Enable secure OTP login for WordPress with passwordless authentication using email-based one-time passwords (OTP) powered by Authyo.

smsgatewaycenter

SMS Gateway Center – Bulk SMS Sender

You need to be a registered member of www.smsgatewaycenter.com. Install this simple plugin and start sending bulk SMS. This gateway supports India and …

Konceptwise Digital Media Pvt Ltd

<p>Authyo Passwordless Login enables secure <strong>OTP login for WordPress</strong> using email-based one-time passwords. It replaces traditional passwords with a modern <strong>passwordless authentication system</strong> that improves login security and simplifies the user experience.</p>
<p>Users simply enter their email address, receive a one-time password (OTP), verify the code, and are automatically logged in — no passwords required.</p>
<p>This plugin is officially developed and maintained by <strong>Konceptwise Digital Media Pvt. Ltd.</strong> and uses <strong>Authyo’s secure OTP authentication infrastructure</strong>.</p>
<p>With Authyo Passwordless Login, WordPress administrators can implement <strong>passwordless login</strong>, improve <strong>account security</strong>, and eliminate risks related to password leaks or weak credentials.</p>
<h3>Key Features</h3>
<ul>
<li>Passwordless login for WordPress using email OTP</li>
<li>No passwords stored or required</li>
<li>Secure token-based authentication (single-use and time-limited)</li>
<li>OTP delivered via Authyo’s secure email service</li>
<li><strong>Fallback Method:</strong> Optional two-factor authenticator app if email OTP fails</li>
<li>Works with the default WordPress login page</li>
<li>AJAX-powered login flow (no page reloads)</li>
<li>Automatic dashboard redirect after successful login</li>
<li>Enable or disable passwordless login anytime</li>
<li>Compatible with custom login URL plugins (e.g., WPS Hide Login)</li>
</ul>
<h3>Use Cases</h3>
<p>This plugin is ideal for:</p>
<ul>
<li>WordPress sites that want <strong>OTP login instead of passwords</strong></li>
<li>Improving <strong>WordPress login security</strong></li>
<li>Enabling <strong>passwordless authentication</strong></li>
<li>Preventing password brute-force attacks</li>
<li>Membership websites and user portals</li>
<li>Sites that want a <strong>simple two-factor authentication alternative</strong></li>
</ul>
<h3>How It Works</h3>
<ol>
<li>User enters their email address on the WordPress login page</li>
<li>Authyo sends a one-time password (OTP) via email</li>
<li>User verifies the OTP</li>
<li>WordPress logs the user in automatically using a secure single-use token</li>
</ol>
<p>No password is required during the login process.</p>
<h3>About Konceptwise & Authyo</h3>
<p>Konceptwise Digital Media Pvt. Ltd. is the parent company and original developer of this plugin.</p>
<p><strong>Authyo</strong> is a secure authentication platform developed by Konceptwise that provides OTP-based verification services for websites and applications.</p>
<p>This plugin integrates WordPress with Authyo’s authentication infrastructure to provide secure passwordless login functionality.</p>
<h3>Video Tutorial</h3>
<p><strong>How to Use Authyo Passwordless Login</strong></p>
<p><span class="embed-youtube" style="text-align:center; display: block;"><iframe loading="lazy" class="youtube-player" width="750" height="422" src="https://www.youtube.com/embed/cStBvoHTzro?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent" allowfullscreen="true" style="border:0;" sandbox="allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox"></iframe></span></p>
<h3>External Services</h3>
<p>This plugin connects to Authyo’s external API to send and verify one-time passwords (OTP) for passwordless login functionality.</p>
<p>What data is sent:<br />
– User email address (sent to Authyo API when requesting OTP)<br />
– OTP code (sent to Authyo API for verification)<br />
– Mask ID (returned by Authyo API, used for OTP verification)</p>
<p>When data is sent:<br />
– When the user requests an OTP: Email address is sent to Authyo API<br />
– When the user submits an OTP for verification: OTP code and Mask ID are sent to Authyo API</p>
<p>Authentication Flow:<br />
– After successful OTP verification via Authyo API, the plugin generates a secure single-use token using WordPress core functions<br />
– This token is browser-bound using a hashed User-Agent signature to prevent session hijacking<br />
– The token is stored temporarily in WordPress transients and expires after 5 minutes<br />
– The token allows WordPress to complete authentication without requiring a password<br />
– Token is deleted immediately after verification (single-use security)</p>
<p>Purpose:<br />
– To verify ownership of the provided email address through OTP verification<br />
– After successful OTP verification, a secure browser-bound login token is generated<br />
– The token allows WordPress to authenticate users without passwords</p>
<p>Data Storage:<br />
– OTP session data (email, user ID, mask ID) is stored temporarily in WordPress transients (expires after 10 minutes)<br />
– Login tokens are stored temporarily in WordPress transients (expires after 5 minutes and deleted immediately after use)<br />
– No user data is permanently stored by this plugin</p>
<p>Terms of Service:<br />
https://authyo.io/terms-service</p>
<p>Privacy Policy:<br />
https://authyo.io/privacy-policy</p>
<h3>Requirements</h3>
<ul>
<li>WordPress 5.0 or higher</li>
<li>PHP 7.2 or higher</li>
<li>An active Authyo account with API credentials</li>
</ul>
<h3>Configuration</h3>
<h4>Getting Authyo API Credentials</h4>
<ol>
<li>Sign up for an account at https://authyo.io</li>
<li>Log in to your Authyo dashboard</li>
<li>Navigate to your application settings</li>
<li>Copy your <strong>App ID</strong>, <strong>Client ID</strong>, and <strong>Client Secret</strong></li>
</ol>
<h4>Plugin Setup</h4>
<ol>
<li>Go to <strong>Settings <span aria-hidden="true" class="wp-exclude-emoji">→</span> Authyo Passwordless Login</strong></li>
<li>Enable <strong>Passwordless Login</strong></li>
<li>Enter your Authyo API credentials:
<ul>
<li>Authyo App ID</li>
<li>Authyo Client ID</li>
<li>Authyo Client Secret</li>
</ul>
</li>
<li>Click <strong>Save Settings</strong></li>
</ol>
<p>Once configured, the passwordless login form will appear on your WordPress login page.</p>


Alternatives to Authyo Passwordless Login

Top alternatives