WooCommerce URL-Based Login: How to Let Users Log Into their Account by Clicking a Link

By Last Updated: October 29, 2019 3

WooCommerce URL Based Login Plugin

It can be a nightmare to expect your WooCommerce store’s customers to remember their username and password. The ‘Lost Password’ feature in WordPress is all well and good. However, emails can be spammed and it’s plagued with caching problems.

That’s when you need a WooCommerce URL-based login plugin. This type of plugin lets you generate a secret link that users can click on to log into their WordPress or WooCommerce account on your website. They’ll never have to remember a username or password again!

In this article, I’m going to recommend the best automatic login plugin for WordPress and WooCommerce, and tell you how to set it up. I’ll also tell you how to use it with other plugins to allow customers to click on a URL to instantly log into a hidden area of your website that no one else can see. This is perfect for creating a private WooCommerce store, or hidden product categories that only specific users (or user roles) can see. It’s also ideal for creating customer-specific products that are exclusive to each user.

Which is the best WooCommerce URL-based login plugin?

There used to be a free WordPress plugin called – you guessed it – URL-Based Login. This worked on any WordPress site, including WooCommerce online stores. Unfortunately the developer no longer supports this plugin, so you need to find a more modern alternative.

Instead, I recommend the Autologin Links plugin. This is another free WordPress plugin that lets customers log into their WP or WooCommerce account simply by clicking on a link to a secret login URL.

How do the automatic WooCommerce login URL’s work?

The Autologin Links plugin works by letting administrators of your WordPress website create a hidden login URL for each user. They can easily do this on the ‘Edit User’ page under the Users section of the WordPress admin.

You can do this for any WordPress website, including WooCommerce stores. That’s because Woo uses the standard WordPress login facility for its customer accounts.

  1. First, an administrator logs into the WordPress admin for their WC store, goes to the Users section and clicks on the user who they want to create a URL-based login for.
  2. Scroll down to the Auto-login section of the page and click the ‘New’ button next to ‘Auto-login link’:

WordPress URL Based Login

  1. Copy the URL that appears on the page.
  2. Give the WooCommerce login link to the customer. Tell them to use it as the instant login link for their account.
  3. Scroll down to the bottom of the ‘Edit User’ page and click ‘Save’. The URL-based login will only work if you remember to save the page. 
  4. Now send the user a link to their unique login URL for your WooCommerce store (e.g. by email).
  5. Finally, the user clicks on the link (for example in an email). It automatically takes them to your WordPress website or WooCommerce store and logs them in. They don’t have to enter a username or password. This is because the plugin automatically passes this to WordPress via the auto-login URL.

For example, this sample WooCommerce URL-based login link will take users to the homepage of my website.com and log them into their account.

http://mywebsite.com/?autologin_code=iaj3F39dfkdfDdDDaASRR12FMmbbT6

Each customer will have a unique URL-based login for their account. The random string in my example URL will therefore be different for each person.

Can I use URL’s to log users into a completely hidden WooCommerce store?

Used alone, the Autologin Links plugin lets you provide URL-based login for WooCommerce stores where all the products are public. This means that the products are available for everyone to view, and the user-specific login links simply log customers into their account.

You can extend the Autologin Links plugin to change the actual visibility of products by using it with a WooCommerce protection plugin. Choose one of the following plugins, depending on whether you want to hide some or all of your products.

WooCommerce Private Store

WooCommerce Private Store – as its name suggests – makes your entire WooCommerce store hidden. The rest of your website (e.g. your homepage and blog) remains public, but all the WooCommerce parts (shop page, products, categories, cart, etc.) are hidden from logged out users.

Use WooCommerce Private Store with the Autologin Links plugin to create an auto-login URL that will unlock the hidden store and log them into their account in a single click.

Get WooCommerce Private Store

WooCommerce Protected Categories

WooCommerce Protected Categories is similar to WooCommerce Protected Categories, but with more fine-grained control. Instead of making your entire shop private, you can use it to create hidden areas within your store.

For example:

  • You might have a public shop that anyone can access, and a hidden area that only logged in users with a specific role can see.
  • Maybe you need customer-specific products, with a different hidden category for each customer.

Either way, you can use WooCommerce Protected Categories to protect any or all of your categories so that only specific logged in users or user roles can see them. Use it with the Autologin Links plugin to give each customer a unique link, and make their lives easier with WooCommerce URL-based login.

Get WooCommerce Protected Categories

Can I redirect customers to a specific page after they login?

Yes, absolutely. When you create the URL-based login link for each user, simply amend the link to add the URL of the correct page. Just make sure you don’t change the autologin code at the end of the URL.

For example, this login URL will take customers directly to the shop page and log them into their user account:

http://mywebsite.com/shop/?autologin_code=iaj3F39dfkdfDdDDaASRR12FMmbbT6

Alternatively, you can use the free Peter’s Login Redirect plugin to choose where people are taken to after they login. It even has a feature to choose a different login URL redirect for each role or individual user account.

How secure are auto-login URL’s?

Letting your customers login by clicking on a link is – by definition – less secure than requiring a username and password. As a WordPress website manager or WooCommerce store owner, you need to make a balanced decision about usability vs. security.

There are some specific warnings and security tips on the Autologin Links plugin website. I strongly recommend reading these before adding URL-based login to a WordPress or WooCommerce website.

As you can see, allowing users to click a link to automatically login to their account on your WooCommerce website can make your store much more user-friendly. Implement it carefully to maximize security in your store, and relax while your customers log into their accounts with ease.

Can I use URL based login with password protected store and categories?

As well as working with individual user accounts, the WooCommerce Private Store and WooCommerce Protected Categories plugins have password protection options. This means that people can unlock the hidden content by entering a simple password, instead of needing their own unique user account.

Unfortunately this doesn’t work with auto-login URL’s, which only work with actual user logins. To automatically unlock the hidden content by clicking on a URL, you need to use one of the options in these plugins which work with individual user accounts.

Katie Keith

An active member of the global WordPress community, Barn2 Co-Founder Katie loves collaborating with other plugin companies. Her articles have been published on high profile sites including WPTavern, Torque and IndieHackers. She oversees all plugin support and deals with 'Tier 2' support requests about how to use Barn2's plugins in advanced ways.

3 Comments

  1. Dale
    November 22, 2019 Reply

    Thanks for sharing Katie. I really agree with this part: "It can be a nightmare to expect your WooCommerce store’s customers to remember their username and password."

    I actually think it's a huge issue for WP, especially Woo.

    Found your article helpful. I'd really like to get a feature which allows auto-login links to be inserted in all WP emails (admin emails, Woo emails, plugin emails, etc.). Maybe this could be done with a shortcode.

    This way, whenever an email is sent from within WP, there is an auto-login link so user can easily access/be logged into site. This would be so helpful for Woo emails.

    There's a great Woo trigger/action plugin, Automatewoo. It sends lots of great emails to customers based on triggers. But plugin has no auto-login. So a customer get's an email 2 months after purchase, for a product recommendation, and they have to remember their username/password to get into site. This will kill sales in these types of scenarios.

    We use aMember, which is a powerful membership script. They have a great auto-login feature. Links can be put in all emails with an auto-login shortcode. Even if it's an email that's auto generated, the auto-login links work great. We use them in all emails - drip autoresponders, email blasts, etc. The feature uses tokens for security. The time length of tokens can be set.

    Only thing is that the auto-login links won't work in WP emails (like in Woo). They only work in aMember.

    Maybe someone (hint, hint) will create a auto-login plugin for WP, Woo which will allow auto-login links in all emails. I know some people think this is bad for security, but I've never had a problem with it. Especially if you don't have saved credit cards in customers account, what's really the worst that can happen?

    • EJ
      December 23, 2019 Reply

      Dale

      Just found your comment reply. Funny, I've been going down the same path you are suggesting. AutomateWoo staff didn't seem interested in Auto Login, which is OK. Seems like WP.org and WooCommerce people freak out about Autologin, like it's a weird disease. I did find a similar plugin Autonami and those folks are willing to do an integration with Autologin Links (it was their idea). As I suspected, it will only be in emails from their plugin (hint for plugin), but this is better than nothing. Maybe someone will see this comment and be able to avoid the hassle I've been through in trying to get Autologin setup. Thanks again for the great article.

      PS: Really enjoying Posts Table Pro. I purchased it a while back. That plugin rocks.

      ===

      Hi, Dale.

      Thanks for getting in touch with us via our Support Centre. I'm sorry to hear you were having difficulty with submitting another comment.

      Please may I know if there was any particular reason given or error message returned, or any helpful info that might help us track down what might have caused the issue you were experiencing. I'll relay the same to our development team, so we can investigate it further.

      I'm glad to hear we're on the same page about whom to approach for the auto-login feature or plugin. Perhaps AutomateWoo might reconsider if enough users ask for an integration with the Autologin Links plugin. WP.org and WooCommerce may just have misunderstood the details.

      I looked that up and found the Autonami Marketing Automations For WordPress plugin by BuildWooFunnels. I'm glad to hear they see the value in an integration with Autologin Links. Good find! I'll include your message in a reply to our comment thread. Thanks.

    • EJ
      December 19, 2019 Reply

      Hi, Dale. I'm glad you found our article insightful.

      I agree that it would be nifty for Automatewoo to also have an auto-login feature. Have you checked if it plays well with the Autologin Links plugin that we mention? It might be worth exploring that possibility, or contacting the authors/developers of either plugin about it.

      Understood. It's a shame that aMember's auto-login links currently don't work outside of it. I'm familiar with using Access Tokens in WP, which are indeed an awesome (and secure) feature.

      Ha ha. I believe it would be best and most effective to hint at an auto-login integration over at WP.org and WooCommerce. You're right that customer credit card info is never stored on-site, as it is the payment gateways used (e.g. PayPal, Stripe) that do so.

      Many thanks for your thoughts! Sorry for the late reply. If you need to get in touch with us quicker, you may do so via our dedicated Support Center.

Please share your thoughts...

Your email address will not be published.