BerryPress

<p>LoginBerry bundles <strong>account verification</strong>, <strong>two-factor authentication (2FA)</strong>, <strong>passwordless login</strong>, and <strong>login logs</strong>. Each feature can be enabled or disabled independently. Outgoing codes are delivered by <strong>email</strong>.</p>
<p>The plugin works for standard WordPress sites. When WooCommerce is active, additional customer- and order-related options are available (for example 2FA on the My Account login form and optional account activation tied to orders).</p>
<h4>User-facing behavior (when features are enabled)</h4>
<ul>
<li><strong>Account verification:</strong> After registration, the user signs in and completes activation on the configured activation page using a six-digit code sent by email.</li>
<li><strong>Two-factor authentication:</strong> After a successful username and password, the user enters a second code sent by email. Per-role modes are Required, Optional, or Disabled.</li>
<li><strong>Passwordless login:</strong> On <code>wp-login.php</code>, eligible roles may request a one-time email code instead of entering a password.</li>
<li><strong>Login logs:</strong> Success and failure records are listed in the WordPress admin.</li>
</ul>
<p>Authentication codes are email-based; end users do not install a separate authenticator app for the flows described here.</p>
<h4>Account verification</h4>
<ul>
<li>New accounts receive a six-digit activation code by email.</li>
<li>After fifteen failed activation attempts, the account is locked until an administrator intervenes.</li>
<li>Administrators can resend codes, activate accounts manually, and unlock accounts from <strong>Users <span aria-hidden="true" class="wp-exclude-emoji">→</span> All Users</strong>.</li>
</ul>
<h4>Two-factor authentication (2FA)</h4>
<ul>
<li>Per-role setting: Required, Optional, or Disabled.</li>
<li>Optional mode allows users to enable 2FA from the profile when permitted by role.</li>
<li>Supported on <code>wp-login.php</code> and on the WooCommerce <strong>My Account</strong> login form.</li>
</ul>
<h4>Passwordless login</h4>
<p>Let users log in without a password – just enter a username or email and receive a one-time login code. Improves user experience while maintaining strong security through email verification.</p>
<ul>
<li>Toggle between password and passwordless login on wp-login.php</li>
<li>One-time email codes on <code>wp-login.php</code>, controlled per role.</li>
<li>When both passwordless login and 2FA are enabled for the same role, the passwordless flow does not require a separate 2FA step (email possession is already verified).</li>
</ul>
<h4>WooCommerce</h4>
<ul>
<li>Optional automatic account activation when an WooCommerce order is created.</li>
<li>Optional restriction so that only <strong>paid</strong> orders trigger activation.</li>
<li>Integration points include classic checkout, block checkout (Store API), and paid-order completion hooks, as implemented in the plugin.</li>
</ul>
<h4>Login logs</h4>
<p>Monitor all login activity on your site. Essential for detecting suspicious behavior and meeting security compliance requirements for e-commerce stores.</p>
<ul>
<li>Records successful and failed login attempts</li>
<li>Logs username, email, IP address, and timestamp</li>
<li>View all logs in a dedicated admin page with sortable columns</li>
<li>Identify patterns of brute force attacks and suspicious login activity</li>
<li>Audit trail for security compliance and fraud investigation</li>
</ul>
<h4>Admin interface</h4>
<ul>
<li>Centralized settings under <strong>BerryPress <span aria-hidden="true" class="wp-exclude-emoji">→</span> LoginBerry</strong>, with separate screens per feature.</li>
</ul>
<h4>Email templates</h4>
<p>HTML email templates for activation, 2FA, and passwordless login ship in the plugin <code>templates/</code> directory. To override, copy the desired template into the active theme or child theme under <code>templates/loginberry/</code> (see each template file header for the exact path).</p>
<h4>Email delivery</h4>
<p>Reliable outbound email is required for codes to arrive. Typical setups use the hosting provider’s mail relay, a transactional email API (for example Brevo, Mailchimp Transactional / Mandrill, Postmark, SendGrid, Amazon SES), or a WordPress plugin that sends mail via SMTP or a provider API. Test delivery with a real signup or code request before relying on the feature in production.</p>
<h4>Typical use cases</h4>
<ul>
<li>Reducing unwanted or automated registrations and limiting abuse of disposable email addresses.</li>
<li>Verifying that a customer or member controls the email address on file.</li>
<li>Adding a second factor after password entry for selected roles.</li>
<li>Reviewing login success and failure history in the admin.</li>
<li>WooCommerce: applying optional post-order account activation, including a paid-order-only mode where configured.</li>
</ul>
<h4>Roadmap</h4>
<p>LoginBerry is a brand new plugin and we are improving it quickly based on real user feedback. If you have ideas, feature requests, or run into a theme-specific styling issue, we would love to hear from you.</p>
<p>Planned work includes:</p>
<ul>
<li>Configurable failed-attempt limits (instead of the fixed fifteen for activation lockout)</li>
<li>Track last login time for each user</li>
<li>Custom activation page URL</li>
<li>Custom redirect URL after successful verification</li>
<li>Rate limiting on code verification attempts</li>
<li>Social login options</li>
<li>Improved styling flexibility and theme compatibility</li>
</ul>
<p>Feedback and compatibility reports are welcome via the plugin support channels. New features are prioritized based on user feedback.</p>


LoginBerry – 2FA, Passwordless & Email Verification

Complete login security for WordPress & WooCommerce: LoginBerry adds email-based account verification, optional two-factor authentication (2FA), o …

Ramesh Kumar

<p><strong>No Need For Password – WordPress OTP Login Plugin</strong></p>
<p><a href="https://wordpress.org/plugins/no-need-for-password/" rel="ugc"> No Need For Password </a> is a WordPress authentication plugin that enables users to log in and register using a one-time password (OTP) sent to their email address. Traditional passwords are not required.</p>
<p>The plugin is developed by <a href="https://in.linkedin.com/in/developer-ramesh" rel="nofollow ugc"> Ramesh Kumar </a>, a web developer and technical lead with over a decade of experience building WordPress plugins, custom systems, and scalable web solutions. His background includes hands-on development and leading engineering teams on complex projects.</p>
<p>This plugin is designed for WordPress websites that prioritize usability, simplified authentication flows, and reduced dependency on password-based systems—often required in modern <a href="https://capsquery.com/" rel="nofollow ugc"> custom website development </a> projects.</p>
<p>Perfect for:<br />
– Blogs<br />
– Membership sites<br />
– WooCommerce stores<br />
– SaaS-style WordPress websites</p>
<p><strong>No external services. No third-party APIs. Everything runs inside WordPress.</strong></p>
<h3>🔐 Key Features</h3>
<p>Here are list of features that you enjoy by getting hands on password-free authentication plugin:</p>
<ul>
<li>Passwordless login via email OTP</li>
<li>Automatic user registration for new emails</li>
<li>Secure OTP with expiry time</li>
<li>Login popup with clean UI</li>
<li>Logout link for logged-in users</li>
<li>Gutenberg & Full Site Editing (FSE) compatible</li>
<li>Works with block themes like Twenty Twenty-Three</li>
<li>ACF support for user registration fields</li>
<li>AJAX-based (no page reloads)</li>
<li>Lightweight & fast</li>
<li>Developer-friendly and extensible</li>
<li>Compatible with modern block themes</li>
</ul>
<p>These OTP-based WordPress login plugin features are great choice for modern websites.</p>
<h3>🚀 How It Works</h3>
<p>Below are 5 easy step to working process of secure email OTP login for WordPress plugin</p>
<ol>
<li>User clicks <strong>Login</strong></li>
<li>Enters email address</li>
<li>Receives a 6-digit OTP by email</li>
<li>Enters OTP</li>
<li>Logged in instantly</li>
</ol>
<p>No passwords. No reset links. No friction.</p>
<h3>👨‍💻 Who Is It For?</h3>
<p>Here are top cases where this No Need For Password by Ramesh is ideal choice:</p>
<ul>
<li>Membership websites</li>
<li>WooCommerce stores</li>
<li>Blogs and communities</li>
<li>SaaS-style WordPress apps</li>
<li>Anyone who wants password-free authentication</li>
</ul>
<h3>🧱 Shortcodes</h3>
<p>Use these shortcodes anywhere on your site:</p>
<p><strong>Login button</strong></p>
<p>[nnfp_login_button]</p>
<p><strong>Login page container</strong></p>
<p>[nnfp_login_form]</p>
<p><strong>Registration popup button</strong></p>
<p>[nnfp_register_popup_button]</p>
<p><strong>Registration form</strong></p>
<p>[nnfp_registration_form]</p>
<h3>🎨 Theme Compatibility</h3>
<p>This plugin works with:<br />
– Classic themes<br />
– Block themes (Full Site Editing)<br />
– Twenty Twenty-Three<br />
– Twenty Twenty-Four<br />
– Most modern WordPress themes</p>
<p>No theme files need to be edited.</p>
<h3>🔌 ACF Integration (Optional)</h3>
<p>If <strong>Advanced Custom Fields (ACF)</strong> is installed:<br />
– User registration fields are automatically detected<br />
– ACF values are saved to the user profile after OTP verification</p>
<p>ACF is optional — the plugin works perfectly without it.</p>
<h3>🔒 Security</h3>
<ul>
<li>OTP is time-limited</li>
<li>Nonce protection on all AJAX requests</li>
<li>Sanitized and validated user input</li>
<li>Uses WordPress authentication APIs</li>
<li>No passwords stored or transmitted</li>
</ul>
<h3>👨‍💻 Developer Friendly</h3>
<p>Hooks and filters can be added easily.<br />
Clean class-based architecture.<br />
No hard dependencies.</p>
<h3>Support</h3>
<p>For support, feature requests, or bug reports:<br />
https://github.com/developer-ramesh</p>


NNFP – Passwordless Email OTP Login

Short Description: Enable secure passwordless login and registration using secure email-based one-time passwords (OTP).

LoginBerry – 2FA, Passwordless & Email Verification vs NNFP – Passwordless Email OTP Login