Description
Login Links allows you to create temporary, password-less access links for existing users or guest accounts. The links can be configured to expire either after a certain period of time or after a set number of successful logins.
How Login Link Works
A login link is a special link that, when clicked, automatically logs the user in. They don’t need an account. The login occurs either under an existing account or under a temporary account created specifically for this link. The link has an expiration date, after which it is automatically deleted.
Provide Temporary Access
Create a login link with a specific role for support teams, clients, developers, or guest users who need temporary access to the site, and email it directly to them. They don’t need to create an account or come up with a password, and you won’t have to worry about deleting their account later.
Passwordless Access for Users
Allow already registered users to log in without a password. Users request a one-time login link by entering the email they used during registration, and the link is sent to that email.
Features
Temporary Login Links
- Create an unlimited number of temporary login links.
- Choose to log in as an existing user or as a temporary user, which will automatically create a temporary account attached to the link.
- Delete and manage created links through a table interface, allowing you to view and remove links as needed.
- Set expiration limits for each login link based on time or number of logins.
- Expiration can be based on the number of logins, time, or a combination of both, whichever occurs first.
- Send an email invitation with a login link.
- Customize the email’s body and subject text.
Password-less Access
- Allow password-less access for your users.
- Custom login form via shortcode for password-less access.
- Automatic deletion of expired links.
- Automatic generation of a temporary account with a designated role upon link creation.
- Optional password-less access through the standard WordPress login form.
- Ability to disallow password-based access.
Screenshots
Installation
Upload the login-links folder to the /wp-content/plugins/ directory. Activate the plugin through the Plugins menu in WordPress. Once activated, go to Login Links in the WordPress admin sidebar to create and manage login links.
FAQ
-
What is a login link?
-
A temporary login link allows users to log in without a password, and you can set the link to expire after a specific period of time or after a certain number of successful logins.
-
How secure is this?
-
The links have alphanumeric tokens longer than 60 characters. Such a token is impossible to guess. The tokens are stored in database encrypted, this means that even if someone get access to the database, they won’t be able to use the encrypted token.
-
Can I create multiple login links for the same user?
-
Yes, you can generate multiple temporary login links for the same user, each with its own expiration time or login limit.
-
How do I prevent the link from being used after it expires?
-
The plugin automatically invalidates the link after it reaches its expiration time or the maximum number of allowed logins is reached.
-
Can temporary login links be created for guest or temporary users?
-
Yes! You can generate login links for temporary users without needing to create permanent accounts.
-
Can users still log in with a password?
-
Yes. You can choose to either disable password login or allow the user to decide.
-
What problems does this solve?
-
Users often set simple passwords, especially temporary users like developers who are given admin access. Using login links solves this problem, and you don’t have to worry about deleting the account later.
-
What about already registered users—why should they log in without a password?
-
It’s more convenient. People often forget their passwords or set simple ones to avoid forgetting them. With login links, forgetting a password is impossible because no password is required. The login is done via a one-time link.
-
How do I change the URL where users are redirected after logging in via a login link?
-
You can customize the redirect URL by using the WordPress filter hook
lgnl_success_login_redirect_url. This filter lets you modify the URL the user is sent to after a successful login with a temporary login link token.Example of usage:
add_filter( 'lgnl_success_login_redirect_url', function( $redirect_url, $link, $key, $request_uri ) { return 'https://yourwebsite.com/your-custom-page/'; }, 10, 4 );
Reviews
Contributors & Developers
“Login Links – Passwordless Login, Temporary Access Links & Custom Login Form” is open source software. The following people have contributed to this plugin.
Contributors
Interested in development?
Browse the code, check out the SVN repository, or subscribe to the development log by RSS.
Changelog
1.0.1
Initial plugin release.
2.0.0
Passwordless login feature introduced.
Passwordless login: standard WordPress login form support added.
Passwordless login: Shortcode adding a customizable login form.
Passwordless login: Option to disallow password login.
Security improvement: links tokens are stored as encrypted hashes.
Temporary Login Link: Reset link feature introduced.
Temporary Login Link: Send via email feature introduced.
Interface multiple enhancements introduced.
i18n improved.
Multiple minor bugs fixed.
2.1.0
Added filter ‘lgnl_success_login_redirect_url’ to allow customization of the redirect URL after successful login.
Minor code refactoring and documentation updates.