oaron

OneCode Login provides a modern, passwordless authentication experience for your WordPress site. Instead of traditional passwords, users receive a secure 6-digit verification code via email.
<h4>Key Features</h4>
<ul>
<li>Passwordless Authentication – Users log in with just their email address</li>
<li>6-Digit Verification Codes – Secure, time-limited codes sent via email</li>
<li>Rate Limiting – Built-in protection against brute force attacks</li>
<li>Request ID Binding – Each code is bound to a specific login session for enhanced security</li>
<li>Neutral Feedback – Prevents user enumeration attacks by not revealing if an email exists</li>
<li>Customizable – Configure expiry times, cooldowns, and email templates</li>
<li>Accessible – Full keyboard navigation and screen reader support</li>
<li>Gutenberg Block – Easy to add login forms to any page</li>
<li>Shortcode Support – Use [onecode_login] anywhere</li>
<li>wp-login.php Integration – Optionally replace the default WordPress login</li>
</ul>
<h4>Security Features</h4>
<ul>
<li>Cryptographically secure code generation</li>
<li>Configurable code expiry (default: 10 minutes)</li>
<li>Resend cooldown to prevent spam</li>
<li>IP-based and email-based rate limiting</li>
<li>Automatic lockout after failed attempts</li>
<li>Codes are single-use and invalidated after successful login</li>
</ul>
<h4>Use Cases</h4>
<ul>
<li>Membership sites where password fatigue is an issue</li>
<li>Customer portals requiring simple authentication</li>
<li>Internal tools where security without complexity is needed</li>
<li>Any site wanting to improve user experience</li>
</ul>

OneCode Login

Simple and secure passwordless login using email verification codes. No passwords to remember, just enter your email and verify with a 6-digit code.

ziogaschr

authentiq

stannie

The <a href="https://www.authentiq.com/" rel="nofollow ugc">Authentiq</a> plugin allows users to simply use their phone to authenticate to your WordPress site, share their identity details safely, and sign out again remotely.
This plugin is for admins that are interested in moving beyond username and password, and do not want to burden their users with typing one time codes from SMS or authenticators or other methods that harm the user experience.
The <a href="https://www.authentiq.com/" rel="nofollow ugc">Authentiq</a> service is free (for most use cases) and does not store any user data centrally, but in the Authentiq ID app on the user’s phone instead.
Features:
<ul>
<li>Use Authentiq as a convenience sign in (and sign up) method, or as a secure sign in method.</li>
<li>In the latter case, replacing one time passwords (TOTP) or hardware tokens, option to still accept accounts with classic username & password.</li>
<li>On every sign in, the profile information is explicitly shared by the Authentiq ID app and updated in the WordPress profile, thus keeping it up to date on every sign in.</li>
<li>Visitors to your site that already have the Authentiq ID app installed can simply sign up by scanning a QR code or typing their email address and confirm on their phone.</li>
<li>Block users by (verified) email domain, or limit to specific domains.</li>
<li>Optionally request social accounts, address, and (verified) phone numbers too.</li>
<li>Remote sign out: your users can sign out with their Authentiq ID app, even when they left their session signed in on another computer.</li>
<li>Existing users can activate Authentiq in their profile page for convenience or additional security.</li>
</ul>
You can check our <a href="https://wordpress.demos.authentiq.io/" rel="nofollow ugc">demo site</a>.
<h4>Widget</h4>
You can have an Authentiq sign in button in any widgetized area / sidebar:
<ol>
<li>Go to ‘WordPress Dashboard > Appearance > Widgets’.</li>
<li>Drag and drop the “Authentiq” widget into any widgetized area / sidebar.</li>
<li>Configure settings on the widget and click save.</li>
</ol>
Place and configure as many Authentiq widgets as you want.
<h4>Shortcodes</h4>
The plugin can be placed anywhere in your site using WordPress shortcodes.
The shortcode is <code>[authentiq_login_button]</code>.
Additionally you can set some extra parameters, which are:
<ul>
<li>sign_in_text: Text shown in Authentiq button, when user is not signed in, in order to sign in.</li>
<li>linking_text: Text shown in Authentiq button, when user is signed in, but is not linked with Authentiq yet, in order to link the user account.</li>
<li>sign_out_text: Text shown in Authentiq button, when user is signed in and linked with Authentiq, in order to sign out.</li>
<li>color_scheme: Authentiq button color scheme. Use a number from 0: default, 1: purple, 2: orange, 3: grey, 4: white.</li>
</ul>
Example use: <code>[authentiq_login_button sign_in_text="Login" linking_text="Link your account" sign_out_text="Logout" color_scheme=1]</code>.
You can even place the <a href="http://docs.getshortcodes.com/article/52-using-of-shortcodes-in-template-files" rel="nofollow ugc">shortcode in your template files</a>.

Authentiq

Sign in (and sign up) to WordPress sites using the Authentiq ID app. Strong authentication, without the passwords.

OneCode Login vs Authentiq