Social Login, Passkeys, Magic Link & Email OTP – Passwordless Login by VentraConnect

Yes. VentraConnect uses official OAuth flows for Social Login, WebAuthn for Passkeys, and email verification for Magic Link and Email OTP.

Social provider passwords are never received or stored by your WordPress site. For Passkeys, the private key remains on the user’s device or authenticator; your WordPress site stores only the public credential data needed to verify future sign-ins.

VentraConnect connects directly to enabled providers. There is no third-party proxy server in the middle and no additional tracking layer added by the plugin.

In the free plugin , no. Classic WordPress username/password login remains available, while Social Login, Passkeys, Magic Link and Email OTP are optional methods you can enable or disable.

In VentraConnect Pro , Password Phaseout controls let you decide how passwords are presented on supported forms:

• Off: Keeps normal password login unchanged.
• Recommended: Promotes modern sign-in methods while keeping passwords available.
• Strict: Can hide password fields for normal users on supported forms while retaining an administrator fallback path.

Yes. VentraConnect does not require you to enable every available method.

You can use one or more Social Login providers only, Email OTP only, Magic Link only, Passkeys only, or combine methods based on the login experience you want to offer.

Standard WordPress username/password login can remain available. In VentraConnect Pro, Password Phaseout controls can also change how password login is presented on supported forms.

Yes.

For Social Login, Magic Link and Email OTP, VentraConnect checks the verified email address. When it matches an existing WordPress user, that user is signed in and no duplicate account is created.

For Passkeys, existing users can sign in on supported login forms using a Passkey already registered to their WordPress account.

It can.

Social Login, Magic Link and Email OTP can create new accounts when the email address does not already exist, depending on:

• Each method’s Login only or Login & Register setting.
• Your WordPress registration settings.
• Your Guardrails configuration.

Passkeys follow their own native registration flow. New users can create an account and register a Passkey from supported registration forms.

Yes. Guardrails let you control whether Social Login, Magic Link and Email OTP can create new WordPress users, particularly from the default wp-login.php screen.

You can keep these methods available for existing-user login while sending new registrations through your own process, such as a custom registration page, LMS onboarding flow or membership signup process.

Guardrails do not replace your normal WordPress registration settings and do not govern the separate Passkey registration flow.

Yes. Each method can run in:

• Login only mode — available only to existing users.
• Login & Register mode — new users can also sign up through Magic Link or Email OTP when WordPress registration is open and Guardrails allow new accounts.

Normal WordPress registration continues to work in both cases.

Yes. The free plugin includes native Passkey login, registration and profile-based Passkey management on supported WordPress environments.

Users can add and remove multiple Passkeys from their WordPress profile, allowing secure sign-in from more than one device. Passkey authentication uses WebAuthn and does not rely on an external passkey service.

For the best coverage across devices, site owners can enable Magic Link or Email OTP alongside Passkeys as fallback sign-in options for older devices, restricted browsers or situations where a user’s Passkey is not available.

VentraConnect Pro adds advanced Passkey placements and setup prompts for supported WooCommerce, LMS, membership and community integrations.

Yes. VentraConnect lets you offer Passkeys alongside Magic Link and Email OTP.

Passkeys provide fast passwordless sign-in on supported devices, while Magic Link and Email OTP can remain available as fallback options for users on older devices, restricted browsers or situations where their Passkey is not available.

VentraConnect uses WebAuthn, the browser standard for Passkeys. Users can sign in with supported device authenticators such as Touch ID, Face ID, Windows Hello, Android biometrics and compatible hardware security keys.

Availability depends on the user’s browser, device and authenticator support.

No. Passkey authentication is handled natively through your WordPress site using WebAuthn. VentraConnect does not require a separate cloud passkey platform, proxy relay or third-party Passkey subscription.

For Social Login, VentraConnect may store:

• Provider user ID
• Name
• Email address
• Avatar URL

No provider passwords are stored, and access tokens are not stored as reusable login credentials.

For Passkeys, VentraConnect stores the public credential information required to verify future Passkey sign-ins. The private key remains on the user’s device or authenticator.

To display a detailed privacy notice on login or registration screens, use the ventraconnect_sl_privacy_notice_html filter.

Passkeys help returning customers sign in without typing or resetting a password. On supported WooCommerce login and checkout experiences, customers can use a saved Passkey from their device, such as Face ID, Touch ID, Windows Hello or a security key.

VentraConnect Pro can also encourage eligible logged-in customers to create a Passkey after checkout or on the Thank You page. Magic Link and Email OTP can remain enabled as passwordless fallback options for customers whose Passkey is unavailable.

The result is a smoother returning-customer experience while giving store owners more control over account creation and login methods.

Links to each provider’s developer console are shown in the plugin settings.

VentraConnect automatically generates the correct callback URL using WordPress admin-ajax.php . Always copy the callback URL shown in the settings instead of manually creating your own.

VentraConnect only loads its frontend assets where login methods are displayed. OAuth, Passkey and passwordless requests run only when a user starts a login or registration flow.

There are no external proxy calls or background requests added to normal page loads.

The free plugin works on default WordPress login and registration screens, plus custom pages where you place the VentraConnect shortcode.

VentraConnect Pro adds integrations for:

• WooCommerce: Supported login, checkout, Thank You and My Account flows.
• LMS plugins: Tutor LMS, LearnDash, LifterLMS and LearnPress.
• Membership and community plugins: MemberPress, Ultimate Member, Paid Memberships Pro, Paid Membership Subscriptions (PMS) and BuddyPress.

Supported Pro integrations provide context-aware Social Login, Magic Link, Email OTP and advanced Passkey placements where appropriate.

Yes. The free plugin provides a shortcode for custom pages, page builders and custom login layouts.

Social Login, Passkeys, Magic Link and Email OTP can appear through the main VentraConnect shortcode on your WordPress site. Pro adds integration-aware placements and inline Magic Link / Email OTP forms for advanced layouts.

Yes. VentraConnect Pro is an optional add-on for sites that need:

• Deep WooCommerce, LMS, membership and community integrations.
• Advanced Passkey placements, setup prompts and account-management experiences.
• Password Phaseout controls for supported forms.
• Advanced redirect controls.
• Custom-branded authentication emails.
• Inline Magic Link and Email OTP forms.
• Analytics, diagnostics and additional login insights.

The free plugin already includes Social Login with 15+ providers, native Passkeys, Guardrails, Magic Link and Email OTP on core WordPress login and registration screens, plus custom pages using the shortcode.

Yes. VentraConnect Pro includes inline Magic Link and Email OTP form shortcodes for custom pages, Elementor popups, account dropdowns, WooCommerce account popups, membership login pages, LMS login pages and custom login layouts.

The free plugin displays Magic Link and Email OTP as login method buttons through the main VentraConnect shortcode and supported standard login flows. These buttons open the normal VentraConnect passwordless flow.

Pro inline forms place the actual Magic Link or Email OTP form directly inside your layout, allowing users to request a Magic Link or enter an Email OTP without first opening a separate modal.

Available Pro inline shortcodes:

[ventraconnect_magic_link_form] [ventraconnect_email_otp_form]

Inline forms use your existing VentraConnect settings for expiry, resend behavior, registration mode, Guardrails, email validation, rate limits and redirects.

Setup guide: https://wpventra.com/docs/inline-magic-link-email-otp-forms/

Yes.

In the free plugin, you can edit the sender name, subject and message content for Magic Link and Email OTP emails. VentraConnect also includes polished default HTML email templates for both methods.

In VentraConnect Pro, you can apply your own logo, accent colour and footer text to Magic Link, Email OTP and Passkey registration emails.