Autologin Links

By WPAutoLogin

User Management & Authentication / User Registration & Login

Autologin Links Review - In-Depth Analysis

This plugin allows administrators to create autologin links for users. Users can log in without a password using these links. Be cautious as it may pose security risks.

Performance Overview

WPS Score

6.67/10

User Rating

4.7/5 (based on 15+ reviews)

Active Installations

8,000+

Update Frequency

Below Average It is calculated using the weighted average of same category plugins.

Security Score

1 / 10 (Very Low Risk) It is calculated using the weighted average of all versions.

What It Does

This plugin allows administrators to generate autologin links for their WordPress website, logging in visitors under a certain user name. Administrators can edit (generate and delete) autologin links for users, while users can only view their autologin links. Note that this plugin bypasses the standard authentication method of WordPress via login and password and should only be used if you understand the security issues mentioned.

Once this plugin is activated, administrators can generate autologin links on the edit profile administration pages for different users. Users can view their autologin links on their profile pages. Autologin links are of the form: http://yourwebsite/?autologin_code=ABC123.

For more convenience, it is possible to generate login links directly using the WordPress site-preview functionality. When viewing the page while being logged in as an administrator, the top-bar will show an extra item “Auto-login link.” When pointing at the menu item, a dropdown list will list all users for whom autologin links were generated on their profile pages.

Since autologin links are meant to be an OPEN way to login to your website, they might be considered an INSECURE plugin for WordPress. Autologin codes are saved as plain text, meaning anyone who can execute queries on the WordPress database can obtain the autologin code for a certain user.