View Categories

Magic Link – passwordless from the inbox

8 min read

Magic Link Setup Guide - VentraConnect Documentation

Magic Link lets users log in or sign up with a one-time link sent to their email. No password fields are required on the form.

This article covers:

  • How to enable Magic Link
  • Login vs signup behaviour
  • Security options (expiry, same-IP, attempts)
  • Redirects after login
  • Email template and test tools
1

Enable Magic Link

  1. Go to VentraConnect Social Login → Passwordless Mode.
  2. In the sidebar, click Magic Link.
  3. Turn the Active toggle On.
  4. Click Save Changes.

This enables Magic Link as an available login method wherever passwordless is supported (WordPress login, WooCommerce, memberships, LMS, comments, depending on what you've enabled).

2

Choose Login and Signup Behaviour

In the Magic Link settings screen you'll see Login & signup mode, which controls whether Magic Link can:

Log in existing users only
Magic Link will only work for users who already have accounts. Good for closed communities.
Allow new account creation
Magic Link can create new accounts where you normally allow registrations. Good for most WooCommerce / membership sites.
Follow global Passwordless mode rules
Use the global passwordless settings configured elsewhere.

Pick the option that matches your site:

  • For most WooCommerce / membership sites, allow Magic Link to create new accounts where you normally allow registrations
  • For closed communities, restrict Magic Link to existing users only
3

Configure Security: Expiry, Resend, Attempts, IP

Key fields on the Magic Link settings screen:

Link expiry (minutes)
How long the link is valid once issued.
Typical range: 10–30 minutes
Resend throttle (sec)
Minimum seconds between repeated sends to the same email address.
Max attempts
How many times a user can try to consume the same link before it's locked.
Same-IP enforcement (optional)
When enabled, the link can only be used from the same IP that requested it.
This is a stricter security option for high-risk sites.
Disable it if your users commonly change networks between checking email and logging in (e.g. mobile vs Wi-Fi).

Magic Link links are always:

  • Single-use - Once successfully used, they can't be used again
  • Expiry-bounded - Once the expiry time passes, the link is marked as expired
4

Set Redirects for Magic Link

By default, Magic Link respects your global redirect rules and per-integration settings (WooCommerce, memberships, LMS).

You can optionally override this on the Magic Link settings screen under Redirect override:

  • Return to previous page - Send users back where they started
  • Send to homepage - Redirect to site homepage
  • Custom URL - e.g. /my-account/ or /dashboard/

If you leave it as "None", Magic Link follows:

  • The global redirect settings in Settings → Redirects & Security
  • Any plugin-specific redirect rules (WooCommerce, etc.)
5

Customize the Magic Link Email

In the Email settings section:

Email subject
Subject line for Magic Link emails
Email body
HTML/text template

You can use placeholders such as:

  • {magic_link} - The one-time login URL
  • {site_name} - Your site's name
  • {user_email} - The email address the link was sent to
  • {expires_in} - Expiry time in minutes

Write clear copy that:

  • Explains this is a one-time link
  • Mentions the expiry time
  • Warns users not to forward the email
Example skeleton:
Hi {user_email},

Use the button below to log in to {site_name}. This link works once and expires in {expires_in} minutes.

[Log in now]

If you didn't request this email, you can ignore it.
6

Preview & Test Magic Link

At the bottom of the Magic Link settings page:

Testing steps:

  • Use the Preview & test section
  • Make sure the button label looks correct (e.g. "Continue with Magic Link")
  • Use the "Send test email" option to send yourself a Magic Link
  • Open the email on a normal browser and click the link
  • Confirm you are logged in
  • Confirm you're redirected to the expected page
  • Try using the same link again - confirm it shows as expired

If anything fails, check:

  • Email deliverability (SPF/DKIM, SMTP plugin, etc.)
  • The Diagnostics & Tools tab for errors
  • The OTP/Magic Link troubleshooting doc

Powered by BetterDocs

Let’s Review Your Site

[forminator_form id="1673"]