Katsushi Kawamori

<p>Enter your email address, and send you an email with a magic link or QR Code to login without a password.</p>
<h4>Login</h4>
<ul>
<li>Login with email address only.</li>
<li>Only registered users can login.</li>
<li>Password-less login from the magic link or QR code notified in the email.</li>
<li>shortcode : <code>[magic_login]</code></li>
<li>action hook : <code>do_action( 'magic_email_send', $emails | array, true | bool )</code> : To send the magic link simultaneously from the management account.</li>
<li>QR code login on the user’s administration screen.</li>
</ul>
<h4>Thanks</h4>
<ul>
<li>This plugin is a modified version of <a href="https://wordpress.org/plugins/passwordless-login/" rel="ugc">Passwordless Login</a>.</li>
<li>The main changes are the addition of various filter hooks and the addition of the following action hooks.</li>
</ul>
<h4>Action hook</h4>
<ul>
<li>This is for sending bulk e-mails with a magic link for login to multiple accounts from the management screen.</li>
<li>When using this action hook, the URL of the page where the shortcode [magic_login] is placed should be specified in the filter hook ‘magic_login_mail_url’.</li>
</ul>
<pre><code>/** ==================================================
 * To send the magic link simultaneously from the management account.
 *
 * @param array  $emails  Multiple email addresses.
 * @param bool   true  Output notifications to the management screen immediately after sending.
 */
do_action( 'magic_email_send', $emails, true );
</code></pre>
<h4>Filter hooks</h4>
<pre><code>/** ==================================================
 * Filter for magic link url with mail.
 *
 */
add_filter( 'magic_login_mail_url', function(){ return 'url'; }, 10, 1 );
</code></pre>
<pre><code>/** ==================================================
 * Currently logged in user link for Magic Login Mail
 *
 * @param string $url  URL.
 * @param int    $user_id  User ID.
 * @return $url
 */
add_filter( 'magic_login_mail_user_redirect', 'redirect_url_login_users', 10, 2 );

/** ==================================================
 * Login user after redirect for Magic Login Mail
 *
 * @param string $url  URL.
 * @param int    $user_id  User ID.
 * @return $url
 */
add_filter( 'magic_login_mail_after_login_redirect', 'redirect_url_login_users', 10, 2 );

function redirect_url_login_users( $url, $user_id ){
    /* your code */
    return $url;
}
</code></pre>
<pre><code>/** ==================================================
 * Filter for message with shortcode form.
 *
 */
add_filter( 'magic_login_mail_success_link_msg', function(){ return 'Message for success.'; }, 10, 1 );
add_filter( 'magic_login_mail_success_login_msg', function(){ return 'Message for success with login.'; }, 10, 1 );
add_filter( 'magic_login_mail_valid_errors', function(){ return 'Message for mail validation error.'; }, 10, 1 );
add_filter( 'magic_login_mail_email_errors', function(){ return 'Message for sent mail error.'; }, 10, 1 );
add_filter( 'magic_login_mail_invalid_token_error', function(){ return 'Message for token error.'; }, 10, 1 );
add_filter( 'magic_login_mail_form_label', function(){ return 'Message for form label.'; }, 10, 1 );
</code></pre>
<pre><code>/** ==================================================
 * Filter for color with shortcode form.
 *
 */
add_filter( 'magic_login_mail_success_link_msg_back_color', function(){ return '#e7f7d3'; }, 10, 1 );
add_filter( 'magic_login_mail_success_login_msg_back_color', function(){ return '#e7f7d3'; }, 10, 1 );
add_filter( 'magic_login_mail_valid_errors_back_color', function(){ return '#ffebe8'; }, 10, 1 );
add_filter( 'magic_login_mail_email_errors_back_color', function(){ return '#ffebe8'; }, 10, 1 );
add_filter( 'magic_login_mail_invalid_token_error_back_color', function(){ return '#ffebe8'; }, 10, 1 );
</code></pre>
<pre><code>/** ==================================================
 * Filter for input text size.
 *
 */
add_filter( 'magic_login_mail_input_size', function(){ return 17; }, 10, 1 );
</code></pre>
<pre><code>/** ==================================================
 * Filter for class name.
 *
 */
add_filter( 'magic_login_mail_notice_class_name', function(){ return 'mynotice'; }, 10, 1 );
add_filter( 'magic_login_mail_form_class_name', function(){ return 'myform'; }, 10, 1 );
add_filter( 'magic_login_mail_label_class_name', function(){ return 'mylabel'; }, 10, 1 );
add_filter( 'magic_login_mail_input_class_name', function(){ return 'myinput'; }, 10, 1 );
add_filter( 'magic_login_mail_submit_class_name', function(){ return 'mysubmit'; }, 10, 1 );
</code></pre>
<pre><code>/** ==================================================
 * Filter for message with mail subject.
 *
 */
add_filter( 'magic_login_mail_subject', function(){ return 'subject'; }, 10, 1 );
</code></pre>
<pre><code>/** ==================================================
 * Filter for message with mail.
 *
 * @param string $message  message.
 * @param string $url  url.
 * @param string $exp_date_time  expiration date and time.
 */
add_filter(
    'magic_login_mail_message',
    function( $message, $url, $exp_date_time ) {

        $message .= '<br><br>' . 'You may only log in once using the link above.';

        return $message;
    },
    10,
    3
);
</code></pre>
<pre><code>/** ==================================================
 * Filter for login expiration.
 *
 */
add_filter( 'magic_login_mail_expiration', function(){ return 10; }, 10, 1 );
</code></pre>


Magic Login Mail or QR Code

Enter your email address, and send you an email with a magic link or QR Code to login without a password.

Clayton LZ

<p><strong>Bye Bye Passwords</strong> brings modern passwordless authentication to WordPress using WebAuthn/Passkeys technology. Say goodbye to weak passwords and hello to secure, convenient login with biometrics, security keys, or platform authenticators.</p>
<h4>Key Features</h4>
<ul>
<li><strong>Passwordless Login</strong> – Sign in using Touch ID, Face ID, Windows Hello, or security keys</li>
<li><strong>Multiple Passkeys</strong> – Register multiple devices for convenient access anywhere</li>
<li><strong>Recovery Codes</strong> – Generate one-time backup codes for emergency access</li>
<li><strong>Enhanced Security</strong> – Eliminate password-based attacks completely</li>
<li><strong>User-Friendly</strong> – Simple setup with no technical knowledge required</li>
<li><strong>Privacy-Focused</strong> – Your authentication data stays on your server</li>
<li><strong>WordPress Integration</strong> – Seamlessly integrated into WordPress admin and login</li>
</ul>
<h4>How It Works</h4>
<ol>
<li>Register a passkey from your WordPress admin profile</li>
<li>Use your device’s built-in authentication (fingerprint, face, PIN)</li>
<li>Sign in instantly without typing passwords</li>
</ol>
<h4>Requirements</h4>
<ul>
<li>SSL/HTTPS enabled website (required for WebAuthn)</li>
<li>Modern browser with WebAuthn support</li>
<li>PHP 7.2 or higher</li>
<li>WordPress 5.0 or higher</li>
</ul>
<h3>External Services</h3>
<p>This plugin may connect to the FIDO Alliance Metadata Service (MDS) to download root certificates for authenticator validation.</p>
<h4>FIDO Alliance Metadata Service</h4>
<ul>
<li><strong>URL:</strong> https://mds.fidoalliance.org/</li>
<li><strong>Purpose:</strong> Downloads attestation root certificates to verify the authenticity of security keys and passkey devices</li>
<li><strong>When:</strong> Only when attestation verification is enabled and the plugin needs to update its certificate store (not during normal authentication)</li>
<li><strong>Data sent:</strong> No personal or user data is transmitted – only a standard HTTP GET request</li>
<li><strong>Service provider:</strong> FIDO Alliance</li>
<li><strong>Terms of Use:</strong> https://fidoalliance.org/metadata/</li>
<li><strong>Privacy Policy:</strong> https://fidoalliance.org/privacy-policy/</li>
</ul>
<p>No user data, credentials, or personal information is ever sent to external services. All authentication happens locally on your server.</p>


Bye Bye Passwords

Enable passwordless authentication for WordPress using WebAuthn/Passkeys. More secure, more convenient.

Magic Login Mail or QR Code vs Bye Bye Passwords