Sachithra Vidmal Pinnaduwa

Vesess Pvt. Ltd.

VesessAuth plugin provides a modern, secure authentication method for WordPress websites without requiring passwords. Instead of remembering complex passwords, users receive a secure, time-limited login link via email.
Key Features:
<ul>
<li>One-click email authentication</li>
<li>No passwords to remember or store</li>
<li>Time-limited secure tokens</li>
<li>Brute-force attack protection</li>
<li>Compatible with existing WordPress user accounts</li>
<li>Easy setup and configuration</li>
</ul>
Passwordless authentication improves security by eliminating common password-related vulnerabilities such as weak passwords, password reuse, and phishing attacks.
<h3>Privacy Policy</h3>
This plugin collects and processes the following user data:
<ul>
<li>Email Addresses: Used solely for authentication purposes to send login links.</li>
<li>IP Addresses: Temporarily stored for security purposes to prevent abuse.</li>
<li>Login Timestamps: Recorded to maintain security logs.</li>
</ul>
All collected data is stored exclusively in your WordPress database and is not shared with third parties. Authentication tokens are temporarily stored and automatically expire after login completion or a predefined timeout period.
<h3>Technical Details</h3>
The plugin creates secure, time-limited tokens stored in the WordPress database. When a token is used, it’s immediately invalidated to prevent replay attacks. All communication containing authentication tokens uses encryption when possible.

VesessAuth

Enable secure passwordless login for WordPress through magic email links. Enhance security by eliminating password vulnerabilities.

Elevation Team

Mauricio Suarez

Elevation Magic Link Login allows your users to sign in without remembering a password. By simply entering their username or email address, they receive a secure, time-sensitive link via email that logs them in instantly.
This plugin is built with security as a priority, utilizing WordPress best practices such as nonces, input sanitization, output escaping, hashed tokens, and HMAC signatures to ensure your site and users remain protected.
<h4>Features</h4>
Adds a “Send Me a Magic Link” button to the default WP login form.
New: Toggle-based UI that hides the password field when requesting a link for a cleaner experience.
Secure, high-entropy token generation.
Tokens are hashed before storage for maximum security.
Cross-device support: Uses stateless HMAC signatures to validate links even if opened on a different device than requested.
One-time use links that expire after 15 minutes (filterable).
No-password fallback for users who forget their credentials.
Lightweight and developer-friendly.
Filterable redirect URL after successful login.

Elevation Magic Link Login

Add a secure, passwordless login option to the default WordPress login form.

VesessAuth vs Elevation Magic Link Login