説明

Easy, secure, and passwordless authentication for WordPress.

Streamline the login process by sending links to your users. No more passwords to remember, no more password resets, and no more password strength requirements.

Learn more about Magic Login

How does it work? 🪄

Magic login uses a technique called “magic links”. The magic link is a unique link sent directly to your email inbox which allows you to authenticate once.

Auto Login: Magic Login also supports auto-login links for outgoing emails. It’s useful when pending action from a user, such as reply a comment, complete the checkout, etc..

PRO Features 🎩

Here are the premium features that come with Magic Login Pro:

CLI Command: Use WP-CLI to create login links.
Brute Force Protection: Limit rate of login attempts and block IP temporarily.
Login request throttling: Limit login link generation for a certain time of period.
IP Check: Enhance the security by restricting users to log in from the same IP address that requested the link.
Domain Restriction: Allow only certain domains to use the magic link.
Login Email Customization: Customize login message by using email placeholders.
Login Redirect: Redirect users to a specific page right after login. You can also redirect different pages based on the user role.

By upgrading to Magic Login Pro you also get access to one-on-one help from our knowledgeable support team and our extensive documentation site.

Learn more about Magic Login Pro

Contributing & Bug Report

Bug reports and pull requests are welcome on Github. Some of our features are pro only, please consider before sending PR.

Documentation

Our documentation can be found on https://handyplugins.co/magic-login-pro/docs/

スクリーンショット

Settings Page
Login Email
Login Block

ブロック

このプラグインは1個のブロックを提供します。

Magic Login

インストール

Manual Installation

Upload the entire /magic-login directory to the /wp-content/plugins/ directory.
Activate Magic Login through the ‘Plugins’ menu in WordPress.

FAQ

What is passwordless authentication?: Passwordless authentication is an authentication method in which a user can log in to a computer system without entering (and remembering) a password.
Is the magic links are secure?: Yes! In fact, we thought this is more secure than the regular login due to most of the users are using weak passwords. Since magic login generates a random token for a limited time frame it makes the links quite strong and secure. Also, tokens can be used only once.
When do login links expire?: It expires in 5 minutes by default. You can change TTL under the “Token Lifespan” on the settings page. Enter “0” to disable automatic expiration.
Why am I not getting login links?: Magic Login uses WordPress built-in mail functions. So, it depends on your configuration. We highly recommend to use an SMTP service for better email delivery.
How can I use a passwordless login form on any page?: You can use [magic_login_form] shortcode or block. Learn More.

評価

Emre 2023年1月21日

Easy to configure and use. Doing it's job flawlessly.

munikho 2022年11月18日 1 reply

So far a great experience, recommended!

2件のレビューをすべて表示

貢献者と開発者

Magic Login – Passwordless Authentication for WordPress はオープンソースソフトウェアです。以下の人々がこのプラグインに貢献しています。

“Magic Login – Passwordless Authentication for WordPress” は1ロケールに翻訳されています。翻訳者のみなさん、翻訳へのご協力ありがとうございます。

“Magic Login – Passwordless Authentication for WordPress” をあなたの言語に翻訳しましょう。

開発に興味がありますか ?

コードを閲覧するか、SVN リポジトリをチェックするか、開発ログを RSS で購読してみてください。

変更履歴

1.7 (January 21, 2023)

PHP 8.1: fix deprecated ‘FILTER_SANITIZE_STRING’
UI/UX improvements on default login screen
i18n improvements. Props @emreerkan
Fix: standard wordpress redirect functionality. Props @maartenhunink
Fix: Skip the auto-login link for the magic login itself.
Fix: Send email only once.

1.6 (October 26, 2022)

New feature: Auto Login Links

1.5.2 (September 27, 2022)

Bug fix: token validation

1.5.1 (September 26, 2022)

Fixed: redirection issue.
Minor UI updates.
Small tweaks and improvements.
Tested with WP 6.1

1.5 (September 12, 2022)

Fixed: save tokens hashed in DB. Props @snicco
Added: username-only mode. define MAGIC_LOGIN_USERNAME_ONLY in the config file to use it.
Email improvements: Check email contents before converting line breaks to <br/> tags.
Small tweaks and improvements.

1.3 (April 19, 2022)

Tested with WP 6.0
UI updates.
Fire wp_login hook as WP Core does on successful login.
Add new filter: magic_login_email_headers.
Fix email title html escaping.
Small tweaks and improvements.

1.2.2

Tested with WP 5.9
Update Shared UI
Fix compatibility issue with TML plugin
Add redirection cancellation option to the login block.
Check logged-in while saving the settings
Small tweaks and improvements.

1.2.1

New: Integrate with the standard login form.
Fix: Enqueue admin assets on the settings page only.
Allow login block only once for a post.
Small tweaks and improvements.

1.2

New: Magic Login Block – It’s much easier to add and customize the login form in the block editor.
Customizable token intervals added. (removed 1-60 minutes restriction)
New placeholder added: {{EXPIRES_WITH_INTERVAL}} to display TTL with the interval.
Updated Shared UI
Improved documentation on settings page.
New: Show an error message when the user doesn’t exist.
New filter: Added magic_login_invalid_token_error_message to customize error message.

1.1.3

Fix: Scheduled expired token cleanup

1.1.2

Update Shared UI
Shortcode magic_login_form now supports redirect_to attribute
fix: don’t display login form if the user already logged-in

1.1.1

Hotfix: return shortcode output instead of printing

1.1

Tested with WP 5.8
Shortcode magic_login_form support added!
fix: make sure deactivate_plugins exists when manually switching versions

1.0.3

Update Shared UI
fix: add text-domain for missing strings

1.0.2

Update Shared UI
Tested with WP 5.7

1.0.1

Update Shared UI

1.0

First release

Like it’s name, it’s magic!

Simple and flexible

説明