About this plugin
php screen with fully branded, on-theme login, lost password, password reset and registration pages — built with shortcodes or blocks, and completely compatible with WordPress core.
It is a lightweight, developer-friendly authentication toolkit: you get clean front-end forms, flexible role-based redirects, and template overrides, without a page builder and without touching WordPress core.
Why site owners use it
The default WordPress login page sends every visitor to an unbranded /wp-admin/ screen. Attributes User Access lets you serve a login and registration experience that matches your site, control exactly where each role lands after signing in, and keep everything update-safe.
Free features
- Custom authentication pages — Login, Lost Password, Reset Password and Registration, as shortcodes or blocks.
- Redirect the native login — send wp-login.php requests to your own branded pages.
- Role-based & context-aware redirection — define where users go after login and logout, per role.
- Theme template overrides — copy any form template into your theme ( your-theme/attributes/front/forms/login-form.php ) for full markup control; overrides survive updates.
- Built for developers — PSR-4 autoloading, object-oriented, extensible with action and filter hooks (e.g. attrua_login_form_fields, attrua_after_login_form ).
- Lightweight by design — selective asset loading, transient caching, and minified production assets.
- Update-safe — adapts to WordPress core changes so your login pages keep working.
Upgrade to Attributes User Access Pro
Pro turns the plugin into a complete authentication, security and user-management suite — the kind of stack most sites assemble from five or six separate plugins (login customizer, 2FA, IP firewall, audit log, SMTP, password policy, maintenance mode), unified in one.
- Member pages — Account, Profile, Settings and Onboarding flows.
- Visual Form Builder — 20+ field types with validation, conditional logic, storage mapping to WordPress user columns/meta, and dynamic default-value tokens.
- Authentication methods — Two-Step (2FA), Passwordless email login, and Social OAuth sign-in.
- Security — IP blocking (single IP, CIDR range, IPv6, with expiry), reCAPTCHA, and a password policy (complexity, expiration, history).
- Audit log — 50+ security events across categories, retention control and CSV export.
- Registration control — email verification, disposable-email blocking and domain validation.
- Email & SMTP — Gmail / Google Workspace and Microsoft 365 via OAuth2, App Password, Resend or custom SMTP, plus templated emails and broadcast messaging.
- Maintenance mode — proper 503 response, role/IP whitelist, bypass URL and scheduling.
- Block Editor & Elementor — native form widgets with full style controls.
- Emergency admin access — an anti-lockout safeguard for administrators.
com. All Pro plans include updates, support and a 30-day money-back guarantee.