Skip to content
ProVideo Coalition
  • Latest
  • News
  • Production
  • Post Production
  • Virtual Production
  • Podcasts
  • Reviews
  • More
    • About Us
      About Us MM Image
    • Meet the Experts
      Meet the Experts MM Image
    • Advertise
      Advertise MM Image
    • Contact Us
      Contact Us MM Image
  • Subscribe
  • Search
    • Search MM Image
      • FOLLOW US
      • TOP LINKS
      • TIPS
      • TOPICS
      • WEBINARS
Distribution

Passwordless logins for your website: Are you using Passkeys or Magic Links?

Passwordless logins for your website: Are you using Passkeys or Magic Links? 3
  • twitter
  • facebook
  • pinterest

Does your website offer Passkeys or Magic Links yet?

Profile Picture
Allan Tépper
August 30, 2023
Comment

Even though I personally use and recommend a great password manager which securely handles logins across my devices, I recognize that some people aren’t willing to use one. This is why we should offer passwordless logins to our websites, either with Magic Links or Passkeys, which have been a buzz in the news lately with announcements from Apple, Google, Yubikey and 1Password. In fact, Passkeys (with or without biometric verification methods like fingerprints, face recognition or retina) have been vetted by the world’s security experts and declared to be even more secure than strong, unique passwords with the type of 2FA (2-factor authentication) used by most people, while also being much more convenient. This article is a summary about how to implement either type of passwordless logins for your WordPress website: Magic Links or Passkeys. I’ll also cover how much that costs (to add either or both your website) and how I can get it for you for 40% less.

What’s a Magic Link?

A Magic Link is one that is sent to the user via email when initiating a login to a WordPress website equipped with that feature. The user will be instantly logged in after clicking on the Magic Link received via email. No more resetting forgotten passwords!

How to implement and offer Passkeys or Magic Links to your WordPress website

As of publication date of this article, the only way I know to offer Passkeys or Magic Logins on a WordPress website is via the paid version of a powerful plugin called Solid Security  (previously called iThemes Security Pro). The paid version offers both Passkeys and Magic Links. You may decide to use one, the other or both. Both the free and paid version offer the following benefits (among many more):

  • 2FA (two-factor authentication, to prevent an attacker who somehow already knows your password). This is optional
  • Local & Network Brute Force Protection, which will automatically stop a human or a computer from continually trying to guess a password.

Some reviewers have unjustifiably objected to the lack of malware scanning within the above mentioned plugin. I respectfully disagree with those reviewers and actually consider that to be a benefit, as you’ll see here:

  1. Having malware scanning inside of WordPress can unnecessarily slow down your website, in addition to complicating it.
  2. It is much better to handle malware scanning on a server level (not on a WordPress level) to alleviate many heavy tasks within WordPress. My first choice for server-based scanning is called Imunify360.

Immunify’s slogan is:

Prevention is always better than cure… But just in case, we have both.

 

Imunify360 describes itself as:

Imunify360 is a comprehensive security platform for web-hosting servers. It utilizes highly tailored and integrated components for proactive real-time website protection and web server security. It’s not just antivirus or WAF. Imunify360 combines an Intrusion Prevention and Detection system, a Web Application Firewall, Real-time Antivirus protection, a Network Firewall, and Patch Management components. These elements are seamlessly integrated for flawless interoperability that instantly detects, fixes, and protects from any threats that a web-hosting service may encounter.

Fortunately, Imunify360 requires no intervention from you… and is included with all plans hosted at my TecnoTur.us at no extra cost. Having Imunify360 on the server alleviates the malware scanning tasks, allowing Solid Security do its specific other tasks.

How much does passwordless logins for my website cost?

 Solid Security currently costs U$99 per year per website if you buy it from them. However, if you order it as an add-on to any hosting plan from TecnoTur, it will cost you only U$59 per year, per website. It can be added when purchasing a new hosting plan or added to an existing one at any time.

For those of us who already use a password manager and/or a Yubikey

Those of us who use a good password manager or Yukikey or similar device won’t want to get rid of it. We’ll want to use them together with Passkeys. Even those of us who currently use a Yubikey will also want to keep it, if only to access the good password manager.

My updated white paper/ebook

Back in 2017, I published the white paper WordPress security + multi-backups : My automated 4-destination strategy. Many things have changed since 2017 with WordPress and the strategies for security. That’s why I just released the second edition, shown below.

Passwordless logins for your website: Are you using Passkeys or Magic Links? 4

You can get it either directly from its own website or from a growing list of 12+ worldwide bookstores, distributors and library networks. Click for all of the options. If you purchased the first edition and would like to receive the second one at no additional cost, it depends where you bought it. If you bought it from Amazon, just request the update from Customer Service. If you purchased it anywhere else (or unable to get the update free from Amazon customer service), please write to me with proof of purchase.

Lee este artículo en castellano

Ingreso sin contraseña a tu sitio web: ¿Ya utilizas las passkeys o los enlaces mágicos?

(Re-)Subscribe for upcoming articles, reviews, radio shows, books and seminars/webinars

Stand by for upcoming articles, reviews, books and courses by subscribing to my bulletins.

In English:

  • Email bulletins, bulletins.AllanTepper.com
  • In Telegram, t.me/TecnoTurBulletins
  • Twitter (bilingual), AllanLTepper

En castellano:

  • Boletines por correo electrónico, boletines.AllanTepper.com
  • En Telegram, t.me/boletinesdeAllan
  • Twitter (bilingüe), AllanLTepper

Most of my current books are at books.AllanTepper.com, and also visit AllanTepper.com and radio.AllanTepper.com.

FTC disclosure

Automattic (WordPress) and iThemes (solid) are not paying for this article. Some of the manufacturers listed above have contracted Tépper and/or TecnoTur LLC to carry out consulting and/or translations/localizations/transcreations. So far, none of the manufacturers listed above is/are sponsors of the TecnoTur, BeyondPodcasting, CapicúaFM or TuSaludSecreta programs, although they are welcome to do so, and some are, may be (or may have been) sponsors of ProVideo Coalition magazine. Some links to third parties listed in this article and/or on this web page may indirectly benefit TecnoTur LLC via affiliate programs. Allan Tépper’s opinions are his own. Allan Tépper is not liable for misuse or misunderstanding of information he shares.

Support ProVideo Coalition
Shop with Filmtools Logo

Filmtools

Filmmakers go-to destination for pre-production, production & post production equipment!

Shop Now
backups magic link passkeys passowrdless login security wordpress

What Do You Think? Let Us Know.

Subscribe
Login
Notify of
guest
guest
5 Comments
Oldest
Newest Most Voted
Inline Feedbacks
View all comments
Passkeys auth
Passkeys auth
1 year ago

Best passwordless wordpress plugin
https://wordpress.com/plugins/ownid-passwordless-login

0
Reply
Allan Tépper
Allan Tépper
Author
Reply to  Passkeys auth
1 year ago

Thank you. My article is about doing it with self-hosted (WordPress.org) websites and the one you are mentioning seems to be for WordPress.com.

0
Reply
Passkeys auth
Passkeys auth
Reply to  Allan Tépper
1 year ago

It’s actually available for the self-hosted version too 🙂
https://wordpress.org/plugins/ownid-passwordless-login

0
Reply
Yedidya Schwartz
Yedidya Schwartz
Reply to  Allan Tépper
1 year ago

This plugin exists on the open source WordPress version
https://wordpress.org/plugins/ownid-passwordless-login

4
Reply
Memo Sauceda
Memo Sauceda
1 year ago

As a client of TecnoTur hosting it’s great to know you are always looking for the best ways to protect our websites. Thank you!

1
Reply

PVC Favorites

2 months ago

NAB 2025 Wrap-up – AI, the cloud, monitors, drives and Kyno

NAB 2025 Wrap-up - AI, the cloud, monitors, drives and Kyno 5
PVC at NAB 2025 - Turn any lamp into an LED Source with the Astera LunaBulb 6
NAB Show

PVC at NAB 2025 – Turn any lamp into an LED Source with the Astera LunaBulb

PVC at NAB 2025 - Take a look at three innovative products from AJA 7
NAB Show

PVC at NAB 2025 – Take a look at three innovative products from AJA

Immersive news at NAB 8
NAB Show

Immersive news at NAB

Latest

6 hours ago

Windows 10’s October 2025 timebomb: my 3 recommendations

Windows 10's October 2025 timebomb: my 3 recommendations 9
Art of the Frame Podcast: The Alan Smithee Round Table – Content vs. Traditional Media 10
Art of the Frame

Art of the Frame Podcast: The Alan Smithee Round Table – Content vs. Traditional Media

Compact FUJIFILM X-E5 shoots in 6.2K/30P resolution
Pro Photo

Compact FUJIFILM X-E5 shoots in 6.2K/30P resolution

Video news from Apple’s WWDC 11
Post Production

Video news from Apple’s WWDC

You Might Also Like

Google Docs tables for WordPress (and more) in 2022 12

Google Docs tables for WordPress (and more) in 2022

Written by Allan Tépper
July 24, 2022
Google Docs is an extremely powerful tool for many tasks, although it’s cruelly unappreciated and under publicized. Google Docs...
WebSub and PowerPress 8, with Angelo Mandato 16

WebSub and PowerPress 8, with Angelo Mandato

Written by Allan Tépper
October 10, 2019
In BeyondPodcasting episode 18, host Allan Tépper and guest Angelo Mandato discuss the power of WebSub and new features...
WordPress security seminar in Madrid by Allan Tépper 19

WordPress security seminar in Madrid by Allan Tépper

Written by Allan Tépper
September 29, 2017
Yesterday afternoon in Spain, I had the pleasure and honor of hosting a seminar about WordPress security + automatic...
WordPress security + multi-backups—free ebook until this Sunday 23

WordPress security + multi-backups—free ebook until this Sunday

Written by Allan Tépper
August 9, 2017
WordPress is one of the most popular platforms for websites, with or without blogs. WordPress is getting better all...
ProVideo Coalition

Contact

  • +1-747-444-1870
  • [email protected]

Useful Links

  • Advertise With Us
  • Mobile App
  • Topics
  • Meet the Experts
  • Webinars
  • Contact Us

Our Websites

  • Filmtools
  • moviola.com
  • Moviola Digital

Sign up for the ProVideo Coalition weekly e-newsletter and get the most popular articles, blogs, and reviews right to your inbox.

By entering your email, you agree to our Terms & Conditions and Privacy Policy

© 2025 ProVideo Coalition, a Filmtools Company. All Rights Reserved.
Terms of Service Privacy Policy Cookie Policy Sitemap
Manage Cookie Consent
We use cookies to optimize our website and our service.
Functional Always active
The technical storage or access is strictly necessary for the legitimate purpose of enabling the use of a specific service explicitly requested by the subscriber or user, or for the sole purpose of carrying out the transmission of a communication over an electronic communications network.
Preferences
The technical storage or access is necessary for the legitimate purpose of storing preferences that are not requested by the subscriber or user.
Statistics
The technical storage or access that is used exclusively for statistical purposes. The technical storage or access that is used exclusively for anonymous statistical purposes. Without a subpoena, voluntary compliance on the part of your Internet Service Provider, or additional records from a third party, information stored or retrieved for this purpose alone cannot usually be used to identify you.
Marketing
The technical storage or access is required to create user profiles to send advertising, or to track the user on a website or across several websites for similar marketing purposes.
Manage options Manage services Manage vendors Read more about these purposes
View Preferences
{title} {title} {title}
Manage Cookie Consent
We use cookies to optimize our website and our service.
Functional Always active
The technical storage or access is strictly necessary for the legitimate purpose of enabling the use of a specific service explicitly requested by the subscriber or user, or for the sole purpose of carrying out the transmission of a communication over an electronic communications network.
Preferences
The technical storage or access is necessary for the legitimate purpose of storing preferences that are not requested by the subscriber or user.
Statistics
The technical storage or access that is used exclusively for statistical purposes. The technical storage or access that is used exclusively for anonymous statistical purposes. Without a subpoena, voluntary compliance on the part of your Internet Service Provider, or additional records from a third party, information stored or retrieved for this purpose alone cannot usually be used to identify you.
Marketing
The technical storage or access is required to create user profiles to send advertising, or to track the user on a website or across several websites for similar marketing purposes.
Manage options Manage services Manage vendors Read more about these purposes
View Preferences
{title} {title} {title}

Newsletter Sign Up

Sign up for the ProVideo Coalition weekly e-newsletter and get the most popular articles, blogs, and reviews right to your inbox.

×
wpDiscuz