Attributes User Access

Attributes User Access replaces the generic wp-login.php screen with fully branded, on-theme login, lost password, password reset and registration pages — built with shortcodes or blocks, and completely compatible with WordPress core.

It is a lightweight, developer-friendly authentication toolkit: you get clean front-end forms, flexible role-based redirects, and template overrides, without a page builder and without touching WordPress core.

Why site owners use it

The default WordPress login page sends every visitor to an unbranded /wp-admin/ screen. Attributes User Access lets you serve a login and registration experience that matches your site, control exactly where each role lands after signing in, and keep everything update-safe.

Free features

• Custom authentication pages — Login, Lost Password, Reset Password and Registration, as shortcodes or blocks.
• Redirect the native login — send wp-login.php requests to your own branded pages.
• Role-based & context-aware redirection — define where users go after login and logout, per role.
• Theme template overrides — copy any form template into your theme (your-theme/attributes/front/forms/login-form.php) for full markup control; overrides survive updates.
• Built for developers — PSR-4 autoloading, object-oriented, extensible with action and filter hooks (e.g. attrua_login_form_fields, attrua_after_login_form).
• Lightweight by design — selective asset loading, transient caching, and minified production assets.
• Update-safe — adapts to WordPress core changes so your login pages keep working.

Upgrade to Attributes User Access Pro

Pro turns the plugin into a complete authentication, security and user-management suite — the kind of stack most sites assemble from five or six separate plugins (login customizer, 2FA, IP firewall, audit log, SMTP, password policy, maintenance mode), unified in one.

• Member pages — Account, Profile, Settings and Onboarding flows.
• Visual Form Builder — 20+ field types with validation, conditional logic, storage mapping to WordPress user columns/meta, and dynamic default-value tokens.
• Authentication methods — Two-Step (2FA), Passwordless email login, and Social OAuth sign-in.
• Security — IP blocking (single IP, CIDR range, IPv6, with expiry), reCAPTCHA, and a password policy (complexity, expiration, history).
• Audit log — 50+ security events across categories, retention control and CSV export.
• Registration control — email verification, disposable-email blocking and domain validation.
• Email & SMTP — Gmail / Google Workspace and Microsoft 365 via OAuth2, App Password, Resend or custom SMTP, plus templated emails and broadcast messaging.
• Maintenance mode — proper 503 response, role/IP whitelist, bypass URL and scheduling.
• Block Editor & Elementor — native form widgets with full style controls.
• Emergency admin access — an anti-lockout safeguard for administrators.

Learn more and view pricing at attributeswp.com. All Pro plans include updates, support and a 30-day money-back guarantee.