Magic Login Pro

2.6.2 (Nov 14, 2025)

• [Added] Admin notice when placeholder encryption keys/salts are in use.
• [Added] Rate limiting for API requests.
• [Fixed] Added capability checks for the settings page.
• [Fixed] Improved validation of $_SERVER variables.
• [Improved] Settings import file validation.
• [Improved] Better alignment of CF Turnstile on the login form.

2.6.1 (Nov 05, 2025)

• [Updated] Dependencies.
• Tested with WP 6.9

2.6 (Jul 22, 2025)

• [Added] Elementor widgets for Magic Login and Registration forms.
• [Added] SMS notifications for newly registered users with a valid phone number.
• [Added] Option to send login links directly from the user profile page.
• [Added] Ability to override TTL and token validity on a per-user basis.
• [Improved] Input field names updated to prevent conflicts with Cloudflare Turnstile.
• [Fixed] JIT translation-related warnings.
• [Fixed] Warning triggered by the auto-updater.
• [Updated] Dependency packages to latest versions.
• Read the full update: Magic Login PRO 2.6

2.5.1 (Jun 02, 2025)

• [Added] No-cache headers for magic login links to prevent caching issues.
• [Added] QR code display when generating a magic login link from the user profile page.

2.5 (May 10, 2025)

• [New] QR Code Login – Users can now log in by scanning a QR code. Learn more about QR Code Login.
• [New] QR Code Shortcode – Display a QR code anywhere using the [magic_login_qr] shortcode.
• [New] Purge Login Links – Admins can delete all login links for a specific user. Learn more about Purge Login Links.
• [New] Registration Redirect – Redirect users to a specific page after registration.
• [New] Tools Section – Added reset, export, and import options in the settings panel. Learn more about Tools.
• [Improved] WP-CLI – Added commands for QR code, export, import, and reset operations.
• [Improved] REST API – Enhanced QR code support.
• [Improved] Alphanumeric Sender ID – Set a custom SMS sender name (Twilio only).
• [Fixed] Domain Matching – Login and registration now use case-insensitive domain checks.
• [Updated] Dependencies.
• [Changed] Minimum PHP version raised to 7.4.
• Read the full update: Magic Login 2.5

2.4.2 (April 14, 2025)

• [Improved] SMS login support to API.
• [Added] New filter magic_login_twilio_sms_options to customize Twilio SMS options.
• [Added] New filter magic_login_email_placeholders to customize email placeholders.
• [Fix] Remove deprecated send_login usage in API.
• [Fix] Prevent fatal error when spam service is enabled but not configured for the registration form.
• [Updated] Dependencies.
• Tested with WP 6.8

2.4.1 (March 10, 2025)

• [Fix] Default sms registration message without using emoji.

2.4 (March 05, 2025)

• [New Feature] SMS Login – Now you can send magic login links via SMS. Learn More
• [New Feature] Code Login – Users can now log in using the login code sent to their email or phone instead of clicking a link.
• [New Feature] Domain Restriction for Registration – Restrict user registration to specific domains.
• [New Feature] FluentCRM Integration – Send magic login links directly via FluentCRM. Learn More
• [New Feature] Easy Digital Downloads (EDD) Integration – Seamlessly integrate Magic Login into the EDD checkout experience. Learn More
• [Improvement] Applied login_redirect filter before magic_login_redirect to allow other plugins to modify the redirect URL.
• [Improvement] Deprecated login.php in favor of the LoginManager class.
• [Improvement] Refactored WooCommerce integration into a dedicated class and extended support for customer login forms.
• [Fix] Resolved a brute force protection issue when used with login throttling.
• [Fix] Properly encode the redirection URL on the wp-login page.
• [Fix] Corrected various typos. Props @szepeviktor
• Read the full update: Magic Login 2.4

2.3.6 (January 03, 2025)

• [Fixed] Ensure proper handling of email recipient for {{MAGIC_LINK}} integration.
• [Fixed] French translation.
• [Improved] Applied array_shift() to extract the first recipient if $atts['to'] is an array.

2.3.5 (December 18, 2024)

• [Improved] {{MAGIC_LINK}} placeholder to support encoded values.
• [Improved] JavaScript handling for the magic login button by using esc_url_raw for form action and redirect URLs.
• [Added] magic_login_get_wp_login_url filter for customizing the login URL.
• [Deprecated] \MagicLogin\Utils\get_magic_login_url, use \MagicLogin\Utils\get_wp_login_url instead.
• [Updated] Dependencies.

2.3.4 (November 19, 2024)

• [Improved] Enhanced login request handling with prioritized processing and added logging for header_sent scenarios.
• [Improved] Implemented pre-validation checks before magic link replacement to prevent potential issues.
• [Fixed] Resolved recaptcha/turnstile integration compatibility on wp-login.php
• [Updated] Dependencies.
• Tested with WP 6.7

2.3.3 (October 07, 2024)

• [Improved] Two-factor compatibility.
• [Updated] Dependencies.

2.3.2 (September 09, 2024)

• [Improved] Spam protection for AJAX requests.
• [Fixed] Last name validation in registration form.
• [Updated] Dependencies.

2.3.1 (July 10, 2024)

• [Fixed] Resolved issue with Cloudflare Turnstile integration when AJAX is enabled.

2.3 (July 10, 2024)

• [Added] REST API. Now you can create magic login links via REST API.
• [Added] Passing magic_login_form to shortcode_attr for better customization.
• [Updated] Dependency updates.
• Tested with WP 6.6
• Learn more about the new features: Magic Login 2.3

2.2 (May 29, 2024)

• [Added] Registration feature.
• [Added] reCAPTCHA integration.
• [Added] Cloudflare Turnstile integration.
• [Added] Custom events for AJAX requests.
• [Added] New filter magic_login_token_ttl_by_user to customize TTL for users.
• [Added] New filter magic_login_error_message to customize error messages.
• [Improved] Form styles.
• [Improved] WooCommerce integration on block based themes.
• [Fixed] Allow email customizations with HTML tags (based on unfiltered_html capability).
• [Fixed] WooCommerce toggle to work with dynamically loaded .showlogin link.
• [Refactored] Improved settings page UI.
• [Refactored] Enhanced class autoloading.
• [Updated] Dependency updates.
• Learn more about the new features: Magic Login Pro 2.2

2.1.3 (April 19, 2024)

• Improvements on the uninstallation process.

2.1.2 (April 08, 2024)

• Fix auto-login link when the recipient is specified in an array format.
• Dependency updates.

2.1.1 (March 13, 2024)

• Tested with WP 6.5
• Dependency updates.

2.1 (February 13, 2024)

• Added WooCommerce integration for a seamless checkout experience.
• Added a new option to enforce redirection rules from the settings.
• Added new attributes for shortcode; it's more flexible than ever. Learn More
• Fix: Encode the redirect_to parameter in the login link. (Better nG firewall compatibility)
• Dependency updates.

2.0.1 (January 15, 2024)

• Fix German language that breaks auto-login links.
• Dependency updates.

2.0 (November 07, 2023)

• Add {{MAGIC_LINK}} support to all outgoing emails received by a single user.
• Add new placeholder supports: {{FIRST_NAME}}, {{LAST_NAME}}, {{FULL_NAME}}, {{DISPLAY_NAME}}, {{USER_EMAIL}}
• Add AJAX spinner to the login form.
• Add Dutch language packs.
• Dependency updates.
• Minor tweaks on settings form.

1.9.1 (October 26, 2023)

• Added French translation.
• Dependency updates.
• Fix deprecated variable format.
• Improved PHP 8.2 compatibility.
• Tested with WP 6.4

1.9 (July 25, 2023)

• Added: AJAX support for login requests.
• Added: CLI command for bulk. See wp help magic-login bulk-create
• Bumped PHP requirement to 7.2+
• Small tweaks and improvements.
• Tested with WP 6.3

1.8.1 (May 15, 2023)

• Added: Styling for two-factor plugin.
• Minor UI changes.
• Small tweaks and improvements.
• Tested with WP 6.2

1.8 (February 18, 2023)

• New feature: Token Validity - allows to specify how many times a token can be used.
• Improvements on the default login screen
• i18n improvements
• Added: German translation.
• Added: Autocomplete support.
• Added: New token {{TOKEN_VALIDITY_COUNT}} to customize email content.

1.7 (January 21, 2023)

• PHP 8.1: fix deprecated 'FILTER_SANITIZE_STRING'
• UI/UX improvements on default login screen
• i18n improvements. Props @emreerkan
• Fix: profile page js error on multisite.
• Fix: standard wordpress redirect functionality.
• Fix: Skip the auto-login link for the magic login itself.
• Fix: Send email only once.

1.6 (October 26, 2022)

• New feature: Auto Login Links

1.5.2 (September 27, 2022)

• Bug fix: token validation

1.5.1 (September 26, 2022)

• Fixed: redirection issue.
• Minor UI updates.
• Small tweaks and improvements.
• Tested with WP 6.1

1.5 (September 12, 2022)

• Fixed: save tokens hashed in DB. Props @snicco
• Fixed: remove HTTP_X_FORWARDED_FOR header support to retrieve client ip. Props @snicco
• Added: magic_login_client_ip filter to customize client IP.
• Added: username-only mode. define MAGIC_LOGIN_USERNAME_ONLY in the config file to use it.
• Added: email subject option on the settings page.
• Email improvements: Check email contents before converting line breaks to <br/> tags.
• Small tweaks and improvements.

1.4.1 (May 23, 2022)

• Check user object to avoid notice.

1.4 (May 23, 2022)

• Added user-level disable controls.
• Added magic login link creation from the profile page.
• Small tweaks and improvements.

1.3.1 (May 2, 2022)

• redirect-to parameter added to CLI command.

1.3 (April 19, 2022)

• Tested with WP 6.0
• UI updates.
• Fire wp_login hook as WP Core does on successful login.
• Add new filter: magic_login_email_headers.
• Fix email title html escaping.
• Small tweaks and improvements.

1.2.2

• Tested with WP 5.9
• Update Shared UI
• Fix compatibility issue with TML plugin
• Add redirection cancellation option to the login block.
• Check logged-in while saving the settings
• Small tweaks and improvements.

1.2.1

• New: Integrate with the standard login form.
• Fix: Enqueue admin assets on the settings page only.
• Allow login block only once for a post.
• Small tweaks and improvements.

1.2

• New: Magic Login Block - It's much easier to add and customize the login form in the block editor.
• Customizable token intervals added. (removed 1-60 minutes restriction)
• New placeholder added: {{EXPIRES_WITH_INTERVAL}} to display TTL with the interval.
• Updated Shared UI
• Improved documentation on the settings page.
• New: Show an error message when the user doesn't exist.
• New filter: Added magic_login_invalid_token_error_message to customize error message.

1.1.2

• Fix: Scheduled expired token cleanup

1.1.1

• Update Shared UI
• Shortcode magic_login_form now supports redirect_to attribute

1.1

• Tested with WP 5.8
• Shortcode magic_login_form support added!
• fix: make sure deactivate_plugins exists when manually switching versions

1.0.2

• Update Shared UI
• fix: add text-domain for missing strings
• fix: login email customization

1.0.1

• Update Shared UI
• Tested with WP 5.7

1.0

• First release