Katsushi Kawamori

Enter your email address, and send you an email with a magic link or QR Code to login without a password.
<h4>Login</h4>
<ul>
<li>Login with email address only.</li>
<li>Only registered users can login.</li>
<li>Password-less login from the magic link or QR code notified in the email.</li>
<li>shortcode : <code>[magic_login]</code></li>
<li>action hook : <code>do_action( 'magic_email_send', $emails | array, true | bool )</code> : To send the magic link simultaneously from the management account.</li>
<li>QR code login on the user’s administration screen.</li>
</ul>
<h4>Thanks</h4>
<ul>
<li>This plugin is a modified version of <a href="https://wordpress.org/plugins/passwordless-login/" rel="ugc">Passwordless Login</a>.</li>
<li>The main changes are the addition of various filter hooks and the addition of the following action hooks.</li>
</ul>
<h4>Action hook</h4>
<ul>
<li>This is for sending bulk e-mails with a magic link for login to multiple accounts from the management screen.</li>
<li>When using this action hook, the URL of the page where the shortcode [magic_login] is placed should be specified in the filter hook ‘magic_login_mail_url’.</li>
</ul>
<pre><code>/** ==================================================
 * To send the magic link simultaneously from the management account.
 *
 * @param array $emails Multiple email addresses.
 * @param bool true Output notifications to the management screen immediately after sending.
 */
do_action( 'magic_email_send', $emails, true );
</code></pre>
<h4>Filter hooks</h4>
<pre><code>/** ==================================================
 * Filter for magic link url with mail.
 *
 */
add_filter( 'magic_login_mail_url', function(){ return 'url'; }, 10, 1 );
</code></pre>
<pre><code>/** ==================================================
 * Currently logged in user link for Magic Login Mail
 *
 * @param string $url URL.
 * @param int $user_id User ID.
 * @return $url
 */
add_filter( 'magic_login_mail_user_redirect', 'redirect_url_login_users', 10, 2 );

/** ==================================================
 * Login user after redirect for Magic Login Mail
 *
 * @param string $url URL.
 * @param int $user_id User ID.
 * @return $url
 */
add_filter( 'magic_login_mail_after_login_redirect', 'redirect_url_login_users', 10, 2 );

function redirect_url_login_users( $url, $user_id ){
 /* your code */
 return $url;
}
</code></pre>
<pre><code>/** ==================================================
 * Filter for message with shortcode form.
 *
 */
add_filter( 'magic_login_mail_success_link_msg', function(){ return 'Message for success.'; }, 10, 1 );
add_filter( 'magic_login_mail_success_login_msg', function(){ return 'Message for success with login.'; }, 10, 1 );
add_filter( 'magic_login_mail_valid_errors', function(){ return 'Message for mail validation error.'; }, 10, 1 );
add_filter( 'magic_login_mail_email_errors', function(){ return 'Message for sent mail error.'; }, 10, 1 );
add_filter( 'magic_login_mail_invalid_token_error', function(){ return 'Message for token error.'; }, 10, 1 );
add_filter( 'magic_login_mail_form_label', function(){ return 'Message for form label.'; }, 10, 1 );
</code></pre>
<pre><code>/** ==================================================
 * Filter for color with shortcode form.
 *
 */
add_filter( 'magic_login_mail_success_link_msg_back_color', function(){ return '#e7f7d3'; }, 10, 1 );
add_filter( 'magic_login_mail_success_login_msg_back_color', function(){ return '#e7f7d3'; }, 10, 1 );
add_filter( 'magic_login_mail_valid_errors_back_color', function(){ return '#ffebe8'; }, 10, 1 );
add_filter( 'magic_login_mail_email_errors_back_color', function(){ return '#ffebe8'; }, 10, 1 );
add_filter( 'magic_login_mail_invalid_token_error_back_color', function(){ return '#ffebe8'; }, 10, 1 );
</code></pre>
<pre><code>/** ==================================================
 * Filter for input text size.
 *
 */
add_filter( 'magic_login_mail_input_size', function(){ return 17; }, 10, 1 );
</code></pre>
<pre><code>/** ==================================================
 * Filter for class name.
 *
 */
add_filter( 'magic_login_mail_notice_class_name', function(){ return 'mynotice'; }, 10, 1 );
add_filter( 'magic_login_mail_form_class_name', function(){ return 'myform'; }, 10, 1 );
add_filter( 'magic_login_mail_label_class_name', function(){ return 'mylabel'; }, 10, 1 );
add_filter( 'magic_login_mail_input_class_name', function(){ return 'myinput'; }, 10, 1 );
add_filter( 'magic_login_mail_submit_class_name', function(){ return 'mysubmit'; }, 10, 1 );
</code></pre>
<pre><code>/** ==================================================
 * Filter for message with mail subject.
 *
 */
add_filter( 'magic_login_mail_subject', function(){ return 'subject'; }, 10, 1 );
</code></pre>
<pre><code>/** ==================================================
 * Filter for message with mail.
 *
 * @param string $message message.
 * @param string $url url.
 * @param string $exp_date_time expiration date and time.
 */
add_filter(
 'magic_login_mail_message',
 function( $message, $url, $exp_date_time ) {

 $message .= ' ' . 'You may only log in once using the link above.';

 return $message;
 },
 10,
 3
);
</code></pre>
<pre><code>/** ==================================================
 * Filter for login expiration.
 *
 */
add_filter( 'magic_login_mail_expiration', function(){ return 10; }, 10, 1 );
</code></pre>

Magic Login Mail or QR Code

Enter your email address, and send you an email with a magic link or QR Code to login without a password.

Fahad Aslam

WP Ventra

VentraConnect provides a unified login system for WordPress: Social Login + Magic Link + Email OTP.
<ul>
<li>Social Login with 15+ providers (Google, Facebook, X/Twitter, LinkedIn, Microsoft, GitHub, and more)</li>
<li>Passwordless Login with Magic Link and Email OTP
<ul>
<li>Can run in Login only mode (existing users) or Login & Register mode (allow new accounts)</li>
</ul>
</li>
<li>Guardrails (optional): prevent spam accounts by letting Social Login, Magic Link and Email OTP log existing users in, but optionally blocking them from creating new users. This stops random visitors from turning your login screen into an open registration form, while your normal WordPress registration and any custom onboarding forms continue to work as usual.</li>
</ul>
Works out-of-the-box on the default WordPress login/registration screens (<code>wp-login.php</code>) and also supports shortcodes for custom pages and page builders.
No proxy servers. No third-party tracking. VentraConnect connects directly to each provider using official OAuth flows.
| <a href="https://wpventra.com/docs/what-is-ventraconnect-social-login/" rel="nofollow ugc">Setup</a> | <a href="https://wpventra.com/docs/" rel="nofollow ugc">Docs</a> | <a href="https://wpventra.com/pricing/" rel="nofollow ugc">Pro Addon</a> |
<h3>Modern WordPress login with VentraConnect</h3>
<iframe loading="lazy" class="youtube-player" width="750" height="422" src="https://www.youtube.com/embed/FEi8XCa6sys?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent" allowfullscreen="true" style="border:0;" sandbox="allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox"></iframe>
<h3>Best for</h3>
<ul>
<li>Sites that want faster logins and fewer abandoned registrations by offering Social Login + passwordless login.</li>
<li>WooCommerce stores that want modern social + passwordless login on the login, checkout and My Account pages (Pro add-on).</li>
<li>Sites that are getting spam registrations and want Guardrails to control who can create new accounts from the default <code>wp-login.php</code> screen.</li>
<li>Sites that want to add passwordless login (Magic Link / Email OTP) as an option, without removing the classic username/password login.</li>
</ul>
<h3>Key Features (Free)</h3>
Social Login 
– 15+ providers (Google, Facebook, X/Twitter, LinkedIn, Microsoft, GitHub, and more) 
– Adds login buttons to core WordPress login & registration screens (<code>wp-login.php</code>) 
– Shortcodes for custom pages, page builders, and custom login pages 
– Account linking + unlinking (connect multiple providers to one WordPress user) 
– Optional profile sync (name + avatar) 
– Button styles: Light, Dark, Minimal, plus icon-only layouts
Passwordless Login (Magic Link + Email OTP)
<ul>
<li>Built-in security: expiry, resend throttling, single-use links, max attempt limits</li>
<li>Flexible behavior: Login only mode or Login & Register mode (per method)</li>
<li>Per-method redirect overrides (same page, referrer, homepage, custom URL)</li>
<li>Custom emails: edit sender name, subject, and message templates</li>
<li>New: Improved with polished default HTML emails for Magic Link and Email OTP.</li>
</ul>
Guardrails (Spam & signup control) 
– Prevent spam accounts by controlling whether Social Login, Magic Link and Email OTP are allowed to create new users 
– Keep your login screen focused on login only, while still letting existing users sign in with all three methods 
– Your normal WordPress registration form and other registration/onboarding flows continue to work as usual
Admin Tools 
– Basic redirect options for social + passwordless login 
– Diagnostics/logging to debug OAuth and login issues 
– Email notifications (user + admin) when a new account is created via social login
<h3>Pro Add-on (Optional)</h3>
The Pro add-on extends the same login system into popular plugins and adds advanced control:
<ul>
<li>WooCommerce integration for login, checkout and My Account, with Guardrails-aware flows and context-based shortcodes</li>
<li>LMS integrations: LearnDash, LifterLMS, LearnPress</li>
<li>Membership/community integrations: MemberPress, Ultimate Member, Paid Memberships Pro (PMPro), BuddyPress</li>
<li>Passwordless Mode (Off, Recommended, Strict) to control how aggressively passwords are phased out on supported forms while keeping an admin fallback</li>
<li>New: Custom-branded Magic Link & Email OTP emails with your logo, accent color, and footer text</li>
<li>New: Inline Magic Link and Email OTP forms for custom pages, Elementor popups, account dropdowns and custom login layouts.</li>
<li>Advanced redirect rules </li>
<li>Analytics & login insights</li>
<li>Additional diagnostics/logging for complex setups</li>
</ul>
Pro features require the separate <a href="https://wpventra.com/" rel="nofollow ugc">VentraConnect Social Login Pro</a> add-on.
<h3>Roadmap: Passkeys for WordPress</h3>
VentraConnect is being developed as a modern WordPress login suite that currently includes Social Login, Magic Link, Email OTP and Guardrails.
We are also working toward passkey support as a future VentraConnect add-on. The goal is to bring passkey login into the same ecosystem, with fallback options through Magic Link and Email OTP instead of forcing passkey-only access.
<a href="https://wpventra.com/blog/passkeys-for-wordpress-ventraconnect/" rel="nofollow ugc">Read the public passkeys roadmap</a>
<h3>Supported Social Providers</h3>
Google, Facebook, X (Twitter), LinkedIn, Microsoft, GitHub, Discord, Reddit, Slack, Twitch, Spotify, TikTok, Amazon, Yahoo, WordPress.com, LINE.
<h3>How It Works</h3>
<ol>
<li>The user clicks a Social Login button, or requests a Magic Link / Email OTP.</li>
<li>For Social Login, the user authenticates with the provider via official OAuth; for Magic Link / OTP, they verify ownership of their email address.</li>
<li>VentraConnect receives basic profile or email data and looks for an existing WordPress user.</li>
<li>If the email matches an existing user, the login methods are linked to that account and the user is logged in. If not, a new user may be created (subject to your Guardrails and registration settings).</li>
</ol>
<h3>External Services</h3>
VentraConnect Social Login is an OAuth client only.
During login:
<ol>
<li>The user is redirected to the selected provider such as Google or Facebook.</li>
<li>The provider authenticates the user.</li>
<li>The provider returns an authorization token to your site.</li>
<li>VentraConnect retrieves basic profile data:
<ul>
<li>Provider user ID</li>
<li>Email address</li>
<li>Display name</li>
<li>Avatar URL</li>
</ul>
</li>
</ol>
No user data is sent to or stored on servers owned by the plugin author. 
All communication happens directly between your WordPress site and the provider official APIs.
<h3>Provider Domains Used</h3>
Google 
accounts.google.com 
oauth2.googleapis.com 
people.googleapis.com
Facebook 
graph.facebook.com
Microsoft 
login.microsoftonline.com 
graph.microsoft.com
TikTok 
open.tiktokapis.com
Reddit 
www.reddit.com 
oauth.reddit.com
LINE 
access.line.me 
api.line.me
Slack 
slack.com
Discord 
discord.com
Twitch 
id.twitch.tv 
api.twitch.tv
GitHub 
github.com 
api.github.com
Amazon 
www.amazon.com 
api.amazon.com
Yahoo 
api.login.yahoo.com
WordPress.com 
public-api.wordpress.com
LinkedIn 
www.linkedin.com 
api.linkedin.com
Each provider has its own Terms of Service and Privacy Policy. You are responsible for complying with those terms when enabling a provider.

Social Login, Magic Link & Email OTP – Passwordless Login by VentraConnect

Social login with 15+ providers plus passwordless login (Magic Link & Email OTP), with Guardrails to block spam registrations.

Magic Login Mail or QR Code vs Social Login, Magic Link & Email OTP – Passwordless Login by VentraConnect