BerryPress

LoginBerry bundles account verification, two-factor authentication (2FA), passwordless login, and login logs. Each feature can be enabled or disabled independently. Outgoing codes are delivered by email.
The plugin works for standard WordPress sites. When WooCommerce is active, additional customer- and order-related options are available (for example 2FA on the My Account login form and optional account activation tied to orders).
<h4>User-facing behavior (when features are enabled)</h4>
<ul>
<li>Account verification: After registration, the user signs in and completes activation on the configured activation page using a six-digit code sent by email.</li>
<li>Two-factor authentication: After a successful username and password, the user enters a second code sent by email. Per-role modes are Required, Optional, or Disabled.</li>
<li>Passwordless login: On <code>wp-login.php</code>, eligible roles may request a one-time email code instead of entering a password.</li>
<li>Login logs: Success and failure records are listed in the WordPress admin.</li>
</ul>
Authentication codes are email-based; end users do not install a separate authenticator app for the flows described here.
<h4>Account verification</h4>
<ul>
<li>New accounts receive a six-digit activation code by email.</li>
<li>After fifteen failed activation attempts, the account is locked until an administrator intervenes.</li>
<li>Administrators can resend codes, activate accounts manually, and unlock accounts from Users → All Users.</li>
</ul>
<h4>Two-factor authentication (2FA)</h4>
<ul>
<li>Per-role setting: Required, Optional, or Disabled.</li>
<li>Optional mode allows users to enable 2FA from the profile when permitted by role.</li>
<li>Supported on <code>wp-login.php</code> and on the WooCommerce My Account login form.</li>
</ul>
<h4>Passwordless login</h4>
Let users log in without a password – just enter a username or email and receive a one-time login code. Improves user experience while maintaining strong security through email verification.
<ul>
<li>Toggle between password and passwordless login on wp-login.php</li>
<li>One-time email codes on <code>wp-login.php</code>, controlled per role.</li>
<li>When both passwordless login and 2FA are enabled for the same role, the passwordless flow does not require a separate 2FA step (email possession is already verified).</li>
</ul>
<h4>WooCommerce</h4>
<ul>
<li>Optional automatic account activation when an WooCommerce order is created.</li>
<li>Optional restriction so that only paid orders trigger activation.</li>
<li>Integration points include classic checkout, block checkout (Store API), and paid-order completion hooks, as implemented in the plugin.</li>
</ul>
<h4>Login logs</h4>
Monitor all login activity on your site. Essential for detecting suspicious behavior and meeting security compliance requirements for e-commerce stores.
<ul>
<li>Records successful and failed login attempts</li>
<li>Logs username, email, IP address, and timestamp</li>
<li>View all logs in a dedicated admin page with sortable columns</li>
<li>Identify patterns of brute force attacks and suspicious login activity</li>
<li>Audit trail for security compliance and fraud investigation</li>
</ul>
<h4>Admin interface</h4>
<ul>
<li>Centralized settings under BerryPress → LoginBerry, with separate screens per feature.</li>
</ul>
<h4>Email templates</h4>
HTML email templates for activation, 2FA, and passwordless login ship in the plugin <code>templates/</code> directory. To override, copy the desired template into the active theme or child theme under <code>templates/loginberry/</code> (see each template file header for the exact path).
<h4>Email delivery</h4>
Reliable outbound email is required for codes to arrive. Typical setups use the hosting provider’s mail relay, a transactional email API (for example Brevo, Mailchimp Transactional / Mandrill, Postmark, SendGrid, Amazon SES), or a WordPress plugin that sends mail via SMTP or a provider API. Test delivery with a real signup or code request before relying on the feature in production.
<h4>Typical use cases</h4>
<ul>
<li>Reducing unwanted or automated registrations and limiting abuse of disposable email addresses.</li>
<li>Verifying that a customer or member controls the email address on file.</li>
<li>Adding a second factor after password entry for selected roles.</li>
<li>Reviewing login success and failure history in the admin.</li>
<li>WooCommerce: applying optional post-order account activation, including a paid-order-only mode where configured.</li>
</ul>
<h4>Roadmap</h4>
LoginBerry is a brand new plugin and we are improving it quickly based on real user feedback. If you have ideas, feature requests, or run into a theme-specific styling issue, we would love to hear from you.
Planned work includes:
<ul>
<li>Configurable failed-attempt limits (instead of the fixed fifteen for activation lockout)</li>
<li>Track last login time for each user</li>
<li>Custom activation page URL</li>
<li>Custom redirect URL after successful verification</li>
<li>Rate limiting on code verification attempts</li>
<li>Social login options</li>
<li>Improved styling flexibility and theme compatibility</li>
</ul>
Feedback and compatibility reports are welcome via the plugin support channels. New features are prioritized based on user feedback.

LoginBerry – 2FA, Passwordless & Email Verification

Complete login security for WordPress & WooCommerce: LoginBerry adds email-based account verification, optional two-factor authentication (2FA), o …

Mike L

KaizenCoders

Say goodbye to forgotten passwords. Enable a secure, passwordless login experience for your WordPress site using email, SMS, or QR code magic links.
Magic Link makes traditional passwords a thing of the past. Instead of logging in with a username and password, users can log in simply by clicking a secure link sent to their email or phone. It’s quick, safe, and incredibly user-friendly.
Perfect for membership sites, WooCommerce stores, community forums, or any site that wants to simplify user authentication.
Core Benefits
<blockquote>
👉 Passwordless Login 
 No more password resets or weak password risks.
👉 Email Magic Links 
 A unique, expirable login link is emailed to users.
👉 Force Magic Link Login 
 Option to set Magic Link the default login method.
👉 Auto-login Links 
 Automatically log in users via links in notification emails for quicker actions.
👉 User-Friendly UX 
 Especially helpful for non-technical users or mobile-first visitors.
👉 Redirect After Login 
 Send users to a specific page after they log in.
👉 Create Magic Link for any user 
 Admin can create Magic Link for any user.
👉 List All Magic Links 
 Admin can view all generated Magic Links.
👉 Bulk Delete Magic Links 
 Select multiple Magic Links and delete in bulk.
👉 Shortcode Support 
 Add magic link login forms anywhere on your site with <code>[magic-link]</code>.
👉 Customizable Expiry 
 Set how long magic links remain valid (minutes, hours, days).
👉CLI Ready 
 Control plugin settings and features via WP-CLI.
👉 Fully Configurable [Coming Soon] 
 Export/import/reset settings with ease.
👉 GDPR Compliant 
 No personal data is stored beyond what WordPress already collects.
</blockquote>
🔐 Pro Features
<blockquote>
👉 Login URL Redirection 
 Redirect users to specific pages after login
👉 Role based redirection 
 Redirect users to specific pages after login
👉 Login Attempt Limits 
 Set limits on magic link generation
👉 Custom Email Templates 
 Customize email design and content.
👉 Improved Security 
 Avoid brute-force attacks and phishing risks related to password use.
👉 IP Control 
 Enhance the security by restricting users to login from the same IP address that requested the link.
👉 Login Request Throttling 
 Limit login URL generation for the given time span.
👉 Brute Force Protection 
 Limit rate of login attempts and block IP temporarily.
👉 Domain Restriction 
 Restrict email domains that can use the magic link login feature.
👉 Trusted Domains 
 Allow users with email addresses from specified trusted domains to receive Magic Links even if they don’t have a user account on the site.
👉 Bulk Actions: Expire, Used Links 
 Mark Magic Links as <code>Expired</code>, <code>Used</code> in bulk.
👉 Support <code>{magic-link}</code> merge tag 
 One can use <code>{magic-link}</code> merge tag in outgoing emails to auto generate Magic Link for the recipient. Useful for quick checkout, quick access to courses and other usecases where login is required.
👉 SMS Magic Links [Coming Soon] 
 Send login links via SMS text messages.
👉 QR Code Login [Coming Soon] 
 Generate QR codes for easy mobile login.
👉 Device Restrictions [Coming Soon] 
 Limit logins to specific devices/browsers.
👉 Role-Based Access [Coming Soon] 
 Control which user roles can use magic links.
👉 Analytics & Reporting [Coming Soon] 
 Track magic link usage and patterns.
👉 Priority Support 
 Get expert help when you need it.
</blockquote>
<h3>Integrations</h3>
<blockquote>
👉 WooCommerce Integration 
 Seamless checkout experience for returning customers.
</blockquote>
<h3>How It Works</h3>
<ol>
<li>A user enters their email address on the login screen.</li>
<li>A one-time, time-sensitive login link is emailed to them.</li>
<li>They click the link and are instantly logged into your site — no password needed!</li>
</ol>
<h3>Translations</h3>
Does Magic Link speak your language? If not, <a href="https://translate.wordpress.org/projects/wp-plugins/magic-link/" rel="nofollow ugc">translate “Magic Link” into your language</a>.
<h3>DO YOU HAVE ANY QUESTIONS/ FEEDBACK/ FEATURE REQUEST/ BUG REPORT❓</h3>
Feel free to create a ticket <a href="https://wordpress.org/support/plugin/magic-link/" rel="ugc">here</a>. We love to communicate with you and reply to all your queries.
<h3>Spread The Word ❤️</h3>
If you like Magic Link, please leave us a <a href="https://wordpress.org/support/plugin/magic-link/reviews/#new-post" rel="ugc">⭐⭐⭐⭐⭐</a> review and also spread the word about it via Facebook and Twitter. That helps fellow website owners assess Social Linkz easily and benefit from it!
<h3>What’s Next</h3>
If you like this plugin then consider checking out our other solutions:
<a href="https://wordpress.org/plugins/url-shortify/" rel="ugc">URL Shortify</a> – Simple, Powerful, and Easy URL Shortener Plugin For WordPress.
<blockquote>
URL Shortify helps you beautify, manage, and share any URL on or off of your WordPress website. Create links that look how you want using your domain name! It’s a Simple, Easy & Elegant self hosted alternative to Bitly, TinyURL, Cuttly, Pretty Links, URL Shortener By My Theme Shop, Rebrandly, BL.Link, Short.io, and many other SaaS URL Shortener services.
</blockquote>
<a href="https://wordpress.org/plugins/update-urls/" rel="ugc">Update URLs</a> – Quick and Easy way to search old links and replace them with new links in WordPress.
<blockquote>
If you move your WordPress website to a new domain name, you will find that internal links to pages and references to images are not updated. Instead, these links and references will point to your old domain name. Update URLs fixes that problem by helping you change old urls and links in your website.
</blockquote>
<a href="https://wordpress.org/plugins/logify/" rel="ugc">Logify</a>
<blockquote>
Logify is a comprehensive logging and monitoring plugin for WordPress that helps you keep track of various activities and events on your website. It provides detailed logs of user actions, system events, and errors, allowing you to monitor and troubleshoot your site effectively.
</blockquote>
<a href="https://wordpress.org/plugins/social-linkz/" rel="ugc">Social Linkz</a> – Lightweight and fast social media sharing plugin
<a href="https://wordpress.org/plugins/utilitify/" rel="ugc">Utilitify</a> – Supercharge Your WordPress Site With Power Pack WordPress Utilities
<blockquote>
It’s a simple & neat plugin which helps you to customize your WordPress setup in a very elegant way.
</blockquote>

LoginBerry – 2FA, Passwordless & Email Verification vs Magic Link – Secure one click passwordless login