Security (PRO)
Can Trusted Email Domains Bypass Account Creation?
Quick Answer
Yes. Trusted Domains (PRO) lets people whose email is on a trusted domain receive a Magic Link even if they do not already have a WordPress account. When they log in, a user account is created automatically with a role you choose.
Where To Find It
Go to Settings → Security → Trusted Domains.
- Add each domain you trust, for example
partner.comorschool.edu. - Choose the role that auto-created users receive (for example Subscriber or Customer).
How It Works
- A visitor requests a Magic Link with an email on a trusted domain.
- If no account exists for that email, Magic Link creates one with your chosen role.
- The link logs them in as usual.
Because a real WordPress account is created, the user keeps normal access on their next visit.
Why Site Owners Use It
It saves manual work when you already know the people you want to allow but do not want to create accounts one by one. Trusted Domains can make it easier to:
- Onboard new users automatically
- Reduce manual account setup
- Support partners, staff, or students
Example
If partner.com is trusted and set to the Subscriber role, then name@partner.com can request a Magic Link with no existing account. On first login, a Subscriber account is created for them.
Related
