Luxa Users − Login, Registration & Profile Plugin for WordPress

Luxa Users is a free WordPress plugin for clean, secure login, registration, and profile forms — with optional Pro add-ons for mobile login, social login, and more.

Luxa Users replaces WordPress’s default login screen with clean, modern, fully responsive forms you can drop into any page with a single shortcode. Login, registration, password recovery, and user profiles — all AJAX-powered, all extensible, all free.

Built for WordPress developers and site owners who want a login experience that actually matches their site’s design, without wrestling with wp-login.php templates or bloated all-in-one membership plugins.

A Pro version is in development, adding Mobile Number Login, an Add-on Manager, extra themes, and more. A dedicated product page for Pro is coming soon.

Features

Forms & Shortcodes

  • [lxu_login] — Login form with an inline “Forgot password” panel, no page redirect required
  • [lxu_register] — Registration form with optional email verification
  • [lxu_profile] — Logged-in user profile page: avatar, bio, contact info, password change
  • [lxu_forgot_password] — Standalone password reset form
  • Everything runs over AJAX — no full page reloads on submit

Design

  • 5 built-in themes (Default, Minimal, Card, Split, Rounded)
  • Custom primary color picker
  • Fully responsive, mobile-first CSS
  • Disable the plugin’s CSS entirely if you’d rather style forms yourself

Security

  • Email verification on registration (optional, on by default)
  • Login attempt rate limiting with configurable lockout duration
  • Real Google reCAPTCHA v3 verification (score-based, not just a checkbox)
  • Login via username or email address
  • Avatar uploads are size- and type-restricted server-side

For Developers

  • Clean, namespaced codebase (LuxaUsers\) with a small service container — no spaghetti globals
  • A full set of action hooks and filters for every form and save path, so add-ons and custom code never need to touch core files
  • Translation-ready (English source strings, standard .pot-ready structure)
  • No page builder or third-party dependency required

Changelog

July 14, 2026 — v2.0.7
Fixed an issue where the Add-ons admin page could show conflicting content when running alongside the Pro add-on.

July 13, 2026 — v2.0.6
Fixed a subtle WordPress core behavior that could, in rare cases, cause a settings save to silently revert on the very first save. Admin page layout now uses the full available width instead of a cramped fixed column.

July 12, 2026 — v2.0.3 – v2.0.5
Google reCAPTCHA v3 now performs real server-side verification (previously the settings existed but weren’t wired up). Hardened the “resend verification email” endpoint against abuse. Fixed a translation-loading bug that silently prevented .mo files from ever loading. Fixed asset loading so forms embedded via widgets, page builders, or reusable blocks now reliably load their styles and scripts.

July 10, 2026 — v2.0.0
Complete rebuild on a new internal architecture: a proper service container, a filter-driven settings and navigation system, and clean extension points for future add-ons. New shortcode namespace ([lxu_*]), five form themes, and a redesigned admin dashboard.