Monitoring & Logs
Track Magic Link Logins in WordPress (Audit Log)
Need to know exactly who logged in, when, and whether their sign-in link worked? The free Audit Log in Magic Link records every event in a link's life and lets you browse, filter, and export the full history. Open it under Magic Link → Audit Log to see a timeline of generated, sent, delivered, opened, and used events for every user.
What is the Magic Link Audit Log?
The Audit Log is a built-in, browsable record of every passwordless login event on your WordPress site. Each time a magic link is created, emailed, opened, or consumed, Magic Link writes a row you can review later. It is included in the free version and needs no configuration to start recording.
Open the Audit Log
- In the WordPress admin, go to Magic Link → Audit Log.
- The most recent events load first, newest at the top.
- Use the filters and search to narrow the view (see below).
What the Audit Log records
The log captures each stage of a link's life. Recorded event types are:
| Event | What it means |
|---|---|
| Generated | A link was created (from the login form, admin, or WP-CLI). |
| Sent | The email containing the link was handed off for delivery. |
| Delivered | The email reached the recipient's mail server. |
| Opened | The recipient opened the link. |
| Used | The link was successfully used to sign in. |
| Expired | The link passed its token lifespan before it was used. |
| Revoked | An admin invalidated the link. |
| Failed | A send or sign-in attempt did not complete. |
| Bounced | The email could not be delivered. |
Filter, search, and export
The Audit Log is built for quick review, even on busy sites:
- Event-type filter — narrow the list to a single event, such as only Used or only Failed.
- Free-text search — find entries by email address or user.
- Pagination — move through large histories without loading everything at once.
- CSV export — download the current view to open in a spreadsheet or attach to a support ticket.
How to read the log
The event mix tells you whether logins are healthy:
- A run of Failed or Bounced events usually points to an email deliverability problem. Confirm sending on the Health page.
- A steady flow of Sent, Opened, and Used events means users are reaching their accounts without friction.
- Expired events clustering before Used can mean your token lifespan is too short — adjust it on the expiry settings page.
If events look wrong or emails are not arriving, see Troubleshooting.
Automatic anomaly detection (PRO)
PRO feature
Magic Link PRO adds anomaly detection on top of the audit log, flagging unusual patterns such as bursts of failed sign-ins so you can act before they become a problem. The browsable log, filters, and CSV export described above are free; automatic anomaly detection requires PRO.
Conclusion
The free Audit Log gives you a complete, filterable, exportable record of every Magic Link event, so you can confirm sign-ins are working and catch delivery or security problems early. Pair it with a scheduled summary from the Email Digest, and confirm your setup on the Health page.
FAQs
Is the Magic Link Audit Log free?
Yes. The Audit Log ships with the free version of Magic Link and records every login event with no configuration. You can browse it, filter by event type, search by email or user, and export the current view to CSV. Automatic anomaly detection over the log is a PRO addition, but the log itself is free.
Where do I find the login history in WordPress?
Go to Magic Link → Audit Log in your WordPress admin. The page lists every magic-link event newest-first, with a filter for event type and a free-text search for email addresses or users. This is the single place to see when links were generated, sent, delivered, opened, and used.
What login events does Magic Link track?
The Audit Log records nine event types: generated, sent, delivered, opened, used, expired, revoked, failed, and bounced. Together they cover a link's full life — from creation and email delivery through to a successful sign-in, expiry, or an admin revoking it.
Can I export the Magic Link audit log?
Yes. The Audit Log includes a CSV export of the current view, so you can open the history in a spreadsheet, archive it, or attach it to a support request. Apply an event-type filter or search first to export just the rows you need.
How do I tell if magic link emails are failing?
Filter the Audit Log to the Failed and Bounced events. A cluster of these usually means an email deliverability problem rather than a plugin fault. Confirm that WordPress can send mail on the Health page, and follow the Troubleshooting guide to fix delivery.
