Magic Login

Passwords are a hassle. Users forget them, reuse them, and create weak ones. Magic Login lets users sign in with just their email address — they receive a secure link or code, click or enter it, and they’re in. No password required.

Use Cases#

• Simplify login for users who forget passwords
• Provide quick access links in transactional emails
• Offer code-based login for mobile users
• Enable QR code scanning for fast mobile authentication

How It Works#

Link-Based Login#

1. User enters their email on the login form
2. They receive an email with a secure, one-time link
3. Clicking the link logs them in immediately
4. Link expires after configured time (default: 15 minutes)

Code-Based Login#

1. User enters their email on the login form
2. They receive an email with a 6-digit code
3. They enter the code on the verification screen
4. Correct code logs them in

QR Code Login#

1. User requests a magic link email
2. Email includes a scannable QR code
3. Scanning on mobile opens the link directly
4. User is logged in on their mobile device

Settings#

Email Placeholders#

Use these in custom email templates:

Auto-Login in Emails#

The {{MAGIC_LINK}} placeholder works in any WordPress email, not just magic login emails. Use it to include one-click login links in:

• WooCommerce order confirmations
• Membership welcome emails
• Newsletter links
• Support ticket responses

Example in an email template:

Click here to view your order: {{MAGIC_LINK}}

Shortcode#

Add a magic login form anywhere with:

[magic_login]

Optional attributes:

• redirect — URL to redirect after login
• label — Custom button label

Example:

[magic_login redirect="/my-account" label="Sign In"]

Security Features#

CAPTCHA Integration#

Magic Login integrates with Switchboard CAPTCHA modules:

• Cloudflare Turnstile
• Google reCAPTCHA
• Simple CAPTCHA

Enable CAPTCHA protection in those modules and turn on “Protect Magic Login” to prevent abuse of the magic login form.

FAQ#