Cozmoslabs

Cristian Antohe

Chris Martens

Transform your WordPress login experience with passwordless authentication. Users simply enter their email address and receive a secure magic link – click to login instantly. It’s more secure than weak passwords and infinitely more user-friendly.
<h4>Why Choose Keyless Auth?</h4>
<ul>
<li>Enhanced Security: No more weak, reused, or compromised passwords</li>
<li>Better User Experience: One click instead of remembering complex passwords</li>
<li>Reduced Support: Eliminate “forgot password” requests</li>
<li>Modern Authentication: Enterprise-grade security used by Slack, Medium, and others</li>
<li>Security Hardening: Built-in protection against brute force attacks and username enumeration</li>
</ul>
<h4>Quick Start</h4>
<ol>
<li>Install and activate the plugin</li>
<li>Create a new page and add the shortcode <code>[keyless-auth]</code></li>
<li>Configure email templates in Keyless Auth → Templates</li>
<li>Done! Users can now login passwordlessly</li>
</ol>
<h4>Core Features</h4>
Ready to Use 
* Magic Link Authentication – Secure, one-time login links via email 
* Two-Factor Authentication (2FA) – Complete TOTP support with Google Authenticator 
* Role-Based 2FA – Require 2FA for specific user roles (admins, editors, etc.) 
* Custom 2FA Setup URLs – Direct users to branded frontend 2FA setup pages 
* SMTP Integration – Reliable email delivery through your mail server 
* Email Templates – Professional, customizable login emails 
* Mail Logging – Track all sent emails with delivery status 
* Custom Database Tables – Scalable architecture with dedicated audit logs
Advanced Security 
* Token Security: 10-minute expiration, single-use tokens 
* Audit Logging: IP addresses, device types, login attempts 
* Emergency Mode: Grace period system with admin controls 
* Secure Storage: SMTP credentials in wp-config.php option 
* XML-RPC Disable: Block brute force attacks via XML-RPC interface 
* Application Passwords Control: Disable programmatic authentication when not needed 
* User Enumeration Prevention: Block username discovery attacks
Customization 
* WYSIWYG Email Editor: Full HTML support with live preview 
* Advanced Color Controls: Hex, RGB, HSL color formats 
* Template System: German, English, and custom templates 
* Branding Options: Custom sender names and professional styling
<h4>Installation & Setup</h4>
Basic Installation 
1. WordPress Admin → Plugins → Add New 
2. Search for “Keyless Auth” 
3. Install and activate 
4. Add [keyless-auth] shortcode to any page
SMTP Configuration (Recommended) 
1. Navigate to Keyless Auth → SMTP 
2. Configure your email provider (Gmail, Outlook, SendGrid, etc.) 
3. Test email delivery 
4. Save settings
Two-Factor Authentication Setup 
1. Go to Keyless Auth → Options 
2. Enable “Two-Factor Authentication” 
3. Select required user roles 
4. Users scan QR code with authenticator app
<h4>Email Templates</h4>
Template Options 
* German Professional: Sleek German-language template 
* English Simple: Clean, minimalist design 
* Custom HTML: Create your own with WYSIWYG editor
Customization Features 
* Full HTML and CSS support 
* Color picker for buttons and links 
* Responsive email design 
* Live template preview 
* Placeholder system for dynamic content
<h4>Security & Compliance</h4>
Token Security 
* Generated using WordPress security standards 
* Based on user ID, timestamp, and wp-config.php salt 
* 10-minute expiration with single-use enforcement 
* Secure database storage with automatic cleanup
Two-Factor Authentication 
* TOTP-based system compatible with Google Authenticator, Authy 
* Role-based requirements for granular control 
* Grace period system for smooth user transitions 
* Custom verification forms with professional styling
Database Architecture 
* Custom tables for optimal performance 
* Comprehensive audit logging 
* Device tracking and IP monitoring 
* Automatic maintenance and cleanup routines
<h4>Security Hardening</h4>
Keyless Auth includes comprehensive security hardening features to protect your WordPress site from common attack vectors. All features are optional and can be enabled based on your site’s needs.
XML-RPC Disable 
* Prevents brute force attacks via WordPress XML-RPC interface 
* Reduces attack surface by disabling legacy API 
* Recommended for sites not using Jetpack, mobile apps, or pingbacks
Application Passwords Control 
* Disable REST API and XML-RPC authentication when programmatic access isn’t needed 
* Prevents unauthorized API access 
* Recommended for simple sites without third-party integrations
User Enumeration Prevention 
* Blocks REST API user endpoints (<code>/wp-json/wp/v2/users</code>) 
* Redirects author archives and <code>?author=N</code> queries 
* Removes login error messages that reveal usernames 
* Strips comment author CSS classes 
* Removes author data from oEmbed responses 
* Recommended for business/corporate sites without author profiles
Benefits 
* Combined protection against brute force attacks 
* Prevents username discovery for targeted attacks 
* Reduces unauthorized API access 
* Easy to configure without code or .htaccess modifications 
* All features include comprehensive documentation 
* FTP recovery available if needed
<h4>SMTP & Email Delivery</h4>
Supported Providers 
* Gmail / Google Workspace 
* Outlook / Microsoft 365 
* Mailgun, SendGrid, Amazon SES 
* Any SMTP-compatible service
Advanced Email Features 
* Message-ID domain alignment for deliverability 
* SPF/DKIM/DMARC compliance 
* Custom sender names and addresses 
* Bulk email log management 
* Delivery status tracking
Secure Credential Storage 
Store SMTP credentials securely in wp-config.php:
<pre><code>define('CHRMRTNS_KLA_SMTP_USERNAME', 'your-email@example.com');
define('CHRMRTNS_KLA_SMTP_PASSWORD', 'your-smtp-password');
</code></pre>
<h4>WordPress Integration</h4>
Login Page Integration 
* Optional magic login field on wp-login.php 
* Seamless integration with existing login flow 
* Toggle control for easy enable/disable 
* Clean, responsive form styling
Shortcode Usage 
Use <code>[keyless-auth]</code> anywhere: pages, posts, widgets, or custom templates.
<h4>Developer Features</h4>
Hooks & Filters
Customize login redirect: 
 add_filter(‘wpa_after_login_redirect’, ‘custom_redirect_function’);
Modify email headers: 
 add_filter(‘wpa_email_headers’, ‘custom_email_headers’);
Change token expiration: 
 add_filter(‘wpa_change_link_expiration’, ‘custom_expiration_time’);
Modular Architecture 
* Clean, organized class structure 
* Separated concerns for easy maintenance 
* WordPress coding standards compliance 
* Extensive documentation and comments
<h4>Requirements</h4>
<ul>
<li>WordPress: 3.9 or higher (tested up to 6.8)</li>
<li>PHP: 7.4 or higher</li>
<li>Email Delivery: SMTP recommended for reliability</li>
</ul>
Note: Keyless Auth complements WordPress’s default login system – it doesn’t replace it.
Developed by Chris Martens | Based on the original Passwordless Login plugin by Cozmoslabs

Keyless Auth – Login without Passwords

Secure, passwordless authentication for WordPress. Your users login via magic email links – no passwords to remember or forget.

Nirav Mehta

storeapps

Mansi

Sandhya M

Icegram

Malay Ladu

Asmi Patel

Create secure, self-expiring ⏱️, automatic login links 🔗 for WordPress. Give them to developers when they ask for admin access to your site. Or an editor for a quick review of work done. Login works just by opening the link, no password needed.
Using the “Temporary Login Without Password” plugin you can create a self-expiring account for someone and give them a special link with which they can login to your WordPress without needing a username and password.
You can choose when the login expires, as well as the role of the temporary account.
Really useful when you need to give admin access to a developer for support or for performing routine tasks.
Read <a href="https://www.storeapps.org/create-secure-login-without-password-for-wordpress/" rel="nofollow ugc">this article</a> to know more about what’s the Current Problem – Creating a Separate Admin Login for Outsiders (Devs/ Guest bloggers) and how to avoid this pain, Top Benefits of using this plugin & Why and Who need Temporary Login links.
<h4>Benefits of Temporary Logins</h4>
<blockquote>
➡️ Create unlimited temporary logins 
 ➡️ Create temporary logins with any role 
 ➡️ No username & password required. Login with just a simple link 
 ➡️ Set account expiry. So, a temporary user can’t login after the expiry time 
 ➡️ Various expiration options like one day, one week, one month, and many more. Also, set a custom date 
 ➡️ Redirect user to a specific page after login 
 ➡️ Set a language for a temporary user 
 ➡️ See the last logged in time of a temporary user 
 ➡️ Also see, how many times a temporary user accessed your setup 
 ➡️ Track user activity with detailed logs to know what each temporary user did
</blockquote>
<h4>For Developers</h4>
If you need an admin access to your client’s WordPress setup to resolve any issues, use following template to ask your client to give you a temporary access to their WordPress setup.
<blockquote>
Hi {%customer_name%},
To allow me to investigate on your site, install & activate the free WordPress plugin – <a href="https://wordpress.org/plugins/temporary-login-without-password/" rel="ugc">Temporary Login Without Password</a>, and give me admin access to your site via the temporary link generated. Once I’ll get the admin access, I’ll check your site & will try to resolve the issue.
Note: 
 Keep the expiry of a temporary login link for one month. Send the created login link as a reply to this email.
</blockquote>
<h3>Temporary Login Without Password Pro Features</h3>
➡️ Limit Link Usage: Set a maximum number of times a temporary login link can be used, ensuring controlled, secure access.
➡️ Instant Admin Alerts: Receive notifications each time a temporary login is accessed, keeping you informed of all activity.
➡️ Activity Log: View detailed activity of each temporary user to monitor what actions they performed while logged in.
Ready to take your security and convenience to the next level? 
<a href="https://www.icegram.com/?buy-now=445245&qty=1&coupon=tlwp-pro-20&with-cart=1" rel="nofollow ugc">Upgrade to TLWP Pro</a> today to unlock our advanced features. Experience the full power of secure, temporary, passwordless access for your WordPress / WooCommerce site.
<h4>What users have to say about Temporary Login Without Password?</h4>
👉 It works with WordPress.com business plan!
<blockquote>
I love this plugin! I got the impression that Temporary Login Without Password plugin would only work with WordPress.org sites. When I had a problem with another plugin, I reached out to their tech support. They recommended Temporary Login. I crossed my fingers, installed it, and it worked like a charm. No more worrying about possibly compromising my sites. When tech support was done, I went into the settings and revoked access. This is a game changer! 
 – <a href="https://wordpress.org/support/topic/it-works-with-wordpress-com-business-plan/" rel="ugc">Suzanne Loeb</a>
</blockquote>
👉 Convenient. No rabbit holes
<blockquote>
I can’t say I’ve used a whole bunch of these plugins, but I can say I’ve used 2 or 3. This one was the most straight forward and rushing through it I still didn’t run into any issues. The login was shot to the company I needed to let in and I was able to get back to marking things off of my checklist. Highly recommend to anyone that is needing to make a temporary user account for the first time. There’s literally nowhere to get confused from my personal experience 
 – <a href="https://wordpress.org/support/topic/convenient-no-rabbit-holes/" rel="ugc">Peter Higgins</a>
</blockquote>
👉 Clear and efficient.
<blockquote>
Clear and efficient. Nothing to add ! 
 Continue like that ! 
 Make the world of the web even more fun for all pro and amateur users! 
 – <a href="https://wordpress.org/support/topic/clear-and-efficient-2/" rel="ugc">muten7</a>
</blockquote>
👉 Excellent Plugin
<blockquote>
Having problems with another plugin the developer recommended TPWP. It does exactly as it states. The developer was able to identify the bug, done without comprising security. The fact it records the access you have granted is a another advantage. 
 – <a href="https://wordpress.org/support/topic/excellent-plugin-3772/" rel="ugc">mickpamg</a>
</blockquote>
👉 A huge help and easy!
<blockquote>
This plugin was just what I needed to make it easy for support people to come in and get their assessments done then I don’t have to worry about revoking permission…this takes care of that for me! Love it!!! 
 – <a href="https://wordpress.org/support/topic/a-huge-help-and-easy/" rel="ugc">bfauscette</a>
</blockquote>
Go to <a href="https://wordpress.org/support/plugin/temporary-login-without-password/reviews/" rel="ugc">Temporary Login Without Password plugin review section</a> and read our recent reviews.
Spread The Love ❤️
If you like Temporary Login Without Password, please leave a <a href="https://wordpress.org/support/plugin/temporary-login-without-password/reviews/#new-post" rel="ugc">five stars ⭐⭐⭐⭐⭐</a> and also spread the word about it via <a href="https://www.facebook.com/sharer.php?u=https://wordpress.org/plugins/temporary-login-without-password/" rel="nofollow ugc">Facebook</a> and <a href="https://twitter.com/intent/tweet?url=https://wordpress.org/plugins/temporary-login-without-password/" rel="nofollow ugc">Twitter</a>. That helps fellow website owners assess Temporary Login Without Password easily and benefit from it!
What’s Next
If you like this plugin then consider checking out our other solutions:
<a href="https://wordpress.org/plugins/email-subscribers/" rel="ugc">Icegram Express</a> – A complete newsletter plugin which lets you collect leads, send automated new blog post notification emails, create & send broadcasts, and also manage them all in one single place.
<a href="https://wordpress.org/plugins/icegram-mailer/" rel="ugc">Icegram Mailer</a> – Reliable built‑in email delivery for WordPress & WooCommerce with real‑time logs, analytics, and a free 200‑email plan.
<a href="https://wordpress.org/plugins/icegram/" rel="ugc">Icegram Engage</a> – Popups, Welcome Bar, Opt-ins & Lead Generation plugin
<a href="https://wordpress.org/plugins/icegram-rainmaker/" rel="ugc">Icegram Collect</a> – Best form plugin on WordPress
<a href="https://wordpress.org/plugins/smart-manager-for-wp-e-commerce/" rel="ugc">Smart Manager</a> – Manage & Bulk edit Products, Orders & more..
<a href="https://wordpress.org/plugins/offermative-discount-pricing-related-products-upsell-funnels-for-woocommerce/" rel="ugc">Offermative</a> – Dynamic discount pricing, related product recommendations, upsells and funnels for WooCommerce.
<a href="https://wordpress.org/plugins/duplicate-post-page-copy-clone-wp/" rel="ugc">Post / Page Duplicate</a> – Ultimate one‑click content duplicator for WordPress, letting you clone posts, pages & custom post types effortlessly
<a href="https://wordpress.org/plugins/icegram-cookie-manager/" rel="ugc">Icegram Cookie Manager</a> – Customizable cookie consent banner with privacy policy links and styling options for WordPress
<a href="https://wordpress.org/plugins/switch-user-login-by-icegram/" rel="ugc">Switch User Login</a> – Instantly switch between WordPress user accounts from the admin bar for seamless testing, debugging, and multisite/WooCommerce management
Also, check our other <a href="https://www.storeapps.org/shop/?utm_source=wprepo&utm_medium=tlwp&utm_campaign=sa_products_upsell&utm_content=readme" rel="nofollow ugc">Premium WooCommerce plugins.</a>
Do you use WooCommerce? Our analytics tool <a href="https://www.putler.com/?utm_source=wprepo&utm_medium=tlwp&utm_campaign=putler_outreach&utm_content=readme" rel="nofollow ugc">Putler</a> will help you enriches your store data. Using Putler, you’ll understand your business better and make profitable decisions quickly.

Temporary Login Without Password

Works perfectly


This plugin does exactly what it says and really takes the guesswork out of something for people that are not tech savvy or just someone who sometimes forget to hit "save" when creating a new user!


What a useful plugin


Safe and easy to use.



Works as expected, no issues. 


Safe and easy to use


It was suggested by the support of a plugin I use. Very handy if you need to give access to wp-admin without the hassle of creating a specific account. Does what it says in a simple way. Thanks for sharing.


Does what it says in a simple way


Surprisingly easy to create a secure access without having to remember to revoke it again. I'm loving it!


Surprisingly easy toi use

Excellent

Create self-expiring, temporary admin accounts. Easily share direct login links (no need for username/password) with your developers or editors.

Keyless Auth – Login without Passwords vs Temporary Login Without Password