oaron

<p>OneCode Login provides a modern, passwordless authentication experience for your WordPress site. Instead of traditional passwords, users receive a secure 6-digit verification code via email.</p>
<h4>Key Features</h4>
<ul>
<li><strong>Passwordless Authentication</strong> – Users log in with just their email address</li>
<li><strong>6-Digit Verification Codes</strong> – Secure, time-limited codes sent via email</li>
<li><strong>Rate Limiting</strong> – Built-in protection against brute force attacks</li>
<li><strong>Request ID Binding</strong> – Each code is bound to a specific login session for enhanced security</li>
<li><strong>Neutral Feedback</strong> – Prevents user enumeration attacks by not revealing if an email exists</li>
<li><strong>Customizable</strong> – Configure expiry times, cooldowns, and email templates</li>
<li><strong>Accessible</strong> – Full keyboard navigation and screen reader support</li>
<li><strong>Gutenberg Block</strong> – Easy to add login forms to any page</li>
<li><strong>Shortcode Support</strong> – Use [onecode_login] anywhere</li>
<li><strong>wp-login.php Integration</strong> – Optionally replace the default WordPress login</li>
</ul>
<h4>Security Features</h4>
<ul>
<li>Cryptographically secure code generation</li>
<li>Configurable code expiry (default: 10 minutes)</li>
<li>Resend cooldown to prevent spam</li>
<li>IP-based and email-based rate limiting</li>
<li>Automatic lockout after failed attempts</li>
<li>Codes are single-use and invalidated after successful login</li>
</ul>
<h4>Use Cases</h4>
<ul>
<li>Membership sites where password fatigue is an issue</li>
<li>Customer portals requiring simple authentication</li>
<li>Internal tools where security without complexity is needed</li>
<li>Any site wanting to improve user experience</li>
</ul>


OneCode Login

Simple and secure passwordless login using email verification codes. No passwords to remember, just enter your email and verify with a 6-digit code.

Freemius

NUMAN RASHEED

<p><strong>GateLink Manager</strong> pairs with the companion GateLink Client to deliver secure, zero‑config single sign‑on for WordPress. Skip copying credentials across sites: connect your hub to client sites and teleport into their dashboards with a single click. Whether you’re a developer, freelancer or agency managing many installations, GateLink saves time and reduces risk by using cryptographically signed links that expire within minutes.</p>
<h3>Key Features</h3>
<ul>
<li><strong>Zero‑config, one‑click login</strong> – Jump straight into any connected site’s wp‑admin without passwords.  </li>
<li><strong>Passwordless SSO & HMAC security</strong> – Each login URL is HMAC‑signed and valid for only a short time.  </li>
<li><strong>Multi‑site management</strong> – Add, edit, delete, verify and log in to client sites from a single dashboard.  </li>
<li><strong>Free plan included</strong> – Manage up to 3 sites at no cost; upgrade to Pro (20 sites) or Business (unlimited) when needed.  </li>
<li><strong>Built‑in logs & metrics</strong> – View connection history and lightweight stats right from the dashboard.  </li>
<li><strong>Modern UI</strong> – Responsive admin interface styled with Tailwind, tuned for accessibility and ease of use.  </li>
</ul>
<h3>How It Works</h3>
<ol>
<li><strong>Add a site</strong> – Enter the client’s base URL on your Manager dashboard.  </li>
<li><strong>Share a token</strong> – Create or paste the Shared Token in Manager; paste the same token in the Client’s “Trusted Manager” screen.  </li>
<li><strong>Verify & trust</strong> – Click <strong>Verify</strong> to perform a health check and establish trust.  </li>
<li><strong>Login</strong> – Click <strong>Login</strong>; a short‑lived, HMAC‑signed URL opens the client site in a new tab, validates the signature and redirects to <code>/wp-admin</code>.  </li>
</ol>
<h3>Security & Privacy</h3>
<ul>
<li><strong>Cryptographically signed tokens</strong> – All login links use HMAC‑SHA256 signatures with nonce‑based replay protection.  </li>
<li><strong>Time‑limited links</strong> – Tokens expire after a few minutes to reduce attack windows.  </li>
<li><strong>No stored credentials</strong> – GateLink never stores your admin passwords; only minimal metadata and logs are kept locally.  </li>
<li><strong>HTTPS required</strong> – Both Manager and Client sites must run over HTTPS; allow‑list the login query parameters (<code>gatelink_login</code>, <code>cid</code>, <code>ts</code>, <code>sig</code>) in security/CDN tools if necessary.  </li>
</ul>
<h3>Plans & Licensing</h3>
<p>GateLink is free to use for up to three client sites. Professional and Business plans unlock higher site limits and additional support options. Licensing is handled through Freemius; no license key is required for the free tier.</p>
<h3>External Services</h3>
<p>GateLink communicates only with other WordPress sites that have the GateLink Client plugin installed. Data exchanged includes site URLs, shared tokens, and connection timestamps. Licensing and support are provided via the Freemius service; activating a paid license sends your site domain, license key, and environment info to Freemius for validation.</p>


GateLink Manager – Secure One‑Click Admin Login & WordPress SSO

Secure, passwordless admin access for multiple WordPress sites—one‑click, HMAC‑signed SSO for remote wp‑admin login.

OneCode Login vs GateLink Manager – Secure One‑Click Admin Login & WordPress SSO