A powerful and easy-to-use WordPress plugin for passwordless and OTP-based login.

corytrevor

Mailsure

Rafal Puczel of RFS WP

RFS Email Verification for Gravity Forms

OTP (One Time Password) Email Verification for Gravity Forms. Verify or authenticate your users. It’s also great way to avoid spam.

One Loop Studio

OLS 2FA

OLS 2FA is a lightweight plugin that enhances your website's security by adding email two-factor authentication (2FA).

DuoCircle LLC

DMARCREPORT Domain Auth Checker

Check SPF, DMARC, BIMI, MTA-STS and TLS-RPT records for any domain. Embed email authentication checkers with a shortcode.

Sadekur Rahman

<p><strong>Password Less Login</strong> is a passwordless and OTP-based login system for WordPress.<br />
Every user — both existing and new — must verify their identity using a <strong>One-Time Password (OTP)</strong> sent to their email before being logged in.</p>
<p>This ensures that no one can access an account without confirming ownership of the email address, providing a secure, passwordless authentication process.</p>
<h3>How It Works</h3>
<ol>
<li>The user enters their email address.</li>
<li>The plugin sends a <strong>6-digit OTP</strong> to that email.</li>
<li>The user enters the OTP:
<ul>
<li>If the email exists <span aria-hidden="true" class="wp-exclude-emoji">→</span> the user is securely logged in.</li>
<li>If the email is new <span aria-hidden="true" class="wp-exclude-emoji">→</span> the user provides a username, verifies the OTP, and a new account is created automatically.</li>
</ul>
</li>
<li>The OTP is valid for <strong>10 minutes</strong> and expires after use.</li>
</ol>
<blockquote>
<p><strong>Note:</strong> The plugin never logs in users without OTP verification.</p>
</blockquote>
<h3>Key Features</h3>
<ul>
<li><strong>OTP-Based Authentication for All Users</strong> – Both existing and new users must verify the OTP before login.</li>
<li><strong>Passwordless Login</strong> – Securely log in using only your email and OTP.</li>
<li><strong>Auto User Registration</strong> – New users can register instantly after OTP verification.</li>
<li><strong>Temporary OTP (10 Minutes)</strong> – Each OTP expires after 10 minutes and can only be used once.</li>
<li><strong>Rate Limiting</strong> – Prevents brute-force or spam OTP requests (maximum 5 per 15 minutes per email).</li>
<li><strong>Nonce Verification</strong> – Protects REST API endpoints from unauthorized access.</li>
<li><strong>Secure Email Handling</strong> – Emails are hashed when stored in transients to protect user data.</li>
<li><strong>Streamlined User Experience</strong> – Clean, minimal login flow with conditional fields for existing vs. new users.</li>
</ul>
<h3>Why Choose Password Less Login?</h3>
<ul>
<li>No passwords to remember or reset.</li>
<li>OTP verification ensures true ownership of email.</li>
<li>Protects against brute-force attacks.</li>
<li>Simple setup – works with the native WordPress login page.</li>
<li>Modern and user-friendly design.</li>
<li>Reduces “Forgot Password” support requests.</li>
</ul>
<h3>Usage</h3>
<ol>
<li>Go to your WordPress login page.</li>
<li>Enter your email address and click “Send OTP”.</li>
<li>Check your email for the OTP.</li>
<li>Enter the OTP in the login form:
<ul>
<li>If your account exists, you’ll be logged in.</li>
<li>If not, you’ll be prompted to provide a username before registration and login.</li>
</ul>
</li>
<li>You’ll be redirected to your dashboard after successful verification.</li>
</ol>
<h3>License</h3>
<p>This plugin is released under the GPL license. You are free to use and modify it.</p>
<p>For support, contact: <a href="mailto:sadekur0rahman@gmail.com" rel="nofollow ugc">sadekur0rahman@gmail.com</a></p>


Alternatives to Password Less Login

Top alternatives