How Do I Track Magic Link Logins in WordPress?

Quick Answer

The free Audit Log records every Magic Link event on your site so you can see exactly what happened, when, and for which user. Open it under Magic Link > Audit Log.

What the Audit Log Records

The Audit Log captures each stage of a link's life. Recorded event types include:

• Generated — a link was created (from the login form, admin, or WP-CLI).
• Sent — the email containing the link was handed off for delivery.
• Delivered — the email reached the recipient's mail server.
• Opened — the recipient opened the link.
• Used — the link was successfully used to sign in.
• Expired — the link passed its token lifespan before use.
• Revoked — an admin invalidated the link.
• Failed — the sign-in or send attempt did not complete.
• Bounced — the email could not be delivered.

Filtering and Searching

The Audit Log is built for quick review, even on busy sites:

• Event-type filter — narrow the list to a single event, such as only Used or only Failed.
• Free-text search — find entries by email address or user.
• Pagination — move through large histories without loading everything at once.

Why This Matters

If you run a membership site, store, or private portal, this history is more than numbers. It tells you whether links are reaching users, whether sign-ins are completing, and whether anything is failing or being revoked.

A run of Failed or Bounced events usually points to an email deliverability problem. A healthy mix of Sent, Opened, and Used events means users are reaching their accounts without friction.

Best Uses

The Audit Log is especially useful for:

• Membership websites
• WooCommerce stores
• Customer portals
• High-traffic sites
• Teams that want a clear login audit trail

If events look wrong or emails are not arriving, see Troubleshooting and the Health Check page.