One Loop Studio

<p>OLS 2FA is a lightweight plugin that enhances your website’s security by adding email two-factor authentication (2FA). When users log in, they receive a unique authentication code by email to verify their identity before accessing their account.</p>
<p><strong>Features:</strong><br />
– Adds a second layer of authentication using email verification.<br />
– Simple setup with easy-to-follow instructions.<br />
– Compatible with WordPress default login flow.</p>
<h4>Release Notes:</h4>
<p>Before updating the plugin please check <a href="https://oneloopstudio.com/wordpress-plugins/ols-2fa/" rel="nofollow ugc">our latest release notes</a>.</p>
<h3>Usage</h3>
<ol>
<li>Activate the plugin</li>
<li>Go to <strong>One Loop Studio > 2FA Email</strong> to configure.</li>
<li>Enable 2FA Email.</li>
<li>Once enabled, You need to verify if you can receive email.</li>
<li>Now its enabled and ready to go.</li>
</ol>


OLS 2FA

OLS 2FA is a lightweight plugin that enhances your website's security by adding email two-factor authentication (2FA).

Sadekur Rahman

<p><strong>Password Less Login</strong> is a passwordless and OTP-based login system for WordPress.<br />
Every user — both existing and new — must verify their identity using a <strong>One-Time Password (OTP)</strong> sent to their email before being logged in.</p>
<p>This ensures that no one can access an account without confirming ownership of the email address, providing a secure, passwordless authentication process.</p>
<h3>How It Works</h3>
<ol>
<li>The user enters their email address.</li>
<li>The plugin sends a <strong>6-digit OTP</strong> to that email.</li>
<li>The user enters the OTP:
<ul>
<li>If the email exists <span aria-hidden="true" class="wp-exclude-emoji">→</span> the user is securely logged in.</li>
<li>If the email is new <span aria-hidden="true" class="wp-exclude-emoji">→</span> the user provides a username, verifies the OTP, and a new account is created automatically.</li>
</ul>
</li>
<li>The OTP is valid for <strong>10 minutes</strong> and expires after use.</li>
</ol>
<blockquote>
<p><strong>Note:</strong> The plugin never logs in users without OTP verification.</p>
</blockquote>
<h3>Key Features</h3>
<ul>
<li><strong>OTP-Based Authentication for All Users</strong> – Both existing and new users must verify the OTP before login.</li>
<li><strong>Passwordless Login</strong> – Securely log in using only your email and OTP.</li>
<li><strong>Auto User Registration</strong> – New users can register instantly after OTP verification.</li>
<li><strong>Temporary OTP (10 Minutes)</strong> – Each OTP expires after 10 minutes and can only be used once.</li>
<li><strong>Rate Limiting</strong> – Prevents brute-force or spam OTP requests (maximum 5 per 15 minutes per email).</li>
<li><strong>Nonce Verification</strong> – Protects REST API endpoints from unauthorized access.</li>
<li><strong>Secure Email Handling</strong> – Emails are hashed when stored in transients to protect user data.</li>
<li><strong>Streamlined User Experience</strong> – Clean, minimal login flow with conditional fields for existing vs. new users.</li>
</ul>
<h3>Why Choose Password Less Login?</h3>
<ul>
<li>No passwords to remember or reset.</li>
<li>OTP verification ensures true ownership of email.</li>
<li>Protects against brute-force attacks.</li>
<li>Simple setup – works with the native WordPress login page.</li>
<li>Modern and user-friendly design.</li>
<li>Reduces “Forgot Password” support requests.</li>
</ul>
<h3>Usage</h3>
<ol>
<li>Go to your WordPress login page.</li>
<li>Enter your email address and click “Send OTP”.</li>
<li>Check your email for the OTP.</li>
<li>Enter the OTP in the login form:
<ul>
<li>If your account exists, you’ll be logged in.</li>
<li>If not, you’ll be prompted to provide a username before registration and login.</li>
</ul>
</li>
<li>You’ll be redirected to your dashboard after successful verification.</li>
</ol>
<h3>License</h3>
<p>This plugin is released under the GPL license. You are free to use and modify it.</p>
<p>For support, contact: <a href="mailto:sadekur0rahman@gmail.com" rel="nofollow ugc">sadekur0rahman@gmail.com</a></p>


Password Less Login

A powerful and easy-to-use WordPress plugin for passwordless and OTP-based login.

OLS 2FA vs Password Less Login