Magic Login Pro: WordPress Login with SMS and QR

Passwordless login by email

Magic Login Pro extends WordPress passwordless authentication. A visitor enters an email address, receives a unique magic link in their inbox, then clicks it to log in. This removes password entry, resets, and password strength requirements from the login flow.

Email delivery uses WordPress mail functions and depends on the site's mail configuration. An SMTP service is recommended for better delivery. Links expire after five minutes by default. Change the token lifespan in settings, or set it to 0 to disable automatic expiration.

Login methods and registration

Users can receive magic login links by SMS or log in by scanning a QR code. Registration can be enabled from the login form or through a shortcode. Add a login form to a page with the plugin's block or the [magic_login_form] shortcode.

Outgoing emails can include auto-login links for pending actions, such as replying to a comment or completing checkout.

Access and spam controls

Brute force protection limits login attempts and can temporarily block an IP address. Login request throttling limits how often login links can be generated. IP Check can require a user to log in from the IP address that requested the link, and domain restrictions can limit which domains may use a magic link.

• Set a post-login destination, with various redirects by user role.
• Customize login emails using placeholders.
• Use the built-in honeypot protection on Magic Login forms.
• Add reCAPTCHA, Cloudflare Turnstile, or Friendly Captcha to login and registration forms.

Commerce, CRM, and developer utilities

WooCommerce integration supports magic login for returning clients during checkout. Easy Digital Downloads adds magic login to its checkout experience. FluentCRM can send magic login links directly through the CRM.

The REST API connects Magic Login with custom applications. WP-CLI commands can make login links, generate QR codes, export and import settings, and perform other administrative tasks. Settings can also be exported, imported, or reset in the WordPress admin panel.

Setup and documentation

Install Magic Login Pro on the WordPress website where passwordless access is needed, then configure login, registration, protection, redirect, and integration settings. Add a login or registration form to the relevant workflow, then test the email, SMS, QR code, or connected service paths in use.

The Pro edition includes documentation for Magic Login Pro and its hook reference, along with one-on-one help from the support team.