Elevation Team

Mauricio Suarez

Elevation Magic Link Login allows your users to sign in without remembering a password. By simply entering their username or email address, they receive a secure, time-sensitive link via email that logs them in instantly.
This plugin is built with security as a priority, utilizing WordPress best practices such as nonces, input sanitization, output escaping, hashed tokens, and HMAC signatures to ensure your site and users remain protected.
<h4>Features</h4>
Adds a “Send Me a Magic Link” button to the default WP login form.
New: Toggle-based UI that hides the password field when requesting a link for a cleaner experience.
Secure, high-entropy token generation.
Tokens are hashed before storage for maximum security.
Cross-device support: Uses stateless HMAC signatures to validate links even if opened on a different device than requested.
One-time use links that expire after 15 minutes (filterable).
No-password fallback for users who forget their credentials.
Lightweight and developer-friendly.
Filterable redirect URL after successful login.

Elevation Magic Link Login

Add a secure, passwordless login option to the default WordPress login form.

NEXTFLY® Web Design

Nextfly Domain Restricted Access allows you to restrict post and page access to specific email domains. Users must validate their email address via a unique magic link sent to their inbox.
This plugin is perfect for internal company portals, client-specific pages, or any content that should be accessible only to users with a specific email domain (e.g., <code>@company.com</code>).
Key Features: 
* Domain-Based Restriction: Easily whitelist email domains for any post or page. 
* Secure Magic Links: Users receive a time-sensitive, one-time-use access link via email. 
* No Passwords Required: Simplifies user experience by eliminating the need for passwords. 
* Customizable Emails: Configure the email subject and body template. 
* Cookie-Based Access: Set how long access remains valid (default: 7 days). 
* Developer Friendly: Includes hooks for extending functionality.
<h3>Usage</h3>
To Protect a Post/Page: 
1. Edit any post or page you want to protect. 
2. Look for the “Nextfly Domain Restricted Access” metabox in the sidebar. 
3. Enter the authorized email domains (one per line, e.g., <code>company.com</code>). 
4. Update or Publish the post.
To Configure Settings: 
1. Navigate to Settings > Nextfly Domain Restricted Access. 
2. Customize the email subject and body (use <code>%access_link%</code> as a placeholder). 
3. Set the cookie duration (how long a user stays logged in). 
4. Select the Redirect Page (where users are sent to login).
<h3>Developers</h3>
The plugin includes hooks to extend its functionality.
Filters: 
 nfdra_post_types – Add support for custom post types. 
 nfdra_email_headers – Modify email headers (e.g., add BCC).
Actions: 
 nfdra_before_send_email – Fires before email is sent. 
 nfdra_after_send_email – Fires after email is sent. 
 nfdra_access_granted – Fires when user is granted access. 
 nfdra_access_denied – Fires when access token is invalid.

Nextfly Domain Restricted Access

Restrict access to post and page based on authorized email domains. Users verify identity via secure email links.

Elevation Magic Link Login vs Nextfly Domain Restricted Access