progenyplugins

Latchkey

Log in by email link - links that work once and expire, that mail scanners cannot use up, and one-click links you make for a client.

For membership, course and client-portal sites whose people forget passwords.

passwordlessmagic linkloginemail loginone-click login
What it does

Inside Latchkey

"Email me a login link instead" on the login screen, and [latchkey] on any page.

Works once, for 15 minutes (5 to 60, your choice). A newer email replaces an older one.

Mail scanners cannot use it up

Outlook, company mail filters and antivirus programs open links to check them; a link opens a page with a "Log in" button, and only the press logs in.

Nobody can find out who has an account

every address gets the same answer.

Asking too often is refused

three times in 15 minutes per address, ten an hour per computer.

Same browser only , if you want it: the link only opens where it was asked for.

Roles that must keep their password - administrators, by default.

One-click links for a client , made on their profile: open for 1 to 30 days, once or any number of times, with a note. Cancel any link there.

What it needs

Before you start

WordPress 6.0 or newerPHP 7.4 or newer
Questions

Asked first

The email does not arrive

Latchkey sends through WordPress's own mail. If password-reset emails do not arrive either, the site needs an SMTP plugin.

Is a link as safe as a password?

Anyone who can read the person's email can already reset their password, so a short, single-use link adds no new way in. Keep administrators on passwords (the default) if you want them out of it entirely.