Magic Login Activity Manager
Every Magic Login link sent, opened, or expired in one filterable, sortable, exportable view. Built for security teams that need an audit trail for passwordless authentication without dumping the database.
♾️ Lifetime License available
Passwordless still needs an audit trail
Magic Login replaces passwords with a one-time email link, and the plugin writes every issued, opened, and expired token to wp_magic_login_tokens. The plugin's own admin focuses on configuration: link lifetime, allowed roles, email template. It does not give security or compliance staff a real audit table. SleekView reads the token table directly and joins wp_usermeta for role and display name, then exposes the result as a sortable, filterable WordPress admin grid scoped by role-based access.
The four sample rows are realistic. A lead developer received a link at 09:12 and used it two minutes later from a routine office IP. An ops account got a link at 08:50 and never opened it; the token is still pending until 09:50. An intern received a link the previous evening and let it expire, which is benign but worth noting if it happens repeatedly. A CEO logged in successfully from a different IP, which is fine if it matches their travel pattern and worth a question if it does not.
Token strings are masked. Only metadata is shown. Compliance staff can be granted read-only access through role-based capability filters and a frontend embed, so they can run their reviews without holding a full WordPress admin role. Bulk delete writes through Magic Login's revocation hooks.
Workflow
From Magic Login tokens to a compliance dashboard
Read the token table
Build review presets
Grant read-only access
Export for incident response
Sample columns
Login activity
wp_magic_login_tokens + wp_usermeta
| User | Email Sent | Opened | IP Address | Status | Expires |
|---|---|---|---|---|---|
| lead.developer@acme.io | 2026-04-24 09:12 | 2026-04-24 09:14 | 203.0.113.18 | Used | — |
| ops@acme.io | 2026-04-24 08:50 | — | — | Pending | 2026-04-24 09:50 |
| intern@acme.io | 2026-04-23 17:02 | — | — | Expired | 2026-04-23 18:02 |
| ceo@acme.io | 2026-04-23 11:28 | 2026-04-23 11:31 | 198.51.100.7 | Used | — |
Comparison
Magic Login default vs. SleekView
Magic Login default UI
- Login activity not surfaced in WP admin
- No filter by IP or token state
- Cannot save security review presets
- No CSV export of magic link events
- Hard to expose to compliance staff
SleekView
- Magic Login activity in a real WP table
- Filter by user, IP, or token state
- Save compliance review presets
- Export tokens to CSV for incident reviews
- Read-only embed for auditors
Features
What SleekView gives you for Magic Login
Token audit
Track every issued magic link with timestamps, IP, and result for compliance review. Token strings are masked; only the metadata that auditors actually need is visible in the table.
Anomaly spotting
Filter by IP or geolocation to spot logins from unexpected places. A CEO login from a country they do not travel to is the textbook anomaly worth a same-day question.
User and role filters
Slice activity by user role to focus on admin or staff logins specifically. Editor and admin sessions get more scrutiny than subscriber logins, and the table makes that scoping a one-click preset.
Audience
Security and operations
Account security review
Spot unused or stale magic links and rotate auth policy before something is compromised. A weekly preset on expired tokens by user catches accounts no one is actually using.
Onboarding support
Help a new staff member when their link expires by reissuing inline in seconds. The support agent sees the expired row, clicks reissue, and the new link is in the user's inbox without a screen-share.
Compliance reporting
Export login records for SOC and internal audit reports without dumping the database. The CSV ships with masked tokens, so the file is safe to attach to a compliance ticket.
The bigger picture
Passwordless still needs an audit trail
Passwordless authentication removes phishing-prone passwords from the threat model and replaces them with a one-time email link. That is a real security upgrade, but it does not remove the audit requirement. SOC 2, ISO 27001, HIPAA, and most internal security programs all require evidence that a specific user authenticated at a specific time from a specific source.
With password logins, that evidence usually lives in the WordPress login log or a security plugin. With Magic Login, the equivalent record is the token table, and the default admin does not surface it in a way auditors can use. Worse, plenty of teams adopt Magic Login for the user experience and only realize months later that they have no exportable trail of who logged in when.
SleekView fills that gap without changing the authentication mechanism. The Magic Login token table already contains everything an auditor would ask for: user identity, IP address, timestamps for issue and use, and result. Surfacing it correctly turns a UX-driven choice into a compliance-defensible one, and lets a security team answer the question who logged in last week without writing SQL or filing a database access ticket.
Questions
Common questions about SleekView for Magic Login
Yes. Magic Login Pro extends the schema with additional columns for branded emails, expiration overrides, and per-role link lifetimes, and SleekView picks up new columns when you re-scan the table. The same masking, filtering, and preset features work; you just have more metadata fields available for filters and sorts.
 Yes. Token state is a filterable column with values for pending, used, expired, and revoked. A common audit preset filters to expired in the last 30 days and groups by user, which surfaces both staff who never use their links and users whose mail flow may be silently failing for some other reason.
 No. Token values are masked by default and only the metadata, meaning user, IP, issued and used timestamps, and result, is shown. If a security investigation needs the raw token, it can be unmasked for a specific role temporarily, but the default and the CSV export keep it hidden so the table can be embedded for compliance staff safely.
 Yes. Use a custom capability mapped to a compliance role and the frontend embed to give read-only access to the table without granting full WordPress admin. The embed respects the same filters and presets as the admin view, so an auditor lands on a dashboard scoped to exactly the data they are entitled to see.
 Yes. On a multisite network, you can scope the view to a single subsite by site_id or aggregate across the network with a site column visible. That pattern is useful for managed WordPress hosts where one network houses many client sites and a single security team reviews all of them.
 Yes. Bulk delete fires Magic Login's revocation hooks rather than touching the database directly, so any custom integrations or audit listeners run as expected. That preserves the integrity of the audit trail itself: a revoked token leaves a record of who revoked it and when, not just an empty row.
 Indirectly, through scheduled CSV exports or REST. The Magic Login token table is a normal WordPress table, and SleekView's filtered exports can be pushed to S3 or pulled by Splunk, Datadog, or a generic SIEM through standard means. The data shape is straightforward enough that mapping is a one-time job rather than ongoing engineering.
 That depends on Magic Login's own retention configuration plus your data policy. SleekView does not change retention; it surfaces what is in the table. If your policy requires 12 months of authentication logs for SOC, configure Magic Login to keep tokens at least that long and run a periodic CSV export as a secondary archive in case retention shortens later.
 Pricing
More than 1000+
happy customers
Explore our flexible licensing options tailored to your needs. Upgrade your license anytime to access more features, or opt for a lifetime license for ongoing value, including lifetime updates and lifetime support. Our hassle-free upgrade process ensures that our platform can grow with you, starting from whichever plan you choose.
Lifetime ♾️
Most popular
EUR
once
- Unlimited websites
- Lifetime updates
- Lifetime support
...or get the Bundle Deal
and save €250 🎁
The Bundle (unlimited sites)
Pay once, own it forever
Elevate your WordPress site with our exclusive plugin bundle that includes all of our premium plugins in one package. Enjoy lifetime updates and lifetime support. Save significantly compared to buying plugins individually.
What’s included
-
SleekAI
-
SleekByte
-
SleekMotion
-
SleekPixel
-
SleekRank
-
SleekView
€749
Continue to checkout