Paid Memberships Pro - Magic Login Addon

Magic Login Add On extends Paid Memberships Pro by adding passwordless login functionality to PMPro login forms. Members can enter their email address or username to receive a secure, single-use login link via email, eliminating the need to remember or reset passwords while maintaining password-based login as an alternative option.

Key Features

• Passwordless Login Option - Members can request a secure email link instead of using a password to log in
• Works on Multiple Login Forms - Button appears on both the WordPress default login page and PMPro frontend login forms
• Single-Use Tokens - Each login link can only be used once and is deleted immediately after use
• Token Expiration - Login links expire after 15 minutes from generation
• Rate Limiting - Members can request a new login link once every 5 minutes to prevent abuse
• Email Template Customization - On PMPro 3.4 or higher, customize the login link email subject and body through the built-in email template editor
• Template Variables - Supports !!login_link!! (required) and !!sitename!! variables in email templates
• WordPress Action Compatibility - Fires the standard wp_login action when users authenticate via token, ensuring compatibility with 2FA and reCAPTCHA plugins
• User Lookup by Email or Username - Members can request a login link using either their email address or username
• Account Privacy - Confirmation message displays regardless of whether an account exists for the entered email, preventing account enumeration
• Expired Link Handling - Members see a message if a link expires and can request a new one from the login page
• Automatic Redirect - Members are automatically logged in and redirected to the appropriate page after clicking a valid login link

Best For

This add-on is designed for membership sites using Paid Memberships Pro that want to reduce friction in the login process and decrease password reset support requests. It works well for sites with members who frequently forget passwords or prefer not to manage multiple credentials. The feature is particularly useful for improving user experience while maintaining security through single-use tokens and rate limiting.