Takayuki Miyauchi

<p>Use your email address instead of a username to login into your WordPress.</p>
<p>It is an easy way to protect from brute-force attacks.</p>
<p>https://github.com/miya0001/force-email-login</p>
<h4>Some features:</h4>
<ul>
<li>Use email address instead of the username to login.</li>
<li>Login with the username is always denied.</li>
</ul>
<h4>Contributors</h4>
<ul>
<li><a href="http://wpist.me/" rel="nofollow ugc">Takayuki Miyauchi</a></li>
<li><a href="https://github.com/chrisvanpatten" rel="nofollow ugc">Chris Van Patten</a></li>
</ul>


Force Email Login

Use your email address instead of a username to login into your WordPress.

oaron

<p>OneCode Login provides a modern, passwordless authentication experience for your WordPress site. Instead of traditional passwords, users receive a secure 6-digit verification code via email.</p>
<h4>Key Features</h4>
<ul>
<li><strong>Passwordless Authentication</strong> – Users log in with just their email address</li>
<li><strong>6-Digit Verification Codes</strong> – Secure, time-limited codes sent via email</li>
<li><strong>Rate Limiting</strong> – Built-in protection against brute force attacks</li>
<li><strong>Request ID Binding</strong> – Each code is bound to a specific login session for enhanced security</li>
<li><strong>Neutral Feedback</strong> – Prevents user enumeration attacks by not revealing if an email exists</li>
<li><strong>Customizable</strong> – Configure expiry times, cooldowns, and email templates</li>
<li><strong>Accessible</strong> – Full keyboard navigation and screen reader support</li>
<li><strong>Gutenberg Block</strong> – Easy to add login forms to any page</li>
<li><strong>Shortcode Support</strong> – Use [onecode_login] anywhere</li>
<li><strong>wp-login.php Integration</strong> – Optionally replace the default WordPress login</li>
</ul>
<h4>Security Features</h4>
<ul>
<li>Cryptographically secure code generation</li>
<li>Configurable code expiry (default: 10 minutes)</li>
<li>Resend cooldown to prevent spam</li>
<li>IP-based and email-based rate limiting</li>
<li>Automatic lockout after failed attempts</li>
<li>Codes are single-use and invalidated after successful login</li>
</ul>
<h4>Use Cases</h4>
<ul>
<li>Membership sites where password fatigue is an issue</li>
<li>Customer portals requiring simple authentication</li>
<li>Internal tools where security without complexity is needed</li>
<li>Any site wanting to improve user experience</li>
</ul>


OneCode Login

Simple and secure passwordless login using email verification codes. No passwords to remember, just enter your email and verify with a 6-digit code.

Force Email Login vs OneCode Login