The update introduces Friendly Captcha integration, improves privacy by loading fonts locally, and adds several hardening and abuse-prevention improvements to the login system.

If you run a membership site, WooCommerce store, or any site using passwordless login, Magic Login Pro 2.7 helps make login flows more reliable while maintaining the smooth user experience that magic links are known for.

What’s New in Magic Login Pro 2.7

Magic Login Pro 2.7 includes improvements in three main areas:

• Friendly Captcha support for modern spam protection
• Privacy improvements through local asset loading
• Security hardening and abuse prevention for login flows

These updates help keep your WordPress passwordless login plugin reliable in real-world environments where login forms often face automated abuse attempts.

Friendly Captcha Support for Spam Protection

Magic Login Pro 2.7 introduces support for Friendly Captcha, a privacy-focused CAPTCHA solution designed to block automated abuse without relying on invasive tracking.

This provides site owners with another modern option for protecting login and registration flows. It is now available as an additional spam protection option alongside the existing captcha integrations supported by Magic Login.

Improved Privacy with Local Font Loading

Magic Login Pro now loads its fonts locally instead of relying on remote font delivery.

Previously, fonts could be served via a CDN (admin settings only). With version 2.7, the plugin serves these assets directly from the site itself.

This change helps improve:

• Privacy and GDPR-conscious deployments
• Reliability when external resources are blocked
• Consistency in login page asset loading

For site owners who prioritize privacy-friendly WordPress setups, this update reduces external dependencies in the login experience.

Security Hardening and Abuse Prevention

In addition to the visible improvements, Magic Login Pro 2.7 also includes several security hardening updates to strengthen passwordless login flows.

These updates are designed to improve resilience against automated abuse while keeping login experiences smooth for legitimate users.

Improvements in this release

• Added nonce validation for AJAX-based login requests
• Added final redirect validation for both standard and AJAX login flows
• Improved randomness used for generated email login codes
• Added a per-user safeguard to limit repeated login emails

To help prevent automated abuse, a safe hourly limit of 60 login emails per user is now applied by default.

These measures help ensure secure magic login links remain reliable even on high-traffic sites where login systems may be targeted by bots or automated tools.

Why This Matters for WordPress Site Owners

Passwordless authentication continues to gain popularity because it simplifies login experiences and removes password friction for users.

However, real-world login systems must also address challenges such as:

• Automated login abuse
• CAPTCHA compatibility with dynamic forms
• Privacy and external asset dependencies
• Secure redirect handling

Magic Login Pro 2.7 helps address these concerns while keeping the user experience simple.

For WooCommerce stores, membership sites, communities, and SaaS-style WordPress applications, these improvements help ensure your login system stays:

• Easy for users
• Reliable across AJAX login flows
• Better protected against automated abuse
• More privacy-conscious

Update to Magic Login Pro 2.7

If you’re already using Magic Login Pro, we recommend updating to Magic Login Pro 2.7 to benefit from the latest improvements in spam protection, privacy, and login reliability.

You can update directly from your WordPress dashboard or download the latest version from your account.

If you’ve been looking for a simple way to use Deepgram Text-to-Speech in WordPress, this release removes the complexity and delivers a clean, native integration directly inside your dashboard.

Add Deepgram to WordPress in Minutes

With version 2.4, Deepgram is now available as a built-in Text-to-Speech provider.

Getting started is simple:

1. Update to Easy Text-to-Speech Pro 2.4
2. Enter your Deepgram API key
3. Select Deepgram as your TTS provider
4. Start generating AI voice instantly

That’s it.

This update turns Deepgram WordPress integration into a plug-and-play experience.

Why Use Deepgram for WordPress Text-to-Speech?

Deepgram is known for delivering high-quality, natural-sounding AI voice output.

By enabling Deepgram inside WordPress, you unlock:

• More natural and expressive speech
• Improved clarity and pronunciation
• Fast and reliable API performance
• Greater flexibility in your AI voice stack

If audio quality matters to your content strategy, Deepgram brings a noticeable upgrade to your WordPress text-to-speech experience.

More Than Just a New Provider

This release isn’t just about adding Deepgram.

It’s about making AI-powered voice in WordPress more accessible, more flexible, and more scalable.

You now have:

• Greater control over your voice provider
• The ability to optimize for quality or performance
• A future-ready WordPress AI audio stack

Also Included in Version 2.4

• Routine dependency updates
• Internal optimizations
• Stability improvements

Ready to Use Deepgram in WordPress?

If you’ve been searching for a reliable way to integrate Deepgram with WordPress, Easy Text-to-Speech Pro 2.4 makes it effortless.

Update today and unlock a new level of AI voice capabilities for your WordPress site.

This is not a new version of Magic Login and not an add-on to an existing product. Accessibility Magic is a completely separate plugin, built from scratch, and it’s now officially available on WordPress.org.

A New Free WordPress Accessibility Plugin

Accessibility Magic adds a lightweight, unobtrusive accessibility widget to the frontend of your WordPress site. It allows visitors to adjust visual and readability settings based on their own needs, without affecting your site’s layout, theme, or content structure.

All adjustments happen on the visitor’s side, making it easy to offer a more inclusive browsing experience without complex configuration or heavy overhead.

What Accessibility Magic Does

Accessibility Magic allows visitors to personalize how your website looks and feels. Features include:

• Text size and readability adjustments
• Contrast and visual clarity options
• Reduced visual strain for longer reading sessions
• User-controlled accessibility preferences
• Frontend-only behavior that doesn’t interfere with your theme

The goal is simple: make your site easier to use for more people.

Accessibility Magic vs Accessibility Toolkit

Accessibility Magic is free and available on WordPress.org. It’s ideal for most websites that want to offer basic accessibility controls without complexity.

For users who need more advanced options, extended controls, or deeper customization, we also offer Accessibility Toolkit.

In short:

• Accessibility Magic → free, lightweight, and easy to use
• WP Accessibility Toolkit → advanced features and extended control

Both follow the same philosophy: practical, user-first accessibility tools.

Important Notes About Accessibility Compliance

Accessibility Magic helps users customize the presentation of your site, but it does not automatically make a website fully WCAG or ADA compliant.

True accessibility still depends on:

• Accessible themes
• Semantic HTML
• Proper content structure
• Ongoing testing and improvements

Accessibility Magic should be seen as a supporting layer, not a compliance guarantee.

Download Accessibility Magic

Accessibility Magic is available now on WordPress.org, completely free. If you’re looking to improve usability, offer visitors more control, and take a practical step toward accessibility, we invite you to give it a try.

Here’s to a more inclusive web — and to starting the year with a little magic

What’s New in PaddlePress PRO 2.7

Changelog Archive for Digital Products

Managing product updates just got easier. With PaddlePress PRO 2.7, your customers can now view a full changelog archive for each of your digital products. This makes it easier to showcase product history, build trust, and keep your users informed about what’s new.

If you’ve enabled it, just make sure the “Enable Changelog” option is checked. This update also updates the URLs for WordPress products, so when users receive auto-update emails, they’ll be directed to the exact changelog page for that product.

Smarter Readme Parsing

We’ve improved the readme parser to handle additional custom headers like “WC Tested Up To.” This ensures your products work seamlessly with WooCommerce-related plugins and other third-party integrations.

Other Improvements

Along with these key features, PaddlePress PRO 2.7 includes:

• The “Last Updated” now uses the post’s publish date instead of the modified date, ensuring consistent and predictable update data for API responses.
• Updated dependencies for better stability.
• Minor improvements and fixes to keep everything running smoothly.

Update Today

If you’re already using PaddlePress PRO, update to version 2.7 from your WordPress dashboard or download the latest build from your account.

Build Seamless Login & Registration Forms with Elementor

With Magic Login PRO 2.6, you can now add Magic Login and Registration forms as Elementor widgets, no need to manually place shortcodes. These widgets work similarly to our shortcode implementation behind the scenes, ensuring compatibility, but now you get real-time previews and easier customization directly inside Elementor.

This approach gives you more flexibility to style, position, and configure your login and registration forms while instantly seeing how they’ll appear on your site. We’re continuing to refine this integration, so we’d love your feedback to make it even more powerful in upcoming releases.

Send Login Links Directly from User Profiles

Need to send a one-click login link to a specific user? Now you can. From the WordPress User Profile screen, admins can send login links instantly — a handy tool for support teams or membership sites.

Fine-Tuned Control Over Token Expiration

This release also introduces the ability to override TTL (time-to-live) and token validity on a per-user basis. Whether you want longer-lasting tokens for trusted admins or shorter ones for high-security accounts, you now have granular control.

Under the Hood Improvements

Beyond these headline features, Magic Login PRO 2.6 includes several under-the-hood updates to keep things running smoothly:

• Input field names have been updated to prevent conflicts with Cloudflare Turnstile.
• Fixed translation warnings and auto-updater notices.
• Updated dependency packages for improved stability and performance.

Upgrade Today
Magic Login PRO 2.6 makes it easier than ever to customize and control your login workflows. Update your plugin now and take advantage of the new Elementor widgets, admin-friendly login link sending, and user-level token controls.

Composer Support for WordPress Plugins and Themes

You can now distribute your WordPress plugins and themes via Composer, with full license validation and versioned update control.
The new Composer endpoint supports per-package authentication using license-key and license-url headers — ideal for private deployments, CI/CD workflows, and agency-grade automation.

View the Composer setup guide for detailed instructions.

Rate Limiting for API Requests

PaddlePress now supports rate limiting for API requests to help reduce unnecessary traffic and improve stability. It uses a sliding window approach based on IP address, ensuring efficient request handling while allowing legitimate usage to flow freely.

eventCallback Support for Paddle Billing

The Paddle integration has been enhanced with support for the eventCallback option in Paddle Billing.
Whether you’re using Paddle Classic or Billing, PaddlePress detects the mode and injects the correct configuration, including vendor or seller IDs and any custom event callbacks.

Smarter Username Generation

When creating WordPress users via Paddle checkout, PaddlePress now generates cleaner, shorter usernames using the email’s local part.
Fallback logic ensures uniqueness without defaulting to long or random strings unless necessary.

Other Improvements

• Version detection now uses the explicit version meta instead of relying on publish dates.
• Fixed _load_textdomain_just_in_time notices
• PHP 7.4 is now the minimum supported version
• Updated internal dependencies
• Minor performance improvements and cleanup

How to Update

PaddlePress PRO 2.6 can be updated via the WordPress dashboard or through Composer, depending on your setup.

This release focuses on improving flexibility and security for developers distributing premium WordPress products. Feedback and suggestions continue to shape the roadmap — thank you to everyone who contributed ideas, bug reports, or feature requests.

For more information, visit the documentation or get in touch if you need help.

This version also adds a brand new Tools section for exporting, importing, and resetting plugin settings, expanded WP-CLI and REST API capabilities, and improvements that make user management and onboarding even more flexible.

Whether you’re creating secure, frictionless login flows for members, teams, or customers, Magic Login PRO 2.5 delivers meaningful upgrades in usability, control, and developer experience.

QR Code Login for WordPress – A Simpler Way to Sign In

Magic Login PRO 2.5 introduces QR Code Login for WordPress, giving users an even faster and more intuitive way to sign in without typing passwords.

Just like {{MAGIC_LINK}}, you can now use {{MAGIC_LOGIN_QR}} or {{MAGIC_LOGIN_QR_IMG}} placeholders in outgoing emails to include a scannable QR version of the login link. It works out of the box with Magic Login emails and is compatible with most WordPress email systems, including WooCommerce and CRM tools that rely on wp_mail(). Thanks to these placeholders, adding QR Code Login for WordPress to your email workflows takes just seconds.

This makes login possible with just a quick scan, no clicks required — ideal for users who prefer using their mobile device to authenticate.

If you want to display a static QR code pointing to any URL on your site, you can also use the magic_login_qr shortcode. While it’s not directly tied to the login process, it’s a handy way to include a QR code on a page — for example, linking to a welcome page, onboarding flow, or external form.

Tools Section – Export, Import, and Reset Settings

We’ve added a new Tools section to help you manage your plugin configuration more effectively.

You can now:

• Export all plugin settings as a .json file (with optional license and sensitive data)
• Import settings into another site or environment
• Reset plugin settings, license info, or all user tokens with a single click

This is especially useful for agencies and developers managing multiple environments or staging-to-production workflows.

(Tools section is also part of free version of the Magic Login).

New Features for Better User Management

Purge Login Links

As an admin, you can now delete all active login tokens for a specific user — directly from their user profile page. Useful for:

• Revoking access
• Resetting logins during support
• Security-sensitive environments

Registration Redirect

After a user completes registration, you can now automatically redirect them to a custom page — such as a welcome dashboard, onboarding guide, or upsell flow. This works with standard registration mode and shortcode-based forms.

Developer-Focused Improvements

Expanded WP-CLI Support

We’ve added new WP-CLI commands to:

• Generate QR codes for login links
• Export, import, or reset plugin settings
• Bulk-create login links based on user roles

These tools help automate deployments and streamline development workflows.

REST API Enhancements

The /magic-login/v1/token endpoint now supports:

• qr: Returns the QR code URL
• qr_img: Returns a full <img> tag for embedding

This makes it easier to integrate Magic Login with mobile apps, external UIs, or headless frontends.

New: Hooks Documentation

We now provide a full list of actions and filters available in Magic Login.

If you’re extending the plugin — customizing login behavior, modifying UI, or integrating with third-party tools — this new reference is for you.

Additional Improvements

• Updated dependencies and internal optimizations.
• Alphanumeric Sender ID support (Twilio only): Use your brand name in SMS messages
• Case-insensitive domain matching: Prevents login issues due to capitalized domain inputs
• PHP 7.4+ required: Minimum version updated for better security and compatibility

Update Now!

Magic Login PRO 2.5 is available today. Update from your WordPress dashboard or download the latest version from your HandyPlugins account. Want to learn more about how to enable QR Code Login for WordPress and other new features?

→ Read the full documentation

Questions, feedback, or feature ideas? We’d love to hear from you.

What’s New in Magic Login 2.4?

SMS Login – Login Links via SMS (Pro)

We’re introducing SMS Login, allowing users to receive magic login links via SMS. This feature enhances accessibility and provides a frictionless login method, particularly for mobile users. To enable SMS login, we’ve integrated with Twilio, one of the most widely used SMS platforms. You can set up Twilio easily by following our step-by-step guide.

To further improve the experience, we developed Code Login, which eliminates the need to click a link by allowing users to enter the login code sent to their email or phone. This keeps the authentication process seamless and secure. Learn more

Code Login – Flexible Passwordless Authentication

Magic Login now supports Code Login, allowing users to log in by entering a secure login code sent to their email or phone number instead of clicking a magic link. This feature was developed as a natural extension of SMS Login, providing an even shorter and more convenient authentication method. By entering a secure login code, users can quickly access their accounts while maintaining the high security standards of passwordless authentication. Learn more

Domain Restriction for Registration (Pro)

Need to limit registrations to specific email domains? With this new feature, you can now restrict user sign-ups to emails from a predefined list of domains—ideal for private communities, corporate websites, or educational platforms.

Additionally, you can now set the default user role for new registrations through Magic Login. This ensures users are automatically assigned the appropriate role upon registration, providing better access control and streamlining user management for site administrators.

FluentCRM Integration – Automate Your Login Links (Pro)

If you’re using FluentCRM, you can now send magic login links directly through FluentCRM’s automation workflows. This integration makes it easier to provide instant access to your users via automated email campaigns. Learn more

Easy Digital Downloads (EDD) Integration – Seamless Checkout Experience (Pro)

Selling digital products with Easy Digital Downloads? Now, your customers can log in effortlessly during checkout with Magic Login PRO. This integration not only simplifies the purchasing process but also enhances the login experience across your site. With various options to place the magic login form directly on login pages and checkout screens, customers can access their accounts seamlessly, reducing friction and improving overall user engagement. Learn more

Under-the-Hood Improvements

Beyond these exciting new features, Magic Login 2.4 also includes several important improvements:

• Applied the login_redirect filter before magic_login_redirect to improve compatibility with other plugins.
• Deprecated login.php in favor of a new LoginManager class.
• Refactored WooCommerce integration into a dedicated class with extended support for customer login forms.
• Fixed brute force protection issues related to login throttling.
• Properly encoded redirection URLs on the wp-login page.
• Corrected various typos and minor bugs.

Ready to Upgrade?

Magic Login 2.4 is packed with features that make passwordless authentication even more powerful. If you’re already using Magic Login, update to the latest version today to take advantage of these enhancements.

Upgrade to Magic Login PRO to unlock SMS Login, FluentCRM integration, EDD integration, and more!

We’d love to hear your feedback! Let us know what you think of these new features or share how Magic Login is helping you create a frictionless login experience for your users.

This version focuses on delivering more flexibility and control, ensuring you can easily handle customer subscriptions, track payments, and manage licenses with greater precision. With these updates, PaddlePress PRO 2.4 streamlines your workflow, allowing you to focus on growing your business while we take care of the technical details.

Partial Email Search for Payments Table

Finding specific transactions is now easier than ever! You can now search the payments table using partial email addresses, making it faster to locate payments without needing the full details.

Product-Based Filtering for Payments Table

We’ve introduced product-based filtering to the payments table, making it easier than ever to analyze your revenue by specific products. Now, with just a click on the product, you can instantly filter transactions, allowing you to focus on key products or pricing variations. This feature is especially useful if you’re managing multiple products or different price tiers, giving you greater insight into performance and trends with minimal effort.

New Screen Options for Membership and Downloads Tables

Managing your data has never been more customizable. In the membership list table, you can now toggle the visibility of Products (or prices if you are using Paddle Billing), Payment Count (total count in the payments table regardless of the payments status), and Domain Count columns, offering a more tailored view. You can use paddlepress_payment_count_for_membership_sql and paddlepress_domain_count_for_membership_sql filters if need to customize those queries that does the calculations.

To ensure your data stays up to date without adding complexity, we’ve introduced a cron job that automatically recalculates payment counts and domain counts twice daily. However, if you need the most recent data right away, you can always click the “Sync Data” button to instantly refresh and apply the latest updates.

Similarly, in the downloads list table, new options include the ability to show Access, Download, and Version columns.

Domain Blocking for License Activation

PaddlePress PRO 2.4 introduces the ability to block specific domains from activating licenses. This is a powerful tool to prevent unauthorized or inappropriate license activations, giving you more control over your licenses.

Improvements and Fixes

Deactivation Logic for Local/Dev Domains

We’ve enhanced the deactivation logic to better handle local and development domains, improving the experience for developers testing licenses in these environments.

Redundant API Request Fix

On the My Account page, a redundant API request to the billing platform was causing unnecessary delays. This has been resolved for a smoother and faster user experience.

Updated Dependencies

We’ve also taken care of the usual housekeeping by updating the plugin’s dependencies to keep everything running smoothly.

This update marks another significant step in enhancing the user experience and providing even more powerful tools for managing accounts and subscriptions. I’m committed to continually refining the plugin to make selling WordPress plugins and themes through Paddle as seamless as possible. Your feedback plays a vital role in shaping PaddlePress, and I truly appreciate all the insights shared by our customers to help improve the product for everyone.

Make sure to upgrade to PaddlePress PRO 2.4 to take full advantage of these latest features and improvements!

Magic Login REST API Support for Programmatic Login Links

With the new Magic Login REST API support, developers can now create login links programmatically, allowing for more flexible and dynamic user authentication flows. Whether you’re building a custom user interface or automating workflows, the Magic Login REST API makes it easier to manage login processes without manual intervention.

Key Benefits

• Increased Flexibility: Generate login links on the fly based on user actions or specific conditions within your application.
• Enhanced Automation: Automate login processes, reducing the need for manual input and streamlining user experiences.
• Improved Integration: Seamlessly integrate Magic Login with other systems and services, enhancing the overall functionality of your platform.

How to Get Started

Getting started with the new Magic Login REST API is simple. Detailed documentation is available to guide you through the process of integrating and using the API in your projects. Here’s a quick overview:

1. Enable REST API on Settings page. Once you enabled, the API Endpoint will be available yoursitename.com/wp-json/magic-login/v1/token

2. Authentication: To create an application password, navigate to your user profile in the WordPress dashboard.

3. Make HTTP request to generate (or/and send email)
Supported parameters:
user: ID or username or email (Required)
send: boolean (Optional) If set to true, the login email will be sent.
redirect_to: string (Optional) Target URL for the redirection.

4. Response Handling: Receive and handle the login link response to complete the login process.

Under the Hood Changes

In addition to the new Magic Login REST API support, we’ve made several under-the-hood improvements to enhance the overall functionality and flexibility of Magic Login:

• Shortcode Flexibility: We now pass magic_login_form to shortcode_atts, providing more flexibility in customizing your shortcodes.
• Dependency Updates: We’ve updated several dependencies to ensure compatibility and improvements.
• WordPress 6.6 Compatibility: Magic Login 2.3 has been tested with the upcoming major WordPress version 6.6, ensuring seamless integration and functionality.

Upgrade to Magic Login PRO

Magic Login REST API support is exclusive to the PRO version. For advanced features and premium support, consider upgrading to Magic Login PRO. Unlock the full potential of Magic Login and take your user authentication to the next level.