Fahad Aslam

WP Ventra

VentraConnect provides a unified login system for WordPress: Social Login + Magic Link + Email OTP.
<ul>
<li>Social Login with 15+ providers (Google, Facebook, X/Twitter, LinkedIn, Microsoft, GitHub, and more)</li>
<li>Passwordless Login with Magic Link and Email OTP
<ul>
<li>Can run in Login only mode (existing users) or Login & Register mode (allow new accounts)</li>
</ul>
</li>
<li>Guardrails (optional): prevent spam accounts by letting Social Login, Magic Link and Email OTP log existing users in, but optionally blocking them from creating new users. This stops random visitors from turning your login screen into an open registration form, while your normal WordPress registration and any custom onboarding forms continue to work as usual.</li>
</ul>
Works out-of-the-box on the default WordPress login/registration screens (<code>wp-login.php</code>) and also supports shortcodes for custom pages and page builders.
No proxy servers. No third-party tracking. VentraConnect connects directly to each provider using official OAuth flows.
| <a href="https://wpventra.com/docs/what-is-ventraconnect-social-login/" rel="nofollow ugc">Setup</a> | <a href="https://wpventra.com/docs/" rel="nofollow ugc">Docs</a> | <a href="https://wpventra.com/pricing/" rel="nofollow ugc">Pro Addon</a> |
<h3>Modern WordPress login with VentraConnect</h3>
<iframe loading="lazy" class="youtube-player" width="750" height="422" src="https://www.youtube.com/embed/FEi8XCa6sys?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent" allowfullscreen="true" style="border:0;" sandbox="allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox"></iframe>
<h3>Best for</h3>
<ul>
<li>Sites that want faster logins and fewer abandoned registrations by offering Social Login + passwordless login.</li>
<li>WooCommerce stores that want modern social + passwordless login on the login, checkout and My Account pages (Pro add-on).</li>
<li>Sites that are getting spam registrations and want Guardrails to control who can create new accounts from the default <code>wp-login.php</code> screen.</li>
<li>Sites that want to add passwordless login (Magic Link / Email OTP) as an option, without removing the classic username/password login.</li>
</ul>
<h3>Key Features (Free)</h3>
Social Login 
– 15+ providers (Google, Facebook, X/Twitter, LinkedIn, Microsoft, GitHub, and more) 
– Adds login buttons to core WordPress login & registration screens (<code>wp-login.php</code>) 
– Shortcodes for custom pages, page builders, and custom login pages 
– Account linking + unlinking (connect multiple providers to one WordPress user) 
– Optional profile sync (name + avatar) 
– Button styles: Light, Dark, Minimal, plus icon-only layouts
Passwordless Login (Magic Link + Email OTP)
<ul>
<li>Built-in security: expiry, resend throttling, single-use links, max attempt limits</li>
<li>Flexible behavior: Login only mode or Login & Register mode (per method)</li>
<li>Per-method redirect overrides (same page, referrer, homepage, custom URL)</li>
<li>Custom emails: edit sender name, subject, and message templates</li>
<li>New: Improved with polished default HTML emails for Magic Link and Email OTP.</li>
</ul>
Guardrails (Spam & signup control) 
– Prevent spam accounts by controlling whether Social Login, Magic Link and Email OTP are allowed to create new users 
– Keep your login screen focused on login only, while still letting existing users sign in with all three methods 
– Your normal WordPress registration form and other registration/onboarding flows continue to work as usual
Admin Tools 
– Basic redirect options for social + passwordless login 
– Diagnostics/logging to debug OAuth and login issues 
– Email notifications (user + admin) when a new account is created via social login
<h3>Pro Add-on (Optional)</h3>
The Pro add-on extends the same login system into popular plugins and adds advanced control:
<ul>
<li>WooCommerce integration for login, checkout and My Account, with Guardrails-aware flows and context-based shortcodes</li>
<li>LMS integrations: LearnDash, LifterLMS, LearnPress</li>
<li>Membership/community integrations: MemberPress, Ultimate Member, Paid Memberships Pro (PMPro), BuddyPress</li>
<li>Passwordless Mode (Off, Recommended, Strict) to control how aggressively passwords are phased out on supported forms while keeping an admin fallback</li>
<li>New: Custom-branded Magic Link & Email OTP emails with your logo, accent color, and footer text</li>
<li>New: Inline Magic Link and Email OTP forms for custom pages, Elementor popups, account dropdowns and custom login layouts.</li>
<li>Advanced redirect rules </li>
<li>Analytics & login insights</li>
<li>Additional diagnostics/logging for complex setups</li>
</ul>
Pro features require the separate <a href="https://wpventra.com/" rel="nofollow ugc">VentraConnect Social Login Pro</a> add-on.
<h3>Roadmap: Passkeys for WordPress</h3>
VentraConnect is being developed as a modern WordPress login suite that currently includes Social Login, Magic Link, Email OTP and Guardrails.
We are also working toward passkey support as a future VentraConnect add-on. The goal is to bring passkey login into the same ecosystem, with fallback options through Magic Link and Email OTP instead of forcing passkey-only access.
<a href="https://wpventra.com/blog/passkeys-for-wordpress-ventraconnect/" rel="nofollow ugc">Read the public passkeys roadmap</a>
<h3>Supported Social Providers</h3>
Google, Facebook, X (Twitter), LinkedIn, Microsoft, GitHub, Discord, Reddit, Slack, Twitch, Spotify, TikTok, Amazon, Yahoo, WordPress.com, LINE.
<h3>How It Works</h3>
<ol>
<li>The user clicks a Social Login button, or requests a Magic Link / Email OTP.</li>
<li>For Social Login, the user authenticates with the provider via official OAuth; for Magic Link / OTP, they verify ownership of their email address.</li>
<li>VentraConnect receives basic profile or email data and looks for an existing WordPress user.</li>
<li>If the email matches an existing user, the login methods are linked to that account and the user is logged in. If not, a new user may be created (subject to your Guardrails and registration settings).</li>
</ol>
<h3>External Services</h3>
VentraConnect Social Login is an OAuth client only.
During login:
<ol>
<li>The user is redirected to the selected provider such as Google or Facebook.</li>
<li>The provider authenticates the user.</li>
<li>The provider returns an authorization token to your site.</li>
<li>VentraConnect retrieves basic profile data:
<ul>
<li>Provider user ID</li>
<li>Email address</li>
<li>Display name</li>
<li>Avatar URL</li>
</ul>
</li>
</ol>
No user data is sent to or stored on servers owned by the plugin author. 
All communication happens directly between your WordPress site and the provider official APIs.
<h3>Provider Domains Used</h3>
Google 
accounts.google.com 
oauth2.googleapis.com 
people.googleapis.com
Facebook 
graph.facebook.com
Microsoft 
login.microsoftonline.com 
graph.microsoft.com
TikTok 
open.tiktokapis.com
Reddit 
www.reddit.com 
oauth.reddit.com
LINE 
access.line.me 
api.line.me
Slack 
slack.com
Discord 
discord.com
Twitch 
id.twitch.tv 
api.twitch.tv
GitHub 
github.com 
api.github.com
Amazon 
www.amazon.com 
api.amazon.com
Yahoo 
api.login.yahoo.com
WordPress.com 
public-api.wordpress.com
LinkedIn 
www.linkedin.com 
api.linkedin.com
Each provider has its own Terms of Service and Privacy Policy. You are responsible for complying with those terms when enabling a provider.

Social Login, Magic Link & Email OTP – Passwordless Login by VentraConnect

Social login with 15+ providers plus passwordless login (Magic Link & Email OTP), with Guardrails to block spam registrations.

NEXTFLY® Web Design

Nextfly Domain Restricted Access allows you to restrict post and page access to specific email domains. Users must validate their email address via a unique magic link sent to their inbox.
This plugin is perfect for internal company portals, client-specific pages, or any content that should be accessible only to users with a specific email domain (e.g., <code>@company.com</code>).
Key Features: 
* Domain-Based Restriction: Easily whitelist email domains for any post or page. 
* Secure Magic Links: Users receive a time-sensitive, one-time-use access link via email. 
* No Passwords Required: Simplifies user experience by eliminating the need for passwords. 
* Customizable Emails: Configure the email subject and body template. 
* Cookie-Based Access: Set how long access remains valid (default: 7 days). 
* Developer Friendly: Includes hooks for extending functionality.
<h3>Usage</h3>
To Protect a Post/Page: 
1. Edit any post or page you want to protect. 
2. Look for the “Nextfly Domain Restricted Access” metabox in the sidebar. 
3. Enter the authorized email domains (one per line, e.g., <code>company.com</code>). 
4. Update or Publish the post.
To Configure Settings: 
1. Navigate to Settings > Nextfly Domain Restricted Access. 
2. Customize the email subject and body (use <code>%access_link%</code> as a placeholder). 
3. Set the cookie duration (how long a user stays logged in). 
4. Select the Redirect Page (where users are sent to login).
<h3>Developers</h3>
The plugin includes hooks to extend its functionality.
Filters: 
 nfdra_post_types – Add support for custom post types. 
 nfdra_email_headers – Modify email headers (e.g., add BCC).
Actions: 
 nfdra_before_send_email – Fires before email is sent. 
 nfdra_after_send_email – Fires after email is sent. 
 nfdra_access_granted – Fires when user is granted access. 
 nfdra_access_denied – Fires when access token is invalid.

Nextfly Domain Restricted Access

Restrict access to post and page based on authorized email domains. Users verify identity via secure email links.

Social Login, Magic Link & Email OTP – Passwordless Login by VentraConnect vs Nextfly Domain Restricted Access