oaron

OneCode Login provides a modern, passwordless authentication experience for your WordPress site. Instead of traditional passwords, users receive a secure 6-digit verification code via email.
<h4>Key Features</h4>
<ul>
<li>Passwordless Authentication – Users log in with just their email address</li>
<li>6-Digit Verification Codes – Secure, time-limited codes sent via email</li>
<li>Rate Limiting – Built-in protection against brute force attacks</li>
<li>Request ID Binding – Each code is bound to a specific login session for enhanced security</li>
<li>Neutral Feedback – Prevents user enumeration attacks by not revealing if an email exists</li>
<li>Customizable – Configure expiry times, cooldowns, and email templates</li>
<li>Accessible – Full keyboard navigation and screen reader support</li>
<li>Gutenberg Block – Easy to add login forms to any page</li>
<li>Shortcode Support – Use [onecode_login] anywhere</li>
<li>wp-login.php Integration – Optionally replace the default WordPress login</li>
</ul>
<h4>Security Features</h4>
<ul>
<li>Cryptographically secure code generation</li>
<li>Configurable code expiry (default: 10 minutes)</li>
<li>Resend cooldown to prevent spam</li>
<li>IP-based and email-based rate limiting</li>
<li>Automatic lockout after failed attempts</li>
<li>Codes are single-use and invalidated after successful login</li>
</ul>
<h4>Use Cases</h4>
<ul>
<li>Membership sites where password fatigue is an issue</li>
<li>Customer portals requiring simple authentication</li>
<li>Internal tools where security without complexity is needed</li>
<li>Any site wanting to improve user experience</li>
</ul>

OneCode Login

Simple and secure passwordless login using email verification codes. No passwords to remember, just enter your email and verify with a 6-digit code.

Ateeq

Easy Secure Login enhances your site’s security by integrating two powerful Google authentication methods: Google Sign-In and Google One Tap. It can optionally replace the standard WordPress password system entirely, offering a modern, passwordless login experience.
Born out of necessity after a real-world brute-force attack, this plugin was designed with the option to enforce a Google-only login policy, ensuring that only verified Google accounts can access your site. It combines robust, Google-powered security with a beautiful user interface, automatic user management, and a step-by-step setup wizard.
<h3>Key Features</h3>
<ul>
<li>Optional Passwordless Security: Ability to completely disable standard password logins, forcing all users to authenticate via Google’s secure OAuth 2.0.</li>
<li>Role-Based Redirects: Define custom landing pages for different user roles. Redirect subscribers to your homepage or a custom dashboard while keeping admins in wp-admin.</li>
<li>Google Sign-In Button: A clean, modern “Continue with Google” button on your login page.</li>
<li>Google One Tap: Allows logged-in Google users to sign in instantly with a single click via a non-intrusive pop-up.</li>
<li>Complete User Management: Whitelist specific Google accounts and assign roles, or allow open registration for any Google user.</li>
<li>Google Profile Picture Sync: Automatically syncs and displays Google profile pictures as user avatars in WordPress.</li>
<li>Built-in Security Hardening:
<ul>
<li>Disable XML-RPC to prevent common attacks.</li>
<li>Disable the plugin and theme file editor.</li>
<li>Hide your WordPress version number.</li>
<li>Restrict REST API access to logged-in users.</li>
<li>Block direct access to sensitive core files.</li>
</ul>
</li>
<li>User-Friendly Setup Wizard: A clean, multi-step guide to get your Google Cloud credentials configured in minutes.</li>
<li>Actively Maintained for the latest WordPress versions.</li>
</ul>
This plugin provides maximum login security while dramatically improving the user experience.
<h3>External services</h3>
This plugin uses Google’s Identity Services to provide a secure authentication method (Google Sign-In and Google One Tap). To function, it connects to several Google APIs.
<ul>
<li>Service: Google Identity Services (accounts.google.com)</li>
<li>Purpose: This service is used to display the “Sign in with Google” button and the Google One Tap prompt. It handles the user authentication process directly in the user’s browser.</li>
<li>Data Sent: This plugin initiates the authentication flow, but user data (like email and password) is entered directly on Google’s domain, not through this plugin. The plugin only receives a secure authentication token from Google after a successful login.</li>
<li>
Terms and Policies:
<ul>
<li>Google Terms of Service: https://policies.google.com/terms</li>
<li>Google Privacy Policy: https://policies.google.com/privacy</li>
</ul>
</li>
<li>
Service: Google OAuth & People APIs (oauth2.googleapis.com, www.googleapis.com)
</li>
<li>Purpose: After a user authenticates, the plugin’s server sends the received authentication token/code to these Google APIs to verify its authenticity and retrieve basic user profile information (email, name, profile picture).</li>
<li>Data Sent: An authentication token/code provided by Google is sent from your server to Google’s servers for validation.</li>
<li>Terms and Policies:
<ul>
<li>Google APIs Terms of Service: https://developers.google.com/terms</li>
</ul>
</li>
</ul>

Easy Secure Login – Google One Tap & Sign-In

Eliminate passwords and secure your site with Google. This plugin replaces WordPress login with a secure Google Sign-In button and frictionless Google …

OneCode Login vs Easy Secure Login – Google One Tap & Sign-In