Auto-Login (SSO)

WordPress Auto-Login

Access your WordPress admin dashboard with one click — no password needed.

How It Works

1. Click “WP Admin” or “Auto-Login” in the panel
2. BlitzPress generates a secure 32-character random token
3. The token is stored as a WordPress transient (temporary database entry)
4. You’re redirected to https://{domain}/wp-login.php?blitzpress_token=TOKEN
5. The evo-autologin.php mu-plugin validates the token and logs you in
6. The token expires after 60 seconds (single-use, time-limited)

Security

• Tokens are cryptographically random (URL-safe, 32 characters)
• Tokens expire after 60 seconds — cannot be reused
• Tokens are stored server-side as WordPress transients — never in cookies or URLs that persist
• Each click generates a new token — there’s no standing session

Default Login User

Auto-login uses the admin user by default (the first user created during WordPress installation). This can be changed per-site in advanced settings.