Cozmoslabs

Cristian Antohe

Chris Martens

Transform your WordPress login experience with passwordless authentication. Users simply enter their email address and receive a secure magic link – click to login instantly. It’s more secure than weak passwords and infinitely more user-friendly.
<h4>Why Choose Keyless Auth?</h4>
<ul>
<li>Enhanced Security: No more weak, reused, or compromised passwords</li>
<li>Better User Experience: One click instead of remembering complex passwords</li>
<li>Reduced Support: Eliminate “forgot password” requests</li>
<li>Modern Authentication: Enterprise-grade security used by Slack, Medium, and others</li>
<li>Security Hardening: Built-in protection against brute force attacks and username enumeration</li>
</ul>
<h4>Quick Start</h4>
<ol>
<li>Install and activate the plugin</li>
<li>Create a new page and add the shortcode <code>[keyless-auth]</code></li>
<li>Configure email templates in Keyless Auth → Templates</li>
<li>Done! Users can now login passwordlessly</li>
</ol>
<h4>Core Features</h4>
Ready to Use 
* Magic Link Authentication – Secure, one-time login links via email 
* Two-Factor Authentication (2FA) – Complete TOTP support with Google Authenticator 
* Role-Based 2FA – Require 2FA for specific user roles (admins, editors, etc.) 
* Custom 2FA Setup URLs – Direct users to branded frontend 2FA setup pages 
* SMTP Integration – Reliable email delivery through your mail server 
* Email Templates – Professional, customizable login emails 
* Mail Logging – Track all sent emails with delivery status 
* Custom Database Tables – Scalable architecture with dedicated audit logs
Advanced Security 
* Token Security: 10-minute expiration, single-use tokens 
* Audit Logging: IP addresses, device types, login attempts 
* Emergency Mode: Grace period system with admin controls 
* Secure Storage: SMTP credentials in wp-config.php option 
* XML-RPC Disable: Block brute force attacks via XML-RPC interface 
* Application Passwords Control: Disable programmatic authentication when not needed 
* User Enumeration Prevention: Block username discovery attacks
Customization 
* WYSIWYG Email Editor: Full HTML support with live preview 
* Advanced Color Controls: Hex, RGB, HSL color formats 
* Template System: German, English, and custom templates 
* Branding Options: Custom sender names and professional styling
<h4>Installation & Setup</h4>
Basic Installation 
1. WordPress Admin → Plugins → Add New 
2. Search for “Keyless Auth” 
3. Install and activate 
4. Add [keyless-auth] shortcode to any page
SMTP Configuration (Recommended) 
1. Navigate to Keyless Auth → SMTP 
2. Configure your email provider (Gmail, Outlook, SendGrid, etc.) 
3. Test email delivery 
4. Save settings
Two-Factor Authentication Setup 
1. Go to Keyless Auth → Options 
2. Enable “Two-Factor Authentication” 
3. Select required user roles 
4. Users scan QR code with authenticator app
<h4>Email Templates</h4>
Template Options 
* German Professional: Sleek German-language template 
* English Simple: Clean, minimalist design 
* Custom HTML: Create your own with WYSIWYG editor
Customization Features 
* Full HTML and CSS support 
* Color picker for buttons and links 
* Responsive email design 
* Live template preview 
* Placeholder system for dynamic content
<h4>Security & Compliance</h4>
Token Security 
* Generated using WordPress security standards 
* Based on user ID, timestamp, and wp-config.php salt 
* 10-minute expiration with single-use enforcement 
* Secure database storage with automatic cleanup
Two-Factor Authentication 
* TOTP-based system compatible with Google Authenticator, Authy 
* Role-based requirements for granular control 
* Grace period system for smooth user transitions 
* Custom verification forms with professional styling
Database Architecture 
* Custom tables for optimal performance 
* Comprehensive audit logging 
* Device tracking and IP monitoring 
* Automatic maintenance and cleanup routines
<h4>Security Hardening</h4>
Keyless Auth includes comprehensive security hardening features to protect your WordPress site from common attack vectors. All features are optional and can be enabled based on your site’s needs.
XML-RPC Disable 
* Prevents brute force attacks via WordPress XML-RPC interface 
* Reduces attack surface by disabling legacy API 
* Recommended for sites not using Jetpack, mobile apps, or pingbacks
Application Passwords Control 
* Disable REST API and XML-RPC authentication when programmatic access isn’t needed 
* Prevents unauthorized API access 
* Recommended for simple sites without third-party integrations
User Enumeration Prevention 
* Blocks REST API user endpoints (<code>/wp-json/wp/v2/users</code>) 
* Redirects author archives and <code>?author=N</code> queries 
* Removes login error messages that reveal usernames 
* Strips comment author CSS classes 
* Removes author data from oEmbed responses 
* Recommended for business/corporate sites without author profiles
Benefits 
* Combined protection against brute force attacks 
* Prevents username discovery for targeted attacks 
* Reduces unauthorized API access 
* Easy to configure without code or .htaccess modifications 
* All features include comprehensive documentation 
* FTP recovery available if needed
<h4>SMTP & Email Delivery</h4>
Supported Providers 
* Gmail / Google Workspace 
* Outlook / Microsoft 365 
* Mailgun, SendGrid, Amazon SES 
* Any SMTP-compatible service
Advanced Email Features 
* Message-ID domain alignment for deliverability 
* SPF/DKIM/DMARC compliance 
* Custom sender names and addresses 
* Bulk email log management 
* Delivery status tracking
Secure Credential Storage 
Store SMTP credentials securely in wp-config.php:
<pre><code>define('CHRMRTNS_KLA_SMTP_USERNAME', 'your-email@example.com');
define('CHRMRTNS_KLA_SMTP_PASSWORD', 'your-smtp-password');
</code></pre>
<h4>WordPress Integration</h4>
Login Page Integration 
* Optional magic login field on wp-login.php 
* Seamless integration with existing login flow 
* Toggle control for easy enable/disable 
* Clean, responsive form styling
Shortcode Usage 
Use <code>[keyless-auth]</code> anywhere: pages, posts, widgets, or custom templates.
<h4>Developer Features</h4>
Hooks & Filters
Customize login redirect: 
 add_filter(‘wpa_after_login_redirect’, ‘custom_redirect_function’);
Modify email headers: 
 add_filter(‘wpa_email_headers’, ‘custom_email_headers’);
Change token expiration: 
 add_filter(‘wpa_change_link_expiration’, ‘custom_expiration_time’);
Modular Architecture 
* Clean, organized class structure 
* Separated concerns for easy maintenance 
* WordPress coding standards compliance 
* Extensive documentation and comments
<h4>Requirements</h4>
<ul>
<li>WordPress: 3.9 or higher (tested up to 6.8)</li>
<li>PHP: 7.4 or higher</li>
<li>Email Delivery: SMTP recommended for reliability</li>
</ul>
Note: Keyless Auth complements WordPress’s default login system – it doesn’t replace it.
Developed by Chris Martens | Based on the original Passwordless Login plugin by Cozmoslabs

Keyless Auth – Login without Passwords

Secure, passwordless authentication for WordPress. Your users login via magic email links – no passwords to remember or forget.

Mehedi

Faruk Ahmed

Pluginly

HalalBrains

WPtownhall

<h4>What is Login Me Now?</h4>
Login Me Now is a modern login and access control solution for WordPress. It helps you:
<ul>
<li>Grant temporary access with secure one-time links</li>
<li>Log in without passwords</li>
<li>Offer Google and Facebook social login</li>
<li>Switch between user accounts instantly</li>
<li>Use browser extensions for one-click dashboard access</li>
<li>Verify users with SMS-based one-time passwords</li>
<li>Track login history and activity</li>
<li>Manage modules, integrations, and features from a single hub</li>
</ul>
New: Phone OTP Login 
Allow users to verify identity with one-time passwords delivered via SMS using Firebase or Twilio.
Improved Email Magic Link 
Refined modal, confirmation step, and updated email template for a more professional experience.
<h4>Video Overview</h4>
Watch a quick 38-second overview of the problem, solution, and features: 
<iframe loading="lazy" class="youtube-player" width="750" height="422" src="https://www.youtube.com/embed/mLKvHphKX0E?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent" allowfullscreen="true" style="border:0;" sandbox="allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox"></iframe>
<h4>Key Features</h4>
<h3>Passwordless & Temporary Login</h3>
<ul>
<li>Generate secure login links with expiration time (hours or days)</li>
<li>No passwords needed — secure login with one click</li>
<li>Control access using validity periods and conditional settings</li>
</ul>
<h3>Social Login</h3>
<ul>
<li>Google and Facebook login support</li>
<li>Use shortcodes to place login buttons anywhere</li>
<li>Pro: Sync profile photo and name</li>
<li>Pro: Redirect users to any page after login</li>
</ul>
<h3>Phone OTP Login (New)</h3>
<ul>
<li>OTP delivery through Firebase or Twilio Verify</li>
<li>Rate limiting, resend cooldown, and reCAPTCHA supported</li>
<li>Country flag selector and restriction options</li>
<li>Store and normalize phone numbers in user profiles</li>
<li>Works via shortcode or wp-login.php login provider interface</li>
</ul>
<h3>User Switching</h3>
<ul>
<li>Instantly switch between user accounts</li>
<li>No logout/login cycles required</li>
</ul>
<h3>Email Magic Link</h3>
<ul>
<li>Single-use secure login links</li>
<li>Clean modal with validation and success confirmation</li>
<li>Friendly email template with clear CTA</li>
</ul>
<h3>Activity Log</h3>
<ul>
<li>Integrates with Simple History</li>
<li>Track who logged in and how they authenticated</li>
</ul>
<h3>Browser Extensions</h3>
<ul>
<li><a href="https://chrome.google.com/webstore/detail/login-me-now-wordpress-lo/kkkofomlfhbepmpiplggmfpomdnkljoh" rel="nofollow ugc">Chrome Extension</a></li>
<li><a href="https://addons.mozilla.org/en-US/firefox/addon/login-me-now/" rel="nofollow ugc">Firefox Add-on</a></li>
<li>Uses encrypted JWT tokens for secure and fast access</li>
<li>No passwords are stored in the extension</li>
</ul>
<h3>Modules Hub (New)</h3>
<ul>
<li>Toggle modules, integrations, and upcoming features from one dashboard</li>
<li>Search, filter, and manage active, available, and upcoming modules</li>
<li>Module state persists automatically</li>
</ul>
<h4>Shortcodes</h4>
Use these shortcodes to display login buttons anywhere:
[login_me_now_google_button] 
[login_me_now_facebook_button] 
[login_me_now_phone_otp_button] 
[login_me_now_email_magic_link_button]
<h4>Use Cases</h4>
<ul>
<li>Site Owners: Give temporary access without sharing passwords</li>
<li>Developers: Request secure client access instead of asking for admin credentials</li>
<li>Agencies: Switch between multiple user accounts easily</li>
</ul>
<h4>Integrations</h4>
<ul>
<li>All-in-One Content Restriction</li>
<li>WooCommerce</li>
<li>Easy Digital Downloads</li>
<li>Directorist</li>
<li>Simple History</li>
<li>Fluent Support</li>
</ul>
Coming Soon: Tutor LMS, BuddyBoss, BuddyPress, Dokan, bbPress
<h4>Why Choose Login Me Now?</h4>
<ul>
<li>Encrypted, time-sensitive authentication</li>
<li>Faster, smoother login flows</li>
<li>Works for both beginners and power users</li>
<li>Actively updated and maintained</li>
</ul>
<h4>Pro Features</h4>
<ul>
<li>Social login profile sync (name, avatar)</li>
<li>Custom redirect after login</li>
<li>More integrations (coming soon)</li>
<li>WooCommerce express login (coming soon)</li>
<li>Advanced OTP enhancements (coming soon)</li>
<li>Priority support</li>
</ul>
Pro version: 
https://loginmenow.com/pricing/
<h3>FIND AN ISSUE?</h3>
Support forum: 
https://wordpress.org/support/plugin/login-me-now/
Please search existing topics before opening a new one.

Login Me Now – Passwordless, Magic Link, OTP & Social Login for WordPress


Thank you to the author for providing such a login tool, which makes it very convenient for me to manage multiple websites!



If anyone also need to manage logins for multiple websites, don't miss out on this plugin.


Amazing!


Amazing Experience. very easy to use and helpful. keep up the good work.


Amazing Plugin

This is absolutely a great plugin for sharing access with other contributors. It helped me to easily share my website access with my SEO manager and helped us optimize our website's SEO efficiently.

Great Plugin for Sharing Access

Login Me Now combines Passwordless Login, Email Magic Links, Phone OTP Verification, Temporary Logins, Social Logins (Google & Facebook), User Swi …

Keyless Auth – Login without Passwords vs Login Me Now – Passwordless, Magic Link, OTP & Social Login for WordPress