oaron

OneCode Login provides a modern, passwordless authentication experience for your WordPress site. Instead of traditional passwords, users receive a secure 6-digit verification code via email.
<h4>Key Features</h4>
<ul>
<li>Passwordless Authentication – Users log in with just their email address</li>
<li>6-Digit Verification Codes – Secure, time-limited codes sent via email</li>
<li>Rate Limiting – Built-in protection against brute force attacks</li>
<li>Request ID Binding – Each code is bound to a specific login session for enhanced security</li>
<li>Neutral Feedback – Prevents user enumeration attacks by not revealing if an email exists</li>
<li>Customizable – Configure expiry times, cooldowns, and email templates</li>
<li>Accessible – Full keyboard navigation and screen reader support</li>
<li>Gutenberg Block – Easy to add login forms to any page</li>
<li>Shortcode Support – Use [onecode_login] anywhere</li>
<li>wp-login.php Integration – Optionally replace the default WordPress login</li>
</ul>
<h4>Security Features</h4>
<ul>
<li>Cryptographically secure code generation</li>
<li>Configurable code expiry (default: 10 minutes)</li>
<li>Resend cooldown to prevent spam</li>
<li>IP-based and email-based rate limiting</li>
<li>Automatic lockout after failed attempts</li>
<li>Codes are single-use and invalidated after successful login</li>
</ul>
<h4>Use Cases</h4>
<ul>
<li>Membership sites where password fatigue is an issue</li>
<li>Customer portals requiring simple authentication</li>
<li>Internal tools where security without complexity is needed</li>
<li>Any site wanting to improve user experience</li>
</ul>

OneCode Login

Simple and secure passwordless login using email verification codes. No passwords to remember, just enter your email and verify with a 6-digit code.

Zetpy

Zetpy Mobile Login is a powerful and lightweight WordPress plugin that enables users to log in or sign up using their mobile numbers or email addresses. It leverages the ISMS API to deliver one-time passwords (OTP) for secure, passwordless authentication.
<h4>Key Features</h4>
<ul>
<li>Mobile & Email Login: Unified flow for mobile numbers and email addresses.</li>
<li>OTP Verification: Secure login via SMS or WhatsApp (using ISMS API).</li>
<li>WooCommerce Integration: Seamlessly replaces standard checkout login and redirects guests from the My Account page.</li>
<li>Math CAPTCHA: Built-in “humility check” to prevent bot attacks and save SMS credits.</li>
<li>Configurable Country Codes: Support for international numbers with a custom calling code list.</li>
<li>Secure by Design: Appends a secret key to 6-digit OTPs to prevent direct login via standard WordPress login pages.</li>
</ul>
<h3>External services</h3>
This plugin relies on third-party services to deliver OTP codes and provide phone number normalization.
ISMS.com.my 
* Service: SMS and WhatsApp delivery API. 
* API URL: <code>https://www.isms.com.my/isms_send_all_id.php</code> 
* Data Sent: Mobile number and the message content (including OTP). 
* Terms & Privacy: <a href="https://www.isms.com.my/terms_condition.php" rel="nofollow ugc">Terms of Service</a>, <a href="https://www.isms.com.my/privacy_policy.php" rel="nofollow ugc">Privacy Policy</a>
Twilio 
* Service: SMS delivery API (Global). 
* API URL: <code>https://api.twilio.com/2010-04-01/Accounts/{AccountSid}/Messages.json</code> 
* Data Sent: From number, mobile number, and message content. 
* Terms & Privacy: <a href="https://www.twilio.com/legal/tos" rel="nofollow ugc">Terms of Service</a>, <a href="https://www.twilio.com/legal/privacy" rel="nofollow ugc">Privacy Policy</a>
Vonage (Nexmo) 
* Service: SMS delivery API (Global). 
* API URL: <code>https://rest.nexmo.com/sms/json</code> 
* Data Sent: API key, API secret, sender ID, mobile number, and message content. 
* Terms & Privacy: <a href="https://www.vonage.com/legal/terms-of-service/" rel="nofollow ugc">Terms of Service</a>, <a href="https://www.vonage.com/legal/privacy-policy/" rel="nofollow ugc">Privacy Policy</a>

Zetpy Mobile Login

Mobile login with OTP/TAC verification using ISMS API. Supports country code selector and passwordless authentication.

OneCode Login vs Zetpy Mobile Login