Title: Social Login, Passkeys, Magic Link & Email OTP – Passwordless Login by VentraConnect Author: Fahad Aslam Published: 13 December 2025 Last modified: 17 October 2026 --- Search plugins ![](https://ps.w.org/ventraconnect-social-login/assets/banner-772x250.png?rev=3581814) ![](https://ps.w.org/ventraconnect-social-login/assets/icon-256x256.gif?rev=3470214) # Social Login, Passkeys, Magic Link & Email OTP – Passwordless Login by VentraConnect By [Fahad Aslam](https://profiles.wordpress.org/fahdaslam/) [Download](https://downloads.wordpress.org/plugin/ventraconnect-social-login.1.4.6.zip) * [Details](https://en-gb.wordpress.org/plugins/ventraconnect-social-login/#description) * [Reviews](https://en-gb.wordpress.org/plugins/ventraconnect-social-login/#reviews) * [Development](https://en-gb.wordpress.org/plugins/ventraconnect-social-login/#developers) [Support](https://wordpress.org/support/plugin/ventraconnect-social-login/) ## Description VentraConnect provides a **native authentication stack and unified login system** for WordPress: Social Login, Passkeys, Magic Link and Email OTP. Built around the native WordPress user system, it gives your site modern sign-in methods without routing sensitive authentication data through external proxy servers or relying on third-party passkey platforms. * **Social Login**: with 15+ providers, including Google, Facebook, X/Twitter, LinkedIn, Microsoft, GitHub and more. * **Native Passkeys**: Secure passwordless sign-in using supported device authenticators such as Touch ID, Face ID and Windows Hello. Passkey authentication uses WebAuthn through your WordPress site, without relying on an external passkey platform. * **Passwordless Login** with **Magic Link** and **Email OTP** - Can run in **Login only** mode (existing users) or **Login & Register** mode( allow new accounts) * **Guardrails (optional)**: Unlike standard plugins that automatically create a new account whenever an unknown visitor uses a social button on your login screen, VentraConnect gives you full control over registration. Guardrails allow** Social Login, Magic Link and Email OTP** to securely authenticate your existing users while blocking the creation of new accounts from the login form when you choose. This prevents random visitors from turning your login screen into an accidental open registration form, while your official registration screen and custom onboarding flows continue to work exactly as intended. #### Use the login methods your site needs VentraConnect is modular. Enable Social Login, Passkeys, Magic Link and Email OTP individually, or combine the available methods into one sign-in experience. For example, a site can offer one or more social providers only, Email OTP only, Magic Link only, Passkeys only, or several sign-in methods together alongside normal WordPress passwords. There is no required login-method bundle. Social Login, Magic Link and Email OTP can also use Guardrails to control whether unknown visitors are allowed to create new accounts, while still allowing existing users to sign in. Works out-of-the-box on the default WordPress login/registration screens (`wp-login. php`) and also supports shortcodes for custom pages and page builders. **No proxy servers. No third-party tracking.** VentraConnect connects directly to social providers through official OAuth flows. Passkey authentication is handled natively through your WordPress site using WebAuthn, without external platform dependencies. | [Setup](https://wpventra.com/docs/what-is-ventraconnect-social-login/) | [Docs](https://wpventra.com/docs/) | [Pro Addon](https://wpventra.com/pricing/) | ### Modern WordPress login with VentraConnect ### Best for * **Sites that want faster sign-in and fewer abandoned registrations** by offering Social Login, Passkeys, Magic Link and Email OTP alongside normal WordPress login. * **WooCommerce stores** that want a smoother checkout and account experience with Social Login and passwordless login on supported login, checkout and My Account flows (Pro). * **LMS, membership and community sites** that need simpler onboarding, modern login choices and advanced authentication placements across courses, memberships and member areas (Pro). * **Sites fighting spam registrations** that want Guardrails to control whether Social Login, Magic Link and Email OTP can create new accounts from the default wp-login.php screen, without locking out existing users. * **Security-focused site owners** who want native Passkey sign-in with supported device authenticators such as Touch ID, Face ID and Windows Hello, plus profile- based Passkey management. * **Growing sites and agencies** that want one authentication foundation for WordPress, WooCommerce, LMS and membership workflows instead of stitching together separate login plugins. * **Flexible site architectures** that want to introduce Passkeys, Magic Link or Email OTP without removing the classic username/password login fallback. ### Key Features (Free) #### Social Login * **15+ Social Providers:** Google, Facebook, X/Twitter, LinkedIn, Microsoft, GitHub, Discord, Reddit, Slack, Twitch, Spotify, TikTok, Amazon, Yahoo, WordPress.com and LINE. * **Native WordPress Login Screens:** Adds login buttons to default WordPress login and registration screens (`wp-login.php`). * **Custom Shortcodes:** Add login methods to custom pages, page builders and dedicated login layouts. * **Account Linking:** Users can connect or remove multiple social providers from one WordPress account. * **Profile Sync:** Optionally sync display names and avatars from verified social providers. * **Button Styles:** Light, Dark and Minimal themes, with wide or compact social button layouts. #### Native Passkeys * **Native WordPress Architecture:** Passkey authentication is handled through your WordPress site using WebAuthn, without relying on an external passkey platform. * **Modern Device Support:** Works with supported authenticators such as Touch ID, Face ID, Windows Hello, Android biometrics and hardware security keys. * **Core Login and Registration Support:** Passkey sign-in and registration on supported default WordPress forms, plus the VentraConnect shortcode. * **Profile Passkey Management:** Users can add and remove multiple Passkeys from their WordPress profile. * **Built-In Fallback Options:** Enable Magic Link or Email OTP alongside Passkeys, so users can still sign in from older devices, restricted browsers or situations where their Passkey is not available. #### Passwordless Login: Magic Link and Email OTP * **Built-In Security:** Expiry windows, resend throttling, single-use Magic Links and verification attempt limits. * **Per-Method Rules:** Set each method to **Login only** or **Login & Register**. * **Redirect Controls:** Redirect users to the same page, referrer, homepage or a custom URL after login. * **Email Controls:** Edit sender details, subjects and email message templates. * **Polished HTML Emails:** Default Magic Link and Email OTP email templates designed for clear sign-in actions and easy code entry. #### Guardrails: Spam and Signup Control * **Registration Control:** Choose whether Social Login, Magic Link and Email OTP can create new WordPress accounts from login forms. * **Existing Users Can Still Sign In:** Keep login methods available for known users while blocking unwanted account creation when needed. * **Keep Your Existing Registration Process:** Normal WordPress registration, custom onboarding pages and third-party registration workflows continue to work as intended. #### Admin and Diagnostic Tools * **Redirect Settings:** Configure global redirect behaviour for Social Login and passwordless methods. * **Local Diagnostics and Logs:** Troubleshoot OAuth callbacks and login issues from the WordPress dashboard. * **Account Creation Notifications:** Send email notifications to users and administrators when a new account is created through Social Login. ### Pro Add-on (Optional) VentraConnect Pro extends the same native authentication stack into WooCommerce, LMS, membership and community workflows with advanced Passkey placements, branded authentication experiences and deeper controls. **New in Pro for 1.4.0:** Dedicated integrations for **Tutor LMS** and **Paid Membership Subscriptions (PMS)**, including supported login, registration and account experiences. #### Advanced Passkey Integrations * **WooCommerce Passkey Experiences:** Add Passkey sign-in and setup prompts across supported login, checkout, Thank You and My Account flows. * **Floating Passkey Setup Prompt:** Encourage logged-in users who have not registered a Passkey to secure their account with a simple, non-intrusive setup panel. * **Advanced Account Placements:** Add Passkey setup and management experiences across supported third-party account areas. #### WooCommerce Integration * Add Social Login, Passkeys, Magic Link and Email OTP to supported WooCommerce login, checkout and My Account flows. * Let returning customers sign in with a saved Passkey during supported checkout and login experiences. * Show optional Passkey setup prompts to eligible logged-in customers on checkout and Thank You pages. * Keep Magic Link and Email OTP available alongside Passkeys as passwordless fallback options when needed. * Control account creation through Guardrails-aware Social Login, Magic Link and Email OTP flows. #### LMS, Membership and Community Integrations * **LMS Platforms:** Tutor LMS, LearnDash, LifterLMS and LearnPress integrations for supported login, registration and account experiences. * **Membership and Community Platforms:** MemberPress, Ultimate Member, Paid Memberships Pro (PMPro), Paid Membership Subscriptions (PMS) and BuddyPress. * **Integration-Aware Login Methods:** Place supported authentication methods where they make sense across third-party login, registration and account screens. #### Password Phaseout and Advanced Rules * **Password Phaseout:** Choose **Off**, **Recommended** or **Strict** modes to control how passwords are presented on supported forms, while keeping an administrator fallback available. * **Advanced Redirect Rules:** Apply redirects based on login, registration, checkout or supported integration context. * **Context-Based Shortcodes:** Control authentication placement for supported third-party login surfaces. #### Branded Emails, Forms and Insights * **Inline Magic Link and Email OTP Forms:** Embed complete forms directly into custom pages, headers, Elementor popups, account areas and tailored login layouts. * [ventraconnect_magic_link_form] * [ventraconnect_email_otp_form] * **Branded Authentication Emails:** Add your logo, accent colour and footer text to Magic Link, Email OTP and Passkey registration emails. * **Analytics and Login Insights:** Review login activity, popular social providers and authentication-method performance. * **Advanced Diagnostics:** Access additional logs and diagnostics for complex authentication setups. Pro features require the separate [VentraConnect Pro](https://wpventra.com/pricing/) add-on. ### Supported Social Providers Google, Facebook, X (Twitter), LinkedIn, Microsoft, GitHub, Discord, Reddit, Slack, Twitch, Spotify, TikTok, Amazon, Yahoo, WordPress.com and LINE. ### How It Works Users can sign in with Social Login, Passkeys, Magic Link or Email OTP. Social Login uses the selected provider’s official OAuth flow. Passkeys use WebAuthn through the user’s supported browser and device. Magic Link and Email OTP verify ownership of the user’s email address. VentraConnect matches verified provider or email data with an existing WordPress user and signs them in. New accounts may be created based on your registration settings and Guardrails configuration. ### External Services VentraConnect acts as an OAuth client only. During Social Login, users are redirected to the selected provider, which returns an authorization token to your WordPress site. VentraConnect then retrieves basic profile data such as provider ID, email address, display name and avatar URL. Passkey authentication is handled natively on your WordPress site using WebAuthn and the user’s browser or device authenticator. No external passkey service is required. No user data is sent to or stored on servers owned by the plugin author. Communication happens directly between your WordPress site and the enabled provider’s official APIs. ### Provider Domains Used Google: accounts.google.com, oauth2.googleapis.com, people.googleapis.com Facebook: graph.facebook.com Microsoft: login.microsoftonline.com, graph.microsoft.com TikTok: open.tiktokapis.com Reddit: www.reddit.com, oauth.reddit.com LINE: access.line.me, api.line.me Slack: slack.com Discord: discord.com Twitch: id.twitch.tv, api.twitch. tv GitHub: github.com, api.github.com Amazon: www.amazon.com, api.amazon.com Yahoo: api.login.yahoo.com WordPress.com: public-api.wordpress.com LinkedIn: www.linkedin. com, api.linkedin.com Each provider has its own Terms of Service and Privacy Policy. You are responsible for complying with those terms when enabling a provider. ## Screenshots [⌊Choose the login experience that fits your site: enable Passkeys, Social Login, Magic Link and Email OTP individually or combine them in one WordPress login form.⌉⌊ Choose the login experience that fits your site: enable Passkeys, Social Login, Magic Link and Email OTP individually or combine them in one WordPress login form .⌉[ Choose the login experience that fits your site: enable Passkeys, Social Login, Magic Link and Email OTP individually or combine them in one WordPress login form. [⌊VentraConnect dashboard overview with controls for Social Login, Passkeys, Magic Link, Email OTP, login button order and WordPress authentication settings.⌉⌊VentraConnect dashboard overview with controls for Social Login, Passkeys, Magic Link, Email OTP, login button order and WordPress authentication settings.⌉[ VentraConnect dashboard overview with controls for Social Login, Passkeys, Magic Link, Email OTP, login button order and WordPress authentication settings. [⌊Profile-based account management for Passkeys and linked social accounts, allowing users to add or remove Passkeys and connect or disconnect social providers.⌉⌊Profile- based account management for Passkeys and linked social accounts, allowing users to add or remove Passkeys and connect or disconnect social providers.⌉[ Profile-based account management for Passkeys and linked social accounts, allowing users to add or remove Passkeys and connect or disconnect social providers. [⌊Guardrails let Social Login, Magic Link and Email OTP sign in existing users while controlling whether new WordPress accounts can be created from default login forms.⌉⌊ Guardrails let Social Login, Magic Link and Email OTP sign in existing users while controlling whether new WordPress accounts can be created from default login forms .⌉[ Guardrails let Social Login, Magic Link and Email OTP sign in existing users while controlling whether new WordPress accounts can be created from default login forms. [⌊Enable and configure Social Login providers including Google, Facebook, X/Twitter, Microsoft and more.⌉⌊Enable and configure Social Login providers including Google, Facebook, X/Twitter, Microsoft and more.⌉[ Enable and configure Social Login providers including Google, Facebook, X/Twitter, Microsoft and more. [⌊Magic Link and Email OTP email previews for WordPress passwordless login.⌉⌊Magic Link and Email OTP email previews for WordPress passwordless login.⌉[ Magic Link and Email OTP email previews for WordPress passwordless login. [⌊Magic Link and Email OTP settings for expiry, resend rules, registration mode and redirects.⌉⌊Magic Link and Email OTP settings for expiry, resend rules, registration mode and redirects.⌉[ Magic Link and Email OTP settings for expiry, resend rules, registration mode and redirects. [⌊Magic Link and Email OTP modal popup flows for passwordless WordPress login.⌉⌊ Magic Link and Email OTP modal popup flows for passwordless WordPress login.⌉[ Magic Link and Email OTP modal popup flows for passwordless WordPress login. ## FAQ ### Is VentraConnect secure? Yes. VentraConnect uses official OAuth flows for Social Login, WebAuthn for Passkeys, and email verification for Magic Link and Email OTP. Social provider passwords are never received or stored by your WordPress site. For Passkeys, the private key remains on the user’s device or authenticator; your WordPress site stores only the public credential data needed to verify future sign-ins. VentraConnect connects directly to enabled providers. There is no third-party proxy server in the middle and no additional tracking layer added by the plugin. ### Does this plugin replace passwords completely? In the **free plugin**, no. Classic WordPress username/password login remains available, while Social Login, Passkeys, Magic Link and Email OTP are optional methods you can enable or disable. In **VentraConnect Pro**, Password Phaseout controls let you decide how passwords are presented on supported forms: * **Off:** Keeps normal password login unchanged. * **Recommended:** Promotes modern sign-in methods while keeping passwords available. * **Strict:** Can hide password fields for normal users on supported forms while retaining an administrator fallback path. ### Can I use only one login method? Yes. VentraConnect does not require you to enable every available method. You can use one or more Social Login providers only, Email OTP only, Magic Link only, Passkeys only, or combine methods based on the login experience you want to offer. Standard WordPress username/password login can remain available. In VentraConnect Pro, Password Phaseout controls can also change how password login is presented on supported forms. ### Does it work with existing WordPress users? Yes. For Social Login, Magic Link and Email OTP, VentraConnect checks the verified email address. When it matches an existing WordPress user, that user is signed in and no duplicate account is created. For Passkeys, existing users can sign in on supported login forms using a Passkey already registered to their WordPress account. ### Does it create new user accounts? It can. Social Login, Magic Link and Email OTP can create new accounts when the email address does not already exist, depending on: * Each method’s **Login only** or **Login & Register** setting. * Your WordPress registration settings. * Your **Guardrails** configuration. Passkeys follow their own native registration flow. New users can create an account and register a Passkey from supported registration forms. ### Can I restrict who is allowed to create accounts? Yes. Guardrails let you control whether Social Login, Magic Link and Email OTP can create new WordPress users, particularly from the default `wp-login.php` screen. You can keep these methods available for existing-user login while sending new registrations through your own process, such as a custom registration page, LMS onboarding flow or membership signup process. Guardrails do not replace your normal WordPress registration settings and do not govern the separate Passkey registration flow. ### Can users register using Magic Link or Email OTP? Yes. Each method can run in: * **Login only** mode — available only to existing users. * **Login & Register** mode — new users can also sign up through Magic Link or Email OTP when WordPress registration is open and Guardrails allow new accounts. Normal WordPress registration continues to work in both cases. ### Does VentraConnect support Passkeys? Yes. The free plugin includes native Passkey login, registration and profile-based Passkey management on supported WordPress environments. Users can add and remove multiple Passkeys from their WordPress profile, allowing secure sign-in from more than one device. Passkey authentication uses WebAuthn and does not rely on an external passkey service. For the best coverage across devices, site owners can enable Magic Link or Email OTP alongside Passkeys as fallback sign-in options for older devices, restricted browsers or situations where a user’s Passkey is not available. VentraConnect Pro adds advanced Passkey placements and setup prompts for supported WooCommerce, LMS, membership and community integrations. ### Can I use Passkeys with Magic Link or Email OTP? Yes. VentraConnect lets you offer Passkeys alongside Magic Link and Email OTP. Passkeys provide fast passwordless sign-in on supported devices, while Magic Link and Email OTP can remain available as fallback options for users on older devices, restricted browsers or situations where their Passkey is not available. ### Do Passkeys work with Touch ID, Face ID, Windows Hello and security keys? VentraConnect uses WebAuthn, the browser standard for Passkeys. Users can sign in with supported device authenticators such as Touch ID, Face ID, Windows Hello, Android biometrics and compatible hardware security keys. Availability depends on the user’s browser, device and authenticator support. ### Does VentraConnect use an external Passkey service? No. Passkey authentication is handled natively through your WordPress site using WebAuthn. VentraConnect does not require a separate cloud passkey platform, proxy relay or third-party Passkey subscription. ### What data is stored from social providers and Passkeys? For Social Login, VentraConnect may store: * Provider user ID * Name * Email address * Avatar URL No provider passwords are stored, and access tokens are not stored as reusable login credentials. For Passkeys, VentraConnect stores the public credential information required to verify future Passkey sign-ins. The private key remains on the user’s device or authenticator. To display a detailed privacy notice on login or registration screens, use the ` ventraconnect_sl_privacy_notice_html` filter. ### How do Passkeys help WooCommerce stores? Passkeys help returning customers sign in without typing or resetting a password. On supported WooCommerce login and checkout experiences, customers can use a saved Passkey from their device, such as Face ID, Touch ID, Windows Hello or a security key. VentraConnect Pro can also encourage eligible logged-in customers to create a Passkey after checkout or on the Thank You page. Magic Link and Email OTP can remain enabled as passwordless fallback options for customers whose Passkey is unavailable. The result is a smoother returning-customer experience while giving store owners more control over account creation and login methods. ### Where do I get OAuth credentials? Links to each provider’s developer console are shown in the plugin settings. VentraConnect automatically generates the correct callback URL using WordPress ` admin-ajax.php`. Always copy the callback URL shown in the settings instead of manually creating your own. ### Will this slow down my site? VentraConnect only loads its frontend assets where login methods are displayed. OAuth, Passkey and passwordless requests run only when a user starts a login or registration flow. There are no external proxy calls or background requests added to normal page loads. ### Does it work with WooCommerce, LMS or membership plugins? The **free plugin** works on default WordPress login and registration screens, plus custom pages where you place the VentraConnect shortcode. **VentraConnect Pro** adds integrations for: * **WooCommerce:** Supported login, checkout, Thank You and My Account flows. * **LMS plugins:** Tutor LMS, LearnDash, LifterLMS and LearnPress. * **Membership and community plugins:** MemberPress, Ultimate Member, Paid Memberships Pro, Paid Membership Subscriptions (PMS) and BuddyPress. Supported Pro integrations provide context-aware Social Login, Magic Link, Email OTP and advanced Passkey placements where appropriate. ### Can I add login methods to custom pages or custom login screens? Yes. The free plugin provides a shortcode for custom pages, page builders and custom login layouts. Social Login, Passkeys, Magic Link and Email OTP can appear through the main VentraConnect shortcode on your WordPress site. Pro adds integration-aware placements and inline Magic Link / Email OTP forms for advanced layouts. ### Do you offer a Pro version? Yes. [VentraConnect Pro](https://wpventra.com/pricing/) is an optional add-on for sites that need: * Deep WooCommerce, LMS, membership and community integrations. * Advanced Passkey placements, setup prompts and account-management experiences. * Password Phaseout controls for supported forms. * Advanced redirect controls. * Custom-branded authentication emails. * Inline Magic Link and Email OTP forms. * Analytics, diagnostics and additional login insights. The free plugin already includes Social Login with 15+ providers, native Passkeys, Guardrails, Magic Link and Email OTP on core WordPress login and registration screens, plus custom pages using the shortcode. ### Does VentraConnect include inline Magic Link and Email OTP forms? Yes. VentraConnect Pro includes inline Magic Link and Email OTP form shortcodes for custom pages, Elementor popups, account dropdowns, WooCommerce account popups, membership login pages, LMS login pages and custom login layouts. The free plugin displays Magic Link and Email OTP as login method buttons through the main VentraConnect shortcode and supported standard login flows. These buttons open the normal VentraConnect passwordless flow. Pro inline forms place the actual Magic Link or Email OTP form directly inside your layout, allowing users to request a Magic Link or enter an Email OTP without first opening a separate modal. Available Pro inline shortcodes: ``` [ventraconnect_magic_link_form] [ventraconnect_email_otp_form] ``` Inline forms use your existing VentraConnect settings for expiry, resend behavior, registration mode, Guardrails, email validation, rate limits and redirects. Setup guide: https://wpventra.com/docs/inline-magic-link-email-otp-forms/ ### Can I customize authentication emails? Yes. In the free plugin, you can edit the sender name, subject and message content for Magic Link and Email OTP emails. VentraConnect also includes polished default HTML email templates for both methods. In VentraConnect Pro, you can apply your own logo, accent colour and footer text to Magic Link, Email OTP and Passkey registration emails. ## Reviews ![](https://secure.gravatar.com/avatar/98703d06d4de5c9c27e8bfcce93f351f000980ab2ae4e8030f6be3d3edd94429? s=60&d=retro&r=g) ### 󠀁[Made logins much easier for my users](https://wordpress.org/support/topic/made-logins-much-easier-for-my-users/)󠁿 [velowp](https://profiles.wordpress.org/velowp/) 26 April 2026 I was using a separate social login plugin before, but still had a few headaches with users forgetting passwords and needing resets. Switched to VentraConnect and setup was pretty straightforward. I’m now using Google login plus Magic Link, and it’s made the login process much smoother for users. I like that social login and passwordless login are handled in one plugin instead of having to piece things together. Less hassle for users, fewer login issues for me. ![](https://secure.gravatar.com/avatar/292a64a830cfb170d5e512753077762507b516c203f6943904eae5ba67dbc1c0? s=60&d=retro&r=g) ### 󠀁[Clean Social Login With Built-In Guardrails](https://wordpress.org/support/topic/clean-social-login-with-built-in-guardrails/)󠁿 [ayaanatif](https://profiles.wordpress.org/ayaanatif/) 3 February 2026 If you want social login but don’t want random people creating junk accounts. The guardrails feature is super handy, the settings are easy to follow, and the UI looks clean. Everything’s been working smoothly for me so far. ![](https://secure.gravatar.com/avatar/e847dd79816eedca51893c1ade3150be6db5537ce7f9ba78250e6d3123763a96? s=60&d=retro&r=g) ### 󠀁[Easy to Use Social Login Plugin](https://wordpress.org/support/topic/easy-to-use-social-login-plugin/)󠁿 [haris092](https://profiles.wordpress.org/haris092/) 28 January 2026 Simple and effective social login plugin. Setup was quick and everything worked without issues. [ Read all 3 reviews ](https://wordpress.org/support/plugin/ventraconnect-social-login/reviews/) ## Contributors and Developers “Social Login, Passkeys, Magic Link & Email OTP – Passwordless Login by VentraConnect” is open source software. The following people have contributed to this plugin. Contributors * [ Fahad Aslam ](https://profiles.wordpress.org/fahdaslam/) * [ WP Ventra ](https://profiles.wordpress.org/wpventra/) [Translate “Social Login, Passkeys, Magic Link & Email OTP – Passwordless Login by VentraConnect” into your language.](https://translate.wordpress.org/projects/wp-plugins/ventraconnect-social-login) ### Interested in development? [Browse the code](https://plugins.trac.wordpress.org/browser/ventraconnect-social-login/), check out the [SVN repository](https://plugins.svn.wordpress.org/ventraconnect-social-login/), or subscribe to the [development log](https://plugins.trac.wordpress.org/log/ventraconnect-social-login/) by [RSS](https://plugins.trac.wordpress.org/log/ventraconnect-social-login/?limit=100&mode=stop_on_copy&format=rss). ## Change Log #### 1.4.6 * Security: Strengthened OAuth state validation and account-linking authorization. * Security: Prevented unauthorized social account linking and identity reassignment. * Fixed: Improved OAuth callback session handling for Microsoft and TikTok. #### 1.4.5 * Minor improvements and maintenance. #### 1.4.4 * Security: Require an explicit trusted verified-email signal before matching a new social provider subject to an existing WordPress user by email. #### 1.4.3 * Security: Hardened public Passkey registration responses to reduce account-status disclosure. #### 1.4.2 * Fix: Improved shortcode compatibility in supported login page configurations. #### 1.4.1 * Security: Hardened Email OTP verification with improved failed-attempt handling, verification throttling, secure OTP storage, and invalidation of previous codes when a new code is issued. * Security: Revoked legacy active Email OTP codes on update. * Props to Pedro Pinho for responsibly reporting this issue through WPScan. #### 1.4.0 **Major release: Native Passkeys and advanced authentication integrations.** * New: Added native Passkey login and registration for supported WordPress login and registration flows. * New: Added WebAuthn-based Passkey authentication without requiring an external passkey platform or proxy service. * New: Added Passkey management in the WordPress profile, allowing users to add and remove multiple Passkeys. * New: Added Passkey support to the main VentraConnect shortcode for custom login pages. * New: VentraConnect Pro now includes advanced Passkey placements for supported WooCommerce, LMS, membership and community flows. * New: Added WooCommerce Passkey login and optional setup prompts on supported checkout, Thank You and My Account experiences. * New: Added Tutor LMS and Paid Membership Subscriptions (PMS) integrations in VentraConnect Pro. * Improved: Passkeys now work alongside existing Magic Link and Email OTP methods, giving site owners optional fallback sign-in choices when a Passkey is unavailable. * Improved: Renamed Passwordless Mode to Password Phaseout across the admin interface and documentation. * Improved: Passkeys now count as an available method in Password Phaseout safety checks and readiness guidance. * Improved: Updated compact button layouts so Passkey, Magic Link and Email OTP remain full-width while social providers can use compact layouts. * Improved: Updated Pro Passkey settings, button styling, admin preview and floating setup-panel controls. * Security: Strengthened validation, escaping and compatibility checks across the plugin, with additional WordPress.org compliance improvements. * Tweak: Updated plugin title, listing copy and readme content to reflect Social Login, Passkeys, Magic Link and Email OTP. #### 1.3.1 * New: Added polished default HTML email templates for Magic Link and Email OTP. * Improvement: Magic Link emails now include a styled sign-in button and visible raw-link fallback. * Improvement: OTP emails now use a clearer code-focused layout. * Compatibility: Pro users can now apply logo, accent color, and footer branding to Magic Link and OTP emails. #### 1.2.1 * Fix: Corrected the plugin version display on the Support & Resources tab. * Tweak: Improved translation support for provider sidebar labels in admin. * Tweak: Minor internal code cleanup. #### 1.2.0 * New: Magic Link and Email OTP passwordless login are now available in the free plugin on core WordPress login/registration screens and shortcode-based login pages. * Improved: Added per-method redirect overrides for Magic Link and Email OTP (same page, referer, homepage, custom URL), with stronger redirect validation. * Security: Hardened redirect handling and clarified how default redirect URLs interact with passwordless overrides. * Tweak: Updated readme and UI labels to reflect the new Free vs Pro split. #### 1.1.0 * Improved: Unified account guardrail checks into a shared helper so social login behaves more consistently across core WordPress login screens and WooCommerce My Account (pro). * Improved: The `ventraconnect_sl_can_create_user` filter is now applied in a single place before any new account is created, making it easier to customise or lock down account creation rules. * Tweak: Internal refactors to the guardrail system to better support Pro-only passwordless login methods, without changing behaviour for sites using the free plugin only. #### 1.0.5 * Security: Hardened validation, escaping and capability checks around social login flows and settings pages in line with WordPress.org review feedback. * Security: Reduced or removed debug output and ensured sensitive data is not exposed in logs by default. * Tweak: Minor internal code cleanups to better align with WordPress.org plugin guidelines. #### 1.0.4 * Tweak: Updated readme and plugin listing copy to clarify Free vs Pro features and improve discoverability. No functional changes. #### 1.0.3 * New: Account guardrail option to allow or block new user creation on core WordPress login/registration screens when using social login. * New: Email notifications for admin and user when a new account is created via social login. * Tweak: UI and settings layout improvements in the admin. * Tweak: Confirmed compatibility with WordPress 6.9. #### 1.0.2 * Fix: Prevent rare “Class VentraConnect\SocialLogin\Providers\Facebook not found” fatal on some hosting environments. #### 1.0.1 * Fix: Shortcode `redirect_to` parameter is now respected and no longer overridden by the global redirect setting. * Fix: Default login vs registration redirect URLs are applied correctly after social login. * Fix: Redirects are now more reliable when HOME/SITEURL or www/non-www hosts differ. * Tweak: Hardened OAuth callback/state handling to make popup and REST-based flows more robust. #### 1.0.0 * Initial release. ## Meta * Version **1.4.6** * Last updated **12 hours ago** * Active installations **100+** * WordPress version ** 6.2 or higher ** * Tested up to **7.1.3** * PHP version ** 7.4 or higher ** * Language * [English (US)](https://wordpress.org/plugins/ventraconnect-social-login/) * Tags * [Email OTP](https://en-gb.wordpress.org/plugins/tags/email-otp/)[magic link](https://en-gb.wordpress.org/plugins/tags/magic-link/) [passkeys](https://en-gb.wordpress.org/plugins/tags/passkeys/)[passwordless login](https://en-gb.wordpress.org/plugins/tags/passwordless-login/) [social login](https://en-gb.wordpress.org/plugins/tags/social-login/) * [Advanced View](https://en-gb.wordpress.org/plugins/ventraconnect-social-login/advanced/) ## Ratings 5 out of 5 stars. * [ 3 5-star reviews ](https://wordpress.org/support/plugin/ventraconnect-social-login/reviews/?filter=5) * [ 0 4-star reviews ](https://wordpress.org/support/plugin/ventraconnect-social-login/reviews/?filter=4) * [ 0 3-star reviews ](https://wordpress.org/support/plugin/ventraconnect-social-login/reviews/?filter=3) * [ 0 2-star reviews ](https://wordpress.org/support/plugin/ventraconnect-social-login/reviews/?filter=2) * [ 0 1-star reviews ](https://wordpress.org/support/plugin/ventraconnect-social-login/reviews/?filter=1) [Your review](https://wordpress.org/support/plugin/ventraconnect-social-login/reviews/#new-post) [See all reviews](https://wordpress.org/support/plugin/ventraconnect-social-login/reviews/) ## Contributors * [ Fahad Aslam ](https://profiles.wordpress.org/fahdaslam/) * [ WP Ventra ](https://profiles.wordpress.org/wpventra/) ## Support Got something to say? Need help? [View support forum](https://wordpress.org/support/plugin/ventraconnect-social-login/)