Elevation Team

Mauricio Suarez

Elevation Magic Link Login allows your users to sign in without remembering a password. By simply entering their username or email address, they receive a secure, time-sensitive link via email that logs them in instantly.
This plugin is built with security as a priority, utilizing WordPress best practices such as nonces, input sanitization, output escaping, hashed tokens, and HMAC signatures to ensure your site and users remain protected.
<h4>Features</h4>
Adds a “Send Me a Magic Link” button to the default WP login form.
New: Toggle-based UI that hides the password field when requesting a link for a cleaner experience.
Secure, high-entropy token generation.
Tokens are hashed before storage for maximum security.
Cross-device support: Uses stateless HMAC signatures to validate links even if opened on a different device than requested.
One-time use links that expire after 15 minutes (filterable).
No-password fallback for users who forget their credentials.
Lightweight and developer-friendly.
Filterable redirect URL after successful login.

Elevation Magic Link Login

Add a secure, passwordless login option to the default WordPress login form.

Fahad Aslam

WP Ventra

VentraConnect provides a unified login system for WordPress: Social Login + Magic Link + Email OTP.
<ul>
<li>Social Login with 15+ providers (Google, Facebook, X/Twitter, LinkedIn, Microsoft, GitHub, and more)</li>
<li>Passwordless Login with Magic Link and Email OTP
<ul>
<li>Can run in Login only mode (existing users) or Login & Register mode (allow new accounts)</li>
</ul>
</li>
<li>Guardrails (optional): prevent spam accounts by letting Social Login, Magic Link and Email OTP log existing users in, but optionally blocking them from creating new users. This stops random visitors from turning your login screen into an open registration form, while your normal WordPress registration and any custom onboarding forms continue to work as usual.</li>
</ul>
Works out-of-the-box on the default WordPress login/registration screens (<code>wp-login.php</code>) and also supports shortcodes for custom pages and page builders.
No proxy servers. No third-party tracking. VentraConnect connects directly to each provider using official OAuth flows.
| <a href="https://wpventra.com/docs/what-is-ventraconnect-social-login/" rel="nofollow ugc">Setup</a> | <a href="https://wpventra.com/docs/" rel="nofollow ugc">Docs</a> | <a href="https://wpventra.com/pricing/" rel="nofollow ugc">Pro Addon</a> |
<h3>Modern WordPress login with VentraConnect</h3>
<iframe loading="lazy" class="youtube-player" width="750" height="422" src="https://www.youtube.com/embed/FEi8XCa6sys?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent" allowfullscreen="true" style="border:0;" sandbox="allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox"></iframe>
<h3>Best for</h3>
<ul>
<li>Sites that want faster logins and fewer abandoned registrations by offering Social Login + passwordless login.</li>
<li>WooCommerce stores that want modern social + passwordless login on the login, checkout and My Account pages (Pro add-on).</li>
<li>Sites that are getting spam registrations and want Guardrails to control who can create new accounts from the default <code>wp-login.php</code> screen.</li>
<li>Sites that want to add passwordless login (Magic Link / Email OTP) as an option, without removing the classic username/password login.</li>
</ul>
<h3>Key Features (Free)</h3>
Social Login 
– 15+ providers (Google, Facebook, X/Twitter, LinkedIn, Microsoft, GitHub, and more) 
– Adds login buttons to core WordPress login & registration screens (<code>wp-login.php</code>) 
– Shortcodes for custom pages, page builders, and custom login pages 
– Account linking + unlinking (connect multiple providers to one WordPress user) 
– Optional profile sync (name + avatar) 
– Button styles: Light, Dark, Minimal, plus icon-only layouts
Passwordless Login (Magic Link + Email OTP)
<ul>
<li>Built-in security: expiry, resend throttling, single-use links, max attempt limits</li>
<li>Flexible behavior: Login only mode or Login & Register mode (per method)</li>
<li>Per-method redirect overrides (same page, referrer, homepage, custom URL)</li>
<li>Custom emails: edit sender name, subject, and message templates</li>
<li>New: Improved with polished default HTML emails for Magic Link and Email OTP.</li>
</ul>
Guardrails (Spam & signup control) 
– Prevent spam accounts by controlling whether Social Login, Magic Link and Email OTP are allowed to create new users 
– Keep your login screen focused on login only, while still letting existing users sign in with all three methods 
– Your normal WordPress registration form and other registration/onboarding flows continue to work as usual
Admin Tools 
– Basic redirect options for social + passwordless login 
– Diagnostics/logging to debug OAuth and login issues 
– Email notifications (user + admin) when a new account is created via social login
<h3>Pro Add-on (Optional)</h3>
The Pro add-on extends the same login system into popular plugins and adds advanced control:
<ul>
<li>WooCommerce integration for login, checkout and My Account, with Guardrails-aware flows and context-based shortcodes</li>
<li>LMS integrations: LearnDash, LifterLMS, LearnPress</li>
<li>Membership/community integrations: MemberPress, Ultimate Member, Paid Memberships Pro (PMPro), BuddyPress</li>
<li>Passwordless Mode (Off, Recommended, Strict) to control how aggressively passwords are phased out on supported forms while keeping an admin fallback</li>
<li>New: Custom-branded Magic Link & Email OTP emails with your logo, accent color, and footer text</li>
<li>New: Inline Magic Link and Email OTP forms for custom pages, Elementor popups, account dropdowns and custom login layouts.</li>
<li>Advanced redirect rules </li>
<li>Analytics & login insights</li>
<li>Additional diagnostics/logging for complex setups</li>
</ul>
Pro features require the separate <a href="https://wpventra.com/" rel="nofollow ugc">VentraConnect Social Login Pro</a> add-on.
<h3>Roadmap: Passkeys for WordPress</h3>
VentraConnect is being developed as a modern WordPress login suite that currently includes Social Login, Magic Link, Email OTP and Guardrails.
We are also working toward passkey support as a future VentraConnect add-on. The goal is to bring passkey login into the same ecosystem, with fallback options through Magic Link and Email OTP instead of forcing passkey-only access.
<a href="https://wpventra.com/blog/passkeys-for-wordpress-ventraconnect/" rel="nofollow ugc">Read the public passkeys roadmap</a>
<h3>Supported Social Providers</h3>
Google, Facebook, X (Twitter), LinkedIn, Microsoft, GitHub, Discord, Reddit, Slack, Twitch, Spotify, TikTok, Amazon, Yahoo, WordPress.com, LINE.
<h3>How It Works</h3>
<ol>
<li>The user clicks a Social Login button, or requests a Magic Link / Email OTP.</li>
<li>For Social Login, the user authenticates with the provider via official OAuth; for Magic Link / OTP, they verify ownership of their email address.</li>
<li>VentraConnect receives basic profile or email data and looks for an existing WordPress user.</li>
<li>If the email matches an existing user, the login methods are linked to that account and the user is logged in. If not, a new user may be created (subject to your Guardrails and registration settings).</li>
</ol>
<h3>External Services</h3>
VentraConnect Social Login is an OAuth client only.
During login:
<ol>
<li>The user is redirected to the selected provider such as Google or Facebook.</li>
<li>The provider authenticates the user.</li>
<li>The provider returns an authorization token to your site.</li>
<li>VentraConnect retrieves basic profile data:
<ul>
<li>Provider user ID</li>
<li>Email address</li>
<li>Display name</li>
<li>Avatar URL</li>
</ul>
</li>
</ol>
No user data is sent to or stored on servers owned by the plugin author. 
All communication happens directly between your WordPress site and the provider official APIs.
<h3>Provider Domains Used</h3>
Google 
accounts.google.com 
oauth2.googleapis.com 
people.googleapis.com
Facebook 
graph.facebook.com
Microsoft 
login.microsoftonline.com 
graph.microsoft.com
TikTok 
open.tiktokapis.com
Reddit 
www.reddit.com 
oauth.reddit.com
LINE 
access.line.me 
api.line.me
Slack 
slack.com
Discord 
discord.com
Twitch 
id.twitch.tv 
api.twitch.tv
GitHub 
github.com 
api.github.com
Amazon 
www.amazon.com 
api.amazon.com
Yahoo 
api.login.yahoo.com
WordPress.com 
public-api.wordpress.com
LinkedIn 
www.linkedin.com 
api.linkedin.com
Each provider has its own Terms of Service and Privacy Policy. You are responsible for complying with those terms when enabling a provider.

Social Login, Magic Link & Email OTP – Passwordless Login by VentraConnect

Social login with 15+ providers plus passwordless login (Magic Link & Email OTP), with Guardrails to block spam registrations.

Elevation Magic Link Login vs Social Login, Magic Link & Email OTP – Passwordless Login by VentraConnect