Magic Login Pro
Antivirus scan
Powered by ClamAV
✅ Verified clean
This product file has passed our security filters.
Want to run a fresh ClamAV scan right now? Takes a few seconds and shows scanner version, signature DB and live result.
This can take 5 to 30 seconds.
Clean file Threat detected
No threats detected in this file.
- File
- Size
- Scanned
- ClamAV
- Signature database
⚡ Powered by ClamAV
Scan could not be completed
Report product
If you detected an issue (broken file, malware, inappropriate content, etc.) let us know and we'll review it ASAP.
Sign in to report
About Magic Login Pro
Logging in without a password, through a link sent by email
Passwords are the weak point of almost any site with users, and not because of a technical flaw: because of how people use them. They get reused across services, written down, forgotten, and every forgetting produces a recovery email which is exactly the same mechanism as a magic link, only with one extra step.
Magic Login starts from that observation. If email is already the de facto recovery method, let it be the access method directly: the user types their address, receives a link, and is in.
How the link works
A random token is generated with limited validity. **It expires in 5 minutes by default**, and that window can be adjusted or disabled entirely from the settings.
The controls that make it safe
An access link sent by email is convenient, and it is also a key travelling over a channel you do not control. Which is why the limits are what matter:
- IP restriction: the link only works from the same address that requested it. If somebody intercepts the email elsewhere, it is useless to them.
- Brute force protection, with attempt limits and temporary IP blocking.
- Rate limiting, so nobody can request links in a chain.
- Email domain restriction, useful when access is meant only for one company or institution.
Other ways in
Besides email, it supports sending the link by SMS and logging in through a QR code, which handles moving from one device to another without typing anything.
For the administrator
- Customisation of the email the user receives.
- Role-based redirects, so each type of user lands where they should.
- A shortcode for placing the login form on any page.
- Registration from the login form itself.
- WP-CLI commands for generating links from the command line, useful in support and automation.
One practical consideration
The whole system depends on the email arriving. It uses WordPress's mail functions, which on many hosts end up in the junk folder, so it is worth having an SMTP service configured before putting this into production. Without that, passwordless access becomes impossible access.
Frequently asked questions
How long does the link last?
Five minutes by default, adjustable or disableable from the settings.
What if somebody intercepts the email?
With IP restriction enabled, the link only works from the address that requested it.
Can I send it by SMS?
Yes, it supports SMS delivery as well as email, and QR code login too.
Do I need to set anything up first?
It is worth having an SMTP service, because everything depends on the email reaching the inbox.
Topics
Version history
-
v
2.8.1 Current 5 Aug 2026
-
v
2.7.1 2 Apr 2026
Customer reviews
Sign in to leave a review. Only people who have the product can review it.
No reviews for this product yet.
Frequently asked questions
-
GPL (General Public License) is the license under which WordPress and most premium plugins/themes are distributed. It grants you the right to use, modify and redistribute the software in as many projects as you want, with no domain restrictions.
-
Yes. With membership you get automatic updates via our GPLClub Updater plugin (installed on your WP, detects new versions and applies them). With individual purchase, you get one year of manual updates from your account.
-
Depends on the plan. Monthly: 3 domains. Semi-annual: 7. Annual and Lifetime: 15. Individual purchase: 1 domain.
-
GPLClub offers its own support for installation, configuration and compatibility. For direct support from the original author (feature requests, product-specific bugs), a license purchased from the author is required.
