oaron

OneCode Login provides a modern, passwordless authentication experience for your WordPress site. Instead of traditional passwords, users receive a secure 6-digit verification code via email.
<h4>Key Features</h4>
<ul>
<li>Passwordless Authentication – Users log in with just their email address</li>
<li>6-Digit Verification Codes – Secure, time-limited codes sent via email</li>
<li>Rate Limiting – Built-in protection against brute force attacks</li>
<li>Request ID Binding – Each code is bound to a specific login session for enhanced security</li>
<li>Neutral Feedback – Prevents user enumeration attacks by not revealing if an email exists</li>
<li>Customizable – Configure expiry times, cooldowns, and email templates</li>
<li>Accessible – Full keyboard navigation and screen reader support</li>
<li>Gutenberg Block – Easy to add login forms to any page</li>
<li>Shortcode Support – Use [onecode_login] anywhere</li>
<li>wp-login.php Integration – Optionally replace the default WordPress login</li>
</ul>
<h4>Security Features</h4>
<ul>
<li>Cryptographically secure code generation</li>
<li>Configurable code expiry (default: 10 minutes)</li>
<li>Resend cooldown to prevent spam</li>
<li>IP-based and email-based rate limiting</li>
<li>Automatic lockout after failed attempts</li>
<li>Codes are single-use and invalidated after successful login</li>
</ul>
<h4>Use Cases</h4>
<ul>
<li>Membership sites where password fatigue is an issue</li>
<li>Customer portals requiring simple authentication</li>
<li>Internal tools where security without complexity is needed</li>
<li>Any site wanting to improve user experience</li>
</ul>

OneCode Login

Simple and secure passwordless login using email verification codes. No passwords to remember, just enter your email and verify with a 6-digit code.

Cozmoslabs

Cristian Antohe

<a href="https://www.cozmoslabs.com/add-ons/passwordless-login/" rel="nofollow ugc">Passwordless Login</a> is a modern way of loggin into your WordPress site without the use of a password.
Join the discussion here: <a href="https://www.cozmoslabs.com/31550-wordpress-passwordless-login/" rel="nofollow ugc">https://www.cozmoslabs.com/31550-wordpress-passwordless-login/</a>
This is how it works:
<ul>
<li>Instead of asking users for a password when they try to log in to your website, we simply ask them for their username or email</li>
<li>The plugin creates a temporary authorization token and saves it in a WordPress transient that expires after 10 minutes</li>
<li>Then we send the user an email with a link and the token</li>
<li>The user clicks the link and sends the authorization code to your server</li>
<li>The plugin then checks if the code is valid and creates the log in WordPress cookie, successfully authenticating the user.</li>
</ul>
You can use the shortcode [passwordless-login] in a page or widget.
If you’re looking to create front-end user registration and profile forms we recommend <a href="https://www.cozmoslabs.com/wordpress-profile-builder/" rel="nofollow ugc">Profile Builder</a>.
NOTE:
Passwordless Authentication dose not replace the default login functionality in WordPress.

Passwordless Login

Passwordless login form via a simple to use shortcode: [passwordless-login]

OneCode Login vs Passwordless Login