by Syed Balkhi
4.6 (64 reviews)
Login for Google Apps
Simple secure login and user management through your Google Workspace for WordPress (using oAuth2 and MFA if enabled).
Compatible with WP 6.8.3
v3.5.2
Current Version v3.5.2
Updated 7 months ago
Last Update on 08 May, 2025
Synced 17 hours ago
Last Synced on
Rank
#1,923
—
No change
Active Installs
10K+
—
No change
KW Avg Position
103.5
—
No change
Downloads
655.5K
—
Total downloads
Support Resolved
0%
—
No change
Rating
92%
Review 4.6 out of 5
4.6
(64 reviews)
Next Milestone 20K
10K+
20K+
406
Ranks to Climb
-
Growth Needed
15,000
Current Installs
Need 5,000 more installs to reach 20K+
Rank Changes
Current
#1,923
Change
Best
#
Active Installs Growth
Current
15,000+
Growth
Peak
15,000
Downloads Growth
Downloads
Growth
Peak
Reviews & Ratings
4.6
64 reviews
Overall
92%
5
56
(88%)
4
1
(2%)
3
1
(2%)
2
1
(2%)
1
5
(8%)
Tracked Keywords
Showing 2 of 2Unlock Keyword Analytics
Track keyword rankings, search positions, and discover new ranking opportunities with a Pro subscription.
- Full keyword position tracking
- Historical ranking data
- Competitor keyword analysis
Track This Plugin
Get detailed analytics, keyword tracking, and position alerts delivered to your inbox.
Start Tracking FreePlugin Details
- Version
- 3.5.2
- Last Updated
- May 08, 2025
- Requires WP
- 5.5+
- Tested Up To
- 6.8.3
- PHP Version
- 7.2 or higher
- Author
- Syed Balkhi
Support & Rating
- Rating
- ★ ★ ★ ★ ★ 4.6
- Reviews
- 64
- Support Threads
- 0
- Resolved
- 0%
Keywords
Upgrade to Pro
Unlock keyword rankings, search positions, and detailed analytics with a Pro subscription.
Upgrade NowSimilar Plugins
Anti-Malware Security and Brute-Force Firewall
100K+ installs
#296
WPS Limit Login
100K+ installs
#312
reCaptcha by BestWebSoft
100K+ installs
#317
NinjaFirewall (WP Edition) – Advanced Security Plugin and Firewall
100K+ installs
#375
CAPTCHA 4WP – Antispam CAPTCHA solution for WordPress
100K+ installs
#392
Frequently Asked Questions
Common questions about Login for Google Apps
Please feel free to email contact us on https://wp-glogin.com/ with any questions, as we may be able to help, but you may be required to purchase a support license if the problem is specific to your installation or requirements.
Is login restricted to the Google Workspace domain I use to set up the plugin?
No, once you set up the plugin, any WordPress accounts whose email address corresponds to any Google account, whether on a different Google Workspace domain or even a personal gmail.com account, will be able to use 'Login with Google' to easily connect to your WordPress site.
However, our premium plugin has features that greatly simplify your WordPress user management if your WordPress users are mostly on the same Google Workspace domain(s).
Does the plugin work with HTTP or HTTPS login pages?
The plugin will work whether your site is configured for HTTP or HTTPS.
However, you may have configured your site to run so that the login pages can be accessed by either HTTP or HTTPS. In that case, you may run into problems.
We recommend that you set FORCE_SSL_ADMIN
to true. This will ensure that all users are consistently using HTTPS for login.
You may then need to ensure the Redirect URL and Web Origin in the Google Cloud Console are set as HTTPS (this will make sense if you follow the installation instructions again).
If for some reason you cannot set FORCE_SSL_ADMIN, then instead you can add two URLs to the Google Cloud Console for each entry, e.g. Redirect URL = https://example.com/wp-login.php, and then add another one for https://example.com/wp-login.php. Same idea for Web Origin.
Does the plugin work on Multisite?
It is written, tested, and secure for multisite WordPress, both for subdirectories and subdomains, and must be activated network-wide for security reasons.
There are many different possible configurations of multisite WordPress, however, so you must test carefully if you have any other plugins or special setup.
In a multisite setup, you will see an extra option in Settings -> Login for Google Apps, named 'Use sub-site specific callback from Google'. Read details in the configuration instructions (linked from the Settings page). This setting will need to be ON if you are using any domain mapping plugin, and extra Redirect URIs will need to be registered in Google Cloud Console.
Is it secure?
Yes, and depending on your setup, it can be much more secure than just using WordPress usernames and passwords.
However, the author does not accept liability or offer any guarantee, and it is your responsibility to ensure that your site is secure in the way you require.
In particular, other plugins may conflict with each other, and different WordPress versions and configurations may render your site insecure.
Does it conflict with any other plugins?
Sometimes conflicts can arise. We have built workarounds for some problems, and would always appreciate your feedback to resolve any issues you might encounter yourself.
One known issue is with iThemes Security: the settings 'filter suspicious query strings' and 'filter long URL strings' can both cause intermittent conflicts and should be turned off if you are happy with the implications.
My Private Site - Try setting the My Private Site option "Omit ?redirect_to= from URL (this option is recommended for Custom Login pages)".
WP Email Login - incompatible with Login for Google Apps
How does it compare to other 3rd party auth plugins?
Login for Google Apps uses the latest secure OAuth2 authentication recommended by Google. Other 3rd party authentication plugins may allow you to use your Google username and password to login, but they do not always do this securely:
Other plugins: Users' passwords may be handled by your blog's server, potentially unencrypted. If these are compromised, hackers would be able to gain access to your Google email accounts! This includes all
Google Workspace apps (Gmail, Drive, Calendar, etc.), and any other services which use your Google account to log in.
This plugin: Users' passwords are only ever submitted to Google itself, then Google is asked to authenticate the user to your WordPress site. This means Multi-factor Authentication can still be used (if set up on your Google account).
Your website only requires permission to authenticate the user and obtain basic profile data - it can never have access to your emails and other data.
Is login restricted to the Google Workspace domain I use to set up the plugin?
No, once you set up the plugin, any WordPress accounts whose email address corresponds to any Google account, whether on a different Google Workspace domain or even a personal gmail.com account, will be able to use 'Login with Google' to easily connect to your WordPress site.
However, our premium plugin has features that greatly simplify your WordPress user management if your WordPress users are mostly on the same Google Workspace domain(s).
Does the plugin work with HTTP or HTTPS login pages?
The plugin will work whether your site is configured for HTTP or HTTPS.
However, you may have configured your site to run so that the login pages can be accessed by either HTTP or HTTPS. In that case, you may run into problems.
We recommend that you set FORCE_SSL_ADMIN
to true. This will ensure that all users are consistently using HTTPS for login.
You may then need to ensure the Redirect URL and Web Origin in the Google Cloud Console are set as HTTPS (this will make sense if you follow the installation instructions again).
If for some reason you cannot set FORCE_SSL_ADMIN, then instead you can add two URLs to the Google Cloud Console for each entry, e.g. Redirect URL = https://example.com/wp-login.php, and then add another one for https://example.com/wp-login.php. Same idea for Web Origin.
Does the plugin work on Multisite?
It is written, tested, and secure for multisite WordPress, both for subdirectories and subdomains, and must be activated network-wide for security reasons.
There are many different possible configurations of multisite WordPress, however, so you must test carefully if you have any other plugins or special setup.
In a multisite setup, you will see an extra option in Settings -> Login for Google Apps, named 'Use sub-site specific callback from Google'. Read details in the configuration instructions (linked from the Settings page). This setting will need to be ON if you are using any domain mapping plugin, and extra Redirect URIs will need to be registered in Google Cloud Console.
Is it secure?
Yes, and depending on your setup, it can be much more secure than just using WordPress usernames and passwords.
However, the author does not accept liability or offer any guarantee, and it is your responsibility to ensure that your site is secure in the way you require.
In particular, other plugins may conflict with each other, and different WordPress versions and configurations may render your site insecure.
Does it conflict with any other plugins?
Sometimes conflicts can arise. We have built workarounds for some problems, and would always appreciate your feedback to resolve any issues you might encounter yourself.
One known issue is with iThemes Security: the settings 'filter suspicious query strings' and 'filter long URL strings' can both cause intermittent conflicts and should be turned off if you are happy with the implications.
My Private Site - Try setting the My Private Site option "Omit ?redirect_to= from URL (this option is recommended for Custom Login pages)".
WP Email Login - incompatible with Login for Google Apps
How does it compare to other 3rd party auth plugins?
Login for Google Apps uses the latest secure OAuth2 authentication recommended by Google. Other 3rd party authentication plugins may allow you to use your Google username and password to login, but they do not always do this securely:
Other plugins: Users' passwords may be handled by your blog's server, potentially unencrypted. If these are compromised, hackers would be able to gain access to your Google email accounts! This includes all
Google Workspace apps (Gmail, Drive, Calendar, etc.), and any other services which use your Google account to log in.
This plugin: Users' passwords are only ever submitted to Google itself, then Google is asked to authenticate the user to your WordPress site. This means Multi-factor Authentication can still be used (if set up on your Google account).
Your website only requires permission to authenticate the user and obtain basic profile data - it can never have access to your emails and other data.
PHP 7.2.x or higher with JSON extensions
WordPress 5.5 or above
And you will need a Google account to set up the plugin.
WordPress 5.5 or above
And you will need a Google account to set up the plugin.