and I don’t have any issue with that. However, the fact that I can’t even edit text of the email that comes through with the magic link is quite ‘unnecessary’ in my opnion.Replaced with a different plugin, unfortunately. ![](https://secure.gravatar.com/avatar/649d8bddb6156460ecb0ee0150168ee9d0d8573065bb564894c943d47a542501? s=60&d=retro&r=g) ### 󠀁[The developer really cares](https://wordpress.org/support/topic/the-developer-really-cares/)󠁿 [painlessseo](https://profiles.wordpress.org/painlessseo/) 27 de Agosto, 2025 I’m new to this plugin and asked a few beginner questions. The developer was responsive and even shared some PHP code to help me out. This feels like what the WordPress community spirit is supposed to be. ![](https://secure.gravatar.com/avatar/0481e51af080042f03a3fff7d400e1b10a7f2a33101e50d276d962901049aaf0? s=60&d=retro&r=g) ### 󠀁[Support is top-level](https://wordpress.org/support/topic/support-is-top-level/)󠁿 [Jamie Robe](https://profiles.wordpress.org/onmountain/) 24 de Agosto, 2025 1 resposta I have been evaluating the free version for 6 weeks. It has been 100% perfect, sending the login link. I finally decided to upgrade to get the code login and other features. I had compared all other similar auth-login plugins and honestly, Mustafa does an amazing job with support. The others have very bad to no forum responses, while he takes his support role very seriously. Look for yourself. I trust this plugin because of the fast support. He even helped me on a Sunday when I purchased the pro version – turns out I did something dumb and all is well. He has also consistently been upgrading the features – a very good sign of high quality coding. Highly recommend this login solution. It helps make my membership site easy for users to get into. [ Ler todas as 25 opinións ](https://wordpress.org/support/plugin/magic-login/reviews/) ## Colaboradores e desenvolvedores “Magic Login – Passwordless Authentication for WordPress – Login Without Password” é un software de código aberto. As seguintes persoas colaboraron con este plugin. Colaboradores * [ handyplugins ](https://profiles.wordpress.org/handyplugins/) * [ Mustafa Uysal ](https://profiles.wordpress.org/m_uysl/) “Magic Login – Passwordless Authentication for WordPress – Login Without Password” foi traducido a 2 idiomas. Grazas [aos desenvolvedores](https://translate.wordpress.org/projects/wp-plugins/magic-login/contributors) polas súas contribucións. [Traduce “Magic Login – Passwordless Authentication for WordPress – Login Without Password” ao teu idioma.](https://translate.wordpress.org/projects/wp-plugins/magic-login) ### Interesado no desenvolvemento? [Revisa o código](https://plugins.trac.wordpress.org/browser/magic-login/), bota unha ollada ao[repositorio SVN](https://plugins.svn.wordpress.org/magic-login/), ou subscríbete ao [log de desenvolvemento](https://plugins.trac.wordpress.org/log/magic-login/) por [RSS](https://plugins.trac.wordpress.org/log/magic-login/?limit=100&mode=stop_on_copy&format=rss). ## Rexistro de cambios #### 2.7.1 (Mar 15, 2026) * [Fixed] Settings import failing on some sites due to restricted MIME type filters when uploading JSON files. #### 2.7 (Mar 14, 2026) * [Added] Friendly captcha. (UI) * [Improved] Load fonts locally to enhance privacy. * [Improved] Added nonce validation to AJAX-based login requests. * [Improved] Added final login redirect validation for both standard and AJAX login flows. * [Improved] Strengthened the randomness used for generated email login codes. * [Added] Added a per-user safeguard to limit repeated login emails for the same account. * [Updated] Dependencies. * Tested with WP 7.0 #### 2.6.3 (Feb 18, 2026) * [Updated] Dependencies. #### 2.6.2 (Nov 14, 2025) * [Added] Admin notice when placeholder encryption keys/salts are in use. * [Fixed] Added capability checks for the settings page. * [Fixed] Improved validation of $_SERVER variables. * [Improved] Settings import file validation. #### 2.6.1 (Nov 05, 2025) * [Updated] Dependencies. * Tested with WP 6.9 #### 2.6 (Jul 22, 2025) * [Added] Ability to override TTL and token validity on a per-user basis. * [Updated] Dependency packages to latest versions. * Read the full update: [Magic Login PRO 2.6](https://handyplugins.co/blog/magic-login-pro-2-6-release/) #### 2.5.1 (Jun 02, 2025) * [Added] No-cache headers for magic login links to prevent caching issues. #### 2.5 (May 10, 2025) * [New] Tools Section – Added reset, export, and import options in the settings panel. [Learn more](https://handyplugins.co/docs/magic-login-tools/) * [Updated] Settings UI – Visual and structural improvements to reflect new PRO features. * [Updated] Dependencies. * [Changed] Minimum PHP version raised to 7.4. * Read the full update: [Magic Login 2.5](https://handyplugins.co/blog/qr-code-login-for-wordpress/) #### 2.4.2 (April 14, 2025) * [Added] New filter `magic_login_email_placeholders` to customize email placeholders. * [Updated] Dependencies. * Tested with WP 6.8 #### 2.4.1 (March 10, 2025) * Small tweaks and improvements. #### 2.4 (March 05, 2025) * [New Feature] Code Login – Users can log in with a code sent to their email or phone number instead of clicking a link. * [Improvement] UI update for SMS Login feature. [Learn More](https://handyplugins.co/docs/passwordless-authentication-with-sms/) * [Improvement] Applied `login_redirect` filter before `magic_login_redirect` to allow other plugins to modify the redirect URL. * [Improvement] login.php is now deprecated in favor of LoginManager class. * [Fix] Properly encode the redirection URL on the wp-login page. * [Fix] Corrected various typos. Props [@szepeviktor](https://github.com/szepeviktor) * Read the full update: [Magic Login 2.4](https://handyplugins.co/blog/magic-login-2-4-now-with-sms-login/) #### 2.3.5 (January 03, 2025) * [Fixed] Ensure proper handling of email recipient for {{MAGIC_LINK}} integration. * [Fixed] French translation. * [Improved] Applied `array_shift()` to extract the first recipient if `$atts[' to']` is an array. #### 2.3.4 (December 18, 2024) * [Improved] {{MAGIC_LINK}} placeholder to support encoded values. * [Improved] JavaScript handling for the magic login button by using `esc_url_raw` for form action and redirect URLs. * [Added] `magic_login_get_wp_login_url` filter for customizing the login URL. * [Deprecated] \MagicLogin\Utils\get_magic_login_url, use \MagicLogin\Utils\get_wp_login_url instead. * [Updated] Dependencies. #### 2.3.3 (November 19, 2024) * [Improved] Enhanced login request handling with prioritized processing and added logging for header_sent scenarios. * [Improved] Implemented pre-validation checks before magic link replacement to prevent potential issues. * [Updated] Dependencies. * Tested with WP 6.7 #### 2.3.2 (October 07, 2024) * [Improved] Two-factor compatibility. * [Updated] Dependencies. #### 2.3.1 (September 09, 2024) * Minor tweaks and adjustments. * [Updated] Dependencies. #### 2.3 (July 10, 2024) * [Added] [REST API](https://handyplugins.co/docs/magic-login-rest-api/) option to UI. * [Added] Passing `magic_login_form` to shortcode_attr for better customization. * [Updated] Dependency updates. * Tested with WP 6.6 * Learn more about the new features: [Magic Login 2.3](https://handyplugins.co/blog/magic-login-rest-api-support/) #### 2.2 (May 29, 2024) * [Added] Settings UI update with reflecting new PRO features. * [Added] Custom events for AJAX requests. * [Added] New filter `magic_login_token_ttl_by_user` to customize TTL for users. * [Added] New filter `magic_login_error_message` to customize error messages. * [Improved] Form styles. * [Refactored] Improved settings page UI. * [Refactored] Enhanced class autoloading. * [Updated] Dependency updates. * Learn more about the new features: [Magic Login Pro 2.2](https://handyplugins.co/blog/magic-login-registration-and-spam-protection/) #### 2.1.3 (April 19, 2024) * Improvements on uninstallation process. #### 2.1.2 (April 08, 2024) * Fix auto-login link when the recipient is specified in an array format. * Dependency updates. #### 2.1.1 (March 13, 2024) * Tested with WP 6.5 * Dependency updates. #### 2.1 (February 13, 2024) * Updated settings page with PRO features. * Added new attributes for shortcode; it’s more flexible than ever. [Learn More](https://handyplugins.co/docs/magic-login-shortcode/) * Fix: Encode the redirect_to parameter in the login link. (Better nG firewall compatibility) * Dependency updates. #### 2.0.1 (January 15, 2024) * Fix German language that breaks auto-login links. * Dependency updates. #### 2.0 (November 07, 2023) * Add {{MAGIC_LINK}} support to all outgoing emails that received by a single user. * Add new placeholder supports: {{FIRST_NAME}}, {{LAST_NAME}}, {{FULL_NAME}}, {{ DISPLAY_NAME}}, {{USER_EMAIL}} * Add ajax spinner to the login form. * Dependency updates. * Minor tweaks on settings form. #### 1.9.1 (October 26, 2023) * Added French translation. * Dependency updates. * Fix deprecated variable format. * Tested with WP 6.4 #### 1.9 (July 25, 2023) * Added: AJAX support for login requests. * Bumped PHP requirement to 7.2+ * Small tweaks and improvements. * Tested with WP 6.3 #### 1.8.1 (May 15, 2023) * Added: Styling for two-factor plugin. * Minor UI changes. * Small tweaks and improvements. * Tested with WP 6.2 #### 1.8 (February 18, 2023) * New feature: Token Validity – allows to specify how many times a token can be used. * Improvements on the default login screen * i18n improvements * Added: German translation. * Added: Autocomplete support. * Added: New token `{{TOKEN_VALIDITY_COUNT}}` to customize email content. #### 1.7 (January 21, 2023) * PHP 8.1: fix deprecated ‘FILTER_SANITIZE_STRING’ * UI/UX improvements on default login screen * i18n improvements. Props [@emreerkan](https://github.com/emreerkan) * Fix: standard wordpress redirect functionality. Props [@maartenhunink](https://github.com/maartenhunink) * Fix: Skip the auto-login link for the magic login itself. * Fix: Send email only once. #### 1.6 (October 26, 2022) * New feature: Auto Login Links #### 1.5.2 (September 27, 2022) * Bug fix: token validation #### 1.5.1 (September 26, 2022) * Fixed: redirection issue. * Minor UI updates. * Small tweaks and improvements. * Tested with WP 6.1 #### 1.5 (September 12, 2022) * Fixed: save tokens hashed in DB. Props [@snicco](https://github.com/snicco/snicco) * Added: username-only mode. define `MAGIC_LOGIN_USERNAME_ONLY` in the config file to use it. * Email improvements: Check email contents before converting line breaks to `
` tags. * Small tweaks and improvements. #### 1.3 (April 19, 2022) * Tested with WP 6.0 * UI updates. * Fire `wp_login` hook as WP Core does on successful login. * Add new filter: `magic_login_email_headers`. * Fix email title html escaping. * Small tweaks and improvements. #### 1.2.2 * Tested with WP 5.9 * Update Shared UI * Fix compatibility issue with TML plugin * Add redirection cancellation option to the login block. * Check `logged-in` while saving the settings * Small tweaks and improvements. #### 1.2.1 * New: Integrate with the standard login form. * Fix: Enqueue admin assets on the settings page only. * Allow login block only once for a post. * Small tweaks and improvements. #### 1.2 * New: Magic Login Block – It’s much easier to add and customize the login form in the block editor. * Customizable token intervals added. (removed 1-60 minutes restriction) * New placeholder added: {{EXPIRES_WITH_INTERVAL}} to display TTL with the interval. * Updated Shared UI * Improved documentation on settings page. * New: Show an error message when the user doesn’t exist. * New filter: Added `magic_login_invalid_token_error_message` to customize error message. #### 1.1.3 * Fix: Scheduled expired token cleanup #### 1.1.2 * Update Shared UI * Shortcode `magic_login_form` now supports `redirect_to` attribute * fix: don’t display login form if the user already logged-in #### 1.1.1 * Hotfix: return shortcode output instead of printing #### 1.1 * Tested with WP 5.8 * Shortcode `magic_login_form` support added! * fix: make sure `deactivate_plugins` exists when manually switching versions #### 1.0.3 * Update Shared UI * fix: add text-domain for missing strings #### 1.0.2 * Update Shared UI * Tested with WP 5.7 #### 1.0.1 * Update Shared UI #### 1.0 * First release ## Meta * Versión **2.7.1** * Última actualización **Fai 3 semanas** * Instalacións activas **2.000+** * Versión de WordPress ** 5.0 ou superior ** * Probado ata **7.0** * Versión de PHP ** 7.4 ou superior ** * Idiomas * [Dutch](https://nl.wordpress.org/plugins/magic-login/), [English (US)](https://wordpress.org/plugins/magic-login/), e [Turkish](https://tr.wordpress.org/plugins/magic-login/). * [Traduce ao teu idioma](https://translate.wordpress.org/projects/wp-plugins/magic-login) * Etiquetas * [login](https://gl.wordpress.org/plugins/tags/login/)[magic link](https://gl.wordpress.org/plugins/tags/magic-link/) [Magic Login](https://gl.wordpress.org/plugins/tags/magic-login/)[passwordless](https://gl.wordpress.org/plugins/tags/passwordless/) [passwordless login](https://gl.wordpress.org/plugins/tags/passwordless-login/) * [Vista avanzada](https://gl.wordpress.org/plugins/magic-login/advanced/) ## Valoracións 4.8 de 5 estrelas * [ 23 valoracións de 5 estrelas ](https://wordpress.org/support/plugin/magic-login/reviews/?filter=5) * [ 0 valoracións de 4 estrelas ](https://wordpress.org/support/plugin/magic-login/reviews/?filter=4) * [ 1 valoración de 3 estrelas ](https://wordpress.org/support/plugin/magic-login/reviews/?filter=3) * [ 0 valoracións de 2 estrelas ](https://wordpress.org/support/plugin/magic-login/reviews/?filter=2) * [ 1 valoración de 1 estrelas ](https://wordpress.org/support/plugin/magic-login/reviews/?filter=1) [Engadir a miña recensión](https://wordpress.org/support/plugin/magic-login/reviews/#new-post) [Ver todas as valoracións](https://wordpress.org/support/plugin/magic-login/reviews/) ## Colaboradores * [ handyplugins ](https://profiles.wordpress.org/handyplugins/) * [ Mustafa Uysal ](https://profiles.wordpress.org/m_uysl/) ## Soporte Problemas resoltos nos últimos dous meses: 3 de 3 [Ver o foro de soporte](https://wordpress.org/support/plugin/magic-login/) ## Doar Queres apoiar o progreso deste plugin? [ Dona a este plugin ](https://handyplugins.co/donate/)