Social Login, Magic Link & Email OTP – Passwordless Login by VentraConnect

FAQ

Is VentraConnect Social Login secure?

Yes. VentraConnect uses the official OAuth authentication flows provided by each social network.
User credentials are never shared with or stored by your WordPress site. Authentication is handled directly by the provider, and only basic profile data is returned after successful login.

VentraConnect connects directly to each provider — there is no third-party proxy server in the middle and no extra tracking layer added by the plugin.

Does this plugin replace passwords completely?

In the free plugin, no. The classic WordPress username/password login remains available and Social Login, Magic Link and Email OTP are optional login methods you can enable or disable. Users can always fall back to their normal password login.

In the Pro add-on, you also get a Passwordless Mode control (Off, Recommended, Strict) that lets you make passwordless the primary login on supported forms, or hide password fields for normal users while still keeping an emergency password login path for site owners.

Does it work with existing WordPress users?

Yes. If a login method (Social Login, Magic Link or Email OTP) comes in with an email address that matches an existing user, VentraConnect links that method to the existing WordPress user and logs them in. It does not create duplicate accounts for the same email.

Does it create new user accounts?

It can. When the email address does not exist yet, VentraConnect can create a new WordPress user – depending on:

• Your passwordless settings for each method (Login only vs Login & Register), and
• Your Guardrails settings (whether new accounts are allowed via these methods).

If Guardrails says “no new accounts” then Social Login, Magic Link and Email OTP can still log existing users in, but cannot create new users.

Can I restrict who is allowed to register or create accounts?

Yes. Guardrails let you control whether VentraConnect is allowed to create new users via Social Login, Magic Link and Email OTP – especially from the default wp-login.php screen.

You can keep those methods for login only and push new registrations through your own process (for example a custom registration page, LMS onboarding, or membership signup flow).

Can users register using Magic Link or Email OTP?

Yes, if you want. Each passwordless method can run in:

• Login only mode – passwordless is used only for existing users, or
• Login & Register mode – new users can also sign up via Magic Link / Email OTP when registration is open and Guardrails allow new accounts.

Normal WordPress registration continues to work in both cases.

What data is stored from social providers?

Only:

• Provider user ID
• Name
• Email address
• Avatar URL

No passwords are saved, and access tokens are not stored as login credentials.

If you want to display a detailed privacy notice on your login/registration screens, you can use the ventraconnect_sl_privacy_notice_html filter.

Where do I get OAuth credentials?

Links to each provider’s developer console are shown in the plugin settings.

VentraConnect automatically generates the correct callback URL using WordPress admin-ajax.php. Always copy the callback URL shown in the settings instead of hard-coding your own.

Will this slow down my site?

No. The plugin only loads its assets where login buttons are displayed, and OAuth / passwordless requests run only during login. There are no external proxy calls or background requests added to normal page loads.

Does it work with WooCommerce, LMS or membership plugins?

The free plugin works wherever the default WordPress login/registration forms are used, plus any custom page where you place the shortcode.

The Pro add-on adds deep integrations for WooCommerce (login, checkout and My Account), LMS plugins (LearnDash, LifterLMS, LearnPress) and membership/community plugins (MemberPress, Ultimate Member, Paid Memberships Pro, BuddyPress). These integrations respect Guardrails, support account linking from profile screens, and include context-based shortcodes to place login exactly where it makes sense in those flows.

Can I add login to custom pages or custom login screens?

Yes. The free plugin provides a shortcode that you can use on custom pages, in page builders and on custom login pages. As long as the page is part of your WordPress site and renders the shortcode, Social Login + Magic Link + Email OTP will work there.

Do you offer a Pro version?

Yes. VentraConnect Social Login Pro is an optional add-on for sites that need:

• Deep WooCommerce, LMS and membership/community integrations
• Passwordless Mode (Off, Recommended, Strict) to make passwordless primary on supported forms
• Advanced redirect control
• Analytics and additional diagnostics

The free plugin already includes Social Login (15+ providers), Guardrails and passwordless login (Magic Link + Email OTP) on core WordPress login/registration screens and any custom pages where you place the shortcode. Pro lets you extend the same login foundation into WooCommerce, LMS course flows and membership registration/account screens, instead of juggling multiple separate plugins.

Does VentraConnect support passkeys?

Not yet. VentraConnect currently supports Social Login, Magic Link, Email OTP and Guardrails.

Passkey support is on the roadmap as a future VentraConnect add-on. The planned direction is to connect passkey login with the existing VentraConnect ecosystem, including Magic Link and Email OTP fallback options.

View the passkeys roadmap

Does VentraConnect include inline Magic Link and Email OTP forms?

Yes. VentraConnect Pro includes inline Magic Link and Email OTP form shortcodes for custom pages, Elementor popups, account dropdowns, WooCommerce account popups, membership login pages, LMS login pages, and other custom login layouts.

The free plugin can show Magic Link and Email OTP as login method buttons through the main VentraConnect shortcode and supported standard login flows. Those buttons open the normal VentraConnect passwordless modal flow.

VentraConnect Pro inline forms work differently. They place the actual Magic Link or Email OTP form directly inside your layout, so users can request a Magic Link or enter an Email OTP without first clicking a separate “Continue with Magic Link” or “Continue with Email OTP” button.

Available Pro inline shortcodes:

[ventraconnect_magic_link_form]

[ventraconnect_email_otp_form]

Inline forms use your existing VentraConnect settings for expiry, resend behavior, registration mode, Guardrails, email validation, rate limits, and redirects.

Setup guide:
https://wpventra.com/docs/inline-magic-link-email-otp-forms/

Can I customize Magic Link and Email OTP emails?

Yes.

In the free plugin, you can edit the sender name, subject, and message content for Magic Link and Email OTP emails. VentraConnect also includes polished default HTML email templates for both methods, with a clear sign-in button for Magic Link and a code-focused layout for Email OTP.

In the Pro add-on, you can also brand those emails with your own logo, accent color, and footer text.