BerryPress

<p>LoginBerry bundles <strong>account verification</strong>, <strong>two-factor authentication (2FA)</strong>, <strong>passwordless login</strong>, and <strong>login logs</strong>. Each feature can be enabled or disabled independently. Outgoing codes are delivered by <strong>email</strong>.</p>
<p>The plugin works for standard WordPress sites. When WooCommerce is active, additional customer- and order-related options are available (for example 2FA on the My Account login form and optional account activation tied to orders).</p>
<h4>User-facing behavior (when features are enabled)</h4>
<ul>
<li><strong>Account verification:</strong> After registration, the user signs in and completes activation on the configured activation page using a six-digit code sent by email.</li>
<li><strong>Two-factor authentication:</strong> After a successful username and password, the user enters a second code sent by email. Per-role modes are Required, Optional, or Disabled.</li>
<li><strong>Passwordless login:</strong> On <code>wp-login.php</code>, eligible roles may request a one-time email code instead of entering a password.</li>
<li><strong>Login logs:</strong> Success and failure records are listed in the WordPress admin.</li>
</ul>
<p>Authentication codes are email-based; end users do not install a separate authenticator app for the flows described here.</p>
<h4>Account verification</h4>
<ul>
<li>New accounts receive a six-digit activation code by email.</li>
<li>After fifteen failed activation attempts, the account is locked until an administrator intervenes.</li>
<li>Administrators can resend codes, activate accounts manually, and unlock accounts from <strong>Users <span aria-hidden="true" class="wp-exclude-emoji">→</span> All Users</strong>.</li>
</ul>
<h4>Two-factor authentication (2FA)</h4>
<ul>
<li>Per-role setting: Required, Optional, or Disabled.</li>
<li>Optional mode allows users to enable 2FA from the profile when permitted by role.</li>
<li>Supported on <code>wp-login.php</code> and on the WooCommerce <strong>My Account</strong> login form.</li>
</ul>
<h4>Passwordless login</h4>
<p>Let users log in without a password – just enter a username or email and receive a one-time login code. Improves user experience while maintaining strong security through email verification.</p>
<ul>
<li>Toggle between password and passwordless login on wp-login.php</li>
<li>One-time email codes on <code>wp-login.php</code>, controlled per role.</li>
<li>When both passwordless login and 2FA are enabled for the same role, the passwordless flow does not require a separate 2FA step (email possession is already verified).</li>
</ul>
<h4>WooCommerce</h4>
<ul>
<li>Optional automatic account activation when an WooCommerce order is created.</li>
<li>Optional restriction so that only <strong>paid</strong> orders trigger activation.</li>
<li>Integration points include classic checkout, block checkout (Store API), and paid-order completion hooks, as implemented in the plugin.</li>
</ul>
<h4>Login logs</h4>
<p>Monitor all login activity on your site. Essential for detecting suspicious behavior and meeting security compliance requirements for e-commerce stores.</p>
<ul>
<li>Records successful and failed login attempts</li>
<li>Logs username, email, IP address, and timestamp</li>
<li>View all logs in a dedicated admin page with sortable columns</li>
<li>Identify patterns of brute force attacks and suspicious login activity</li>
<li>Audit trail for security compliance and fraud investigation</li>
</ul>
<h4>Admin interface</h4>
<ul>
<li>Centralized settings under <strong>BerryPress <span aria-hidden="true" class="wp-exclude-emoji">→</span> LoginBerry</strong>, with separate screens per feature.</li>
</ul>
<h4>Email templates</h4>
<p>HTML email templates for activation, 2FA, and passwordless login ship in the plugin <code>templates/</code> directory. To override, copy the desired template into the active theme or child theme under <code>templates/loginberry/</code> (see each template file header for the exact path).</p>
<h4>Email delivery</h4>
<p>Reliable outbound email is required for codes to arrive. Typical setups use the hosting provider’s mail relay, a transactional email API (for example Brevo, Mailchimp Transactional / Mandrill, Postmark, SendGrid, Amazon SES), or a WordPress plugin that sends mail via SMTP or a provider API. Test delivery with a real signup or code request before relying on the feature in production.</p>
<h4>Typical use cases</h4>
<ul>
<li>Reducing unwanted or automated registrations and limiting abuse of disposable email addresses.</li>
<li>Verifying that a customer or member controls the email address on file.</li>
<li>Adding a second factor after password entry for selected roles.</li>
<li>Reviewing login success and failure history in the admin.</li>
<li>WooCommerce: applying optional post-order account activation, including a paid-order-only mode where configured.</li>
</ul>
<h4>Roadmap</h4>
<p>LoginBerry is a brand new plugin and we are improving it quickly based on real user feedback. If you have ideas, feature requests, or run into a theme-specific styling issue, we would love to hear from you.</p>
<p>Planned work includes:</p>
<ul>
<li>Configurable failed-attempt limits (instead of the fixed fifteen for activation lockout)</li>
<li>Track last login time for each user</li>
<li>Custom activation page URL</li>
<li>Custom redirect URL after successful verification</li>
<li>Rate limiting on code verification attempts</li>
<li>Social login options</li>
<li>Improved styling flexibility and theme compatibility</li>
</ul>
<p>Feedback and compatibility reports are welcome via the plugin support channels. New features are prioritized based on user feedback.</p>


LoginBerry – 2FA, Passwordless & Email Verification

Complete login security for WordPress & WooCommerce: LoginBerry adds email-based account verification, optional two-factor authentication (2FA), o …

Mustafa Uysal

handyplugins

<p>Easy, secure, and passwordless authentication for WordPress.</p>
<p>Streamline the login process by sending links to your users. No more passwords to remember, no more password resets, and no more password strength requirements.</p>
<p><strong><a href="https://handyplugins.co/magic-login-pro/" rel="nofollow ugc">Learn more about Magic Login</a></strong></p>
<h4>Key Features 🌟</h4>
<ul>
<li><strong>Passwordless Authentication</strong>: No more forgotten passwords or complex requirements.</li>
<li><strong>Magic Links</strong>: Secure, unique links sent directly to users’ email inboxes.</li>
<li><strong>Auto Login</strong>: Support for auto-login links in outgoing emails. It’s useful when pending action from a user, such as reply a comment, complete the checkout, etc.</li>
<li><strong>Native Honeypot Protection</strong>: Add a lightweight, no-CAPTCHA spam protection layer to Magic Login forms.<a href="https://handyplugins.co/docs/honeypot-protection/" rel="nofollow ugc">Learn more</a></li>
<li><strong>User-Friendly</strong>: Simplifies the login process for all users.</li>
<li><strong>Enhanced Security</strong>: Reduces risks associated with weak passwords.</li>
<li><strong>Tools</strong>:  Export, import, and reset plugin settings easily from the admin panel or WP-CLI. <a href="https://handyplugins.co/docs/magic-login-tools/" rel="nofollow ugc">Learn more</a></li>
</ul>
<h4>How does it work? 🪄</h4>
<ol>
<li>User enters their email address.</li>
<li>A unique magic link is sent to their inbox.</li>
<li>Clicking the link authenticates and logs in the user.</li>
</ol>
<h4>PRO Features 🎩</h4>
<p>Here are the premium features that come with Magic Login Pro:</p>
<ul>
<li><strong>SMS Login:</strong> Send magic login links via SMS. <a href="https://handyplugins.co/docs/passwordless-authentication-with-sms/" rel="nofollow ugc">Learn more</a>.</li>
<li><strong>QR Code Login:</strong> Let users log in by scanning a QR code. <a href="https://handyplugins.co/docs/qr-code-login/" rel="nofollow ugc">Learn more</a>.</li>
<li><strong>Registration:</strong> Enable easy user registration directly from the login form or with a shortcode. <a href="https://handyplugins.co/docs/magic-login-registration/" rel="nofollow ugc">Learn more</a>.</li>
<li><strong>CLI Command:</strong> Use WP-CLI to create login links, generate QR codes, export/import settings, and more. <a href="https://handyplugins.co/docs/magic-login-cli-command/" rel="nofollow ugc">Learn more</a>.</li>
<li><strong>Brute Force Protection:</strong> Limit rate of login attempts and block IP temporarily.</li>
<li><strong>Login request throttling:</strong> Limit login link generation for a certain period.</li>
<li><strong>IP Check:</strong> Enhance the security by restricting users to log in from the same IP address that requested the link.</li>
<li><strong>Domain Restriction:</strong> Allow only certain domains to use the magic link.</li>
<li><strong>Login Email Customization:</strong> Customize login message by using email placeholders.</li>
<li><strong>Login Redirect:</strong> Redirect users to a specific page right after login. You can also redirect different pages based on the user role.</li>
<li><strong>WooCommerce Integration:</strong> Seamless checkout experience for returning customers. <a href="https://handyplugins.co/docs/magic-login-woocommerce-integration/" rel="nofollow ugc">Learn more</a>.</li>
<li><strong>Easy Digital Downloads (EDD) Integration:</strong> Enhance the checkout experience with seamless magic login support. <a href="https://handyplugins.co/docs/magic-login-edd-integration/" rel="nofollow ugc">Learn more</a>.</li>
<li><strong>FluentCRM Integration:</strong> Send magic login links directly via FluentCRM. <a href="https://handyplugins.co/docs/magic-login-fluent-crm/" rel="nofollow ugc">Learn more</a>.</li>
<li><strong>reCAPTCHA Integration:</strong> Safeguard your login and registration forms from spam with Google reCAPTCHA. <a href="https://handyplugins.co/docs/magic-login-spam-protection/#1-toc-title" rel="nofollow ugc">Learn more</a>.</li>
<li><strong>Cloudflare Turnstile Integration:</strong> Enhance spam protection for your login and registration forms using Cloudflare Turnstile. <a href="https://handyplugins.co/docs/magic-login-spam-protection/#2-toc-title" rel="nofollow ugc">Learn more</a>.</li>
<li><strong>Friendly Captcha Integration:</strong> Protect your login and registration forms from bots with privacy-friendly Friendly Captcha. <a href="https://handyplugins.co/docs/magic-login-spam-protection/#3-toc-title" rel="nofollow ugc">Learn more</a>.</li>
<li><strong>API Support:</strong> Integrate Magic Login with your custom applications using the REST API.</li>
</ul>
<p>By upgrading to Magic Login Pro you also get access to one-on-one help from our knowledgeable support team and our extensive documentation site.</p>
<p><strong><a href="https://handyplugins.co/magic-login-pro/" rel="nofollow ugc">Explore Magic Login Pro</a></strong></p>
<h4>Documentation</h4>
<p>Our documentation can be found on <a href="https://handyplugins.co/docs-category/magic-login-pro/" rel="nofollow ugc">https://handyplugins.co/docs-category/magic-login-pro/</a></p>
<p>Hook reference: <a href="https://handyplugins.co/docs/magic-login-hooks-doc/" rel="nofollow ugc">https://handyplugins.co/docs/magic-login-hooks-doc/</a></p>
<h4>Contributing & Bug Report</h4>
<p>Bug reports and pull requests are welcome on <a href="https://github.com/HandyPlugins/magic-login" rel="nofollow ugc">GitHub</a>. Some of our features are pro only, please consider before sending PR.</p>
<p><strong>If you like Magic Login, then consider checking out our other projects:</strong></p>
<p><a href="https://handyplugins.co/magic-login-pro/" rel="friend nofollow ugc">Magic Login Pro</a> – Easy, secure, and passwordless authentication for WordPress.<br />
* <a href="https://handyplugins.co/sessionquota-pro/" rel="friend nofollow ugc">SessionQuota Pro</a> – Limit concurrent sessions in WordPress.<br />
* <a href="https://handyplugins.co/stream-integration-pro/" rel="friend nofollow ugc">Stream Integration Pro</a> – Upload, sync, restore, and manage WordPress videos with Cloudflare Stream.<br />
* <a href="https://handyplugins.co/easy-text-to-speech/" rel="friend nofollow ugc">Easy Text-to-Speech</a> – Convert written content into high-quality synthesized speech for WordPress.<br />
* <a href="https://handyplugins.co/handywriter/" rel="friend nofollow ugc">Handywriter</a> – AI-powered writing assistant for WordPress.<br />
* <a href="https://handyplugins.co/paddlepress-pro/" rel="friend nofollow ugc">PaddlePress PRO</a> – Paddle plugin for WordPress.<br />
* <a href="https://handyplugins.co/wp-accessibility-toolkit/" rel="friend nofollow ugc">WP Accessibility Toolkit</a> – Tools to help make your WordPress site more accessible.<br />
* <a href="https://poweredcache.com/" rel="friend nofollow ugc">Powered Cache</a> – Caching and optimization for WordPress to help improve PageSpeed and Core Web Vitals.</p>


Magic Login – Passwordless Authentication for WordPress – Login Without Password


I asked a technical question from an API / function perspective, so that I could use this plugin with a bespoke application. Mustafa was friendly, understood what I needed immediately and gave me a very helpful reply that allowed me to complete my project using this plugin. Very grateful for a fast AND technical reply.


Excellent technical support

Passwordless login for WordPress. Streamline the login process by sending magic links to your users.

LoginBerry – 2FA, Passwordless & Email Verification vs Magic Login – Passwordless Authentication for WordPress – Login Without Password