Sadekur Rahman

<p><strong>Password Less Login</strong> is a passwordless and OTP-based login system for WordPress.<br />
Every user — both existing and new — must verify their identity using a <strong>One-Time Password (OTP)</strong> sent to their email before being logged in.</p>
<p>This ensures that no one can access an account without confirming ownership of the email address, providing a secure, passwordless authentication process.</p>
<h3>How It Works</h3>
<ol>
<li>The user enters their email address.</li>
<li>The plugin sends a <strong>6-digit OTP</strong> to that email.</li>
<li>The user enters the OTP:
<ul>
<li>If the email exists <span aria-hidden="true" class="wp-exclude-emoji">→</span> the user is securely logged in.</li>
<li>If the email is new <span aria-hidden="true" class="wp-exclude-emoji">→</span> the user provides a username, verifies the OTP, and a new account is created automatically.</li>
</ul>
</li>
<li>The OTP is valid for <strong>10 minutes</strong> and expires after use.</li>
</ol>
<blockquote>
<p><strong>Note:</strong> The plugin never logs in users without OTP verification.</p>
</blockquote>
<h3>Key Features</h3>
<ul>
<li><strong>OTP-Based Authentication for All Users</strong> – Both existing and new users must verify the OTP before login.</li>
<li><strong>Passwordless Login</strong> – Securely log in using only your email and OTP.</li>
<li><strong>Auto User Registration</strong> – New users can register instantly after OTP verification.</li>
<li><strong>Temporary OTP (10 Minutes)</strong> – Each OTP expires after 10 minutes and can only be used once.</li>
<li><strong>Rate Limiting</strong> – Prevents brute-force or spam OTP requests (maximum 5 per 15 minutes per email).</li>
<li><strong>Nonce Verification</strong> – Protects REST API endpoints from unauthorized access.</li>
<li><strong>Secure Email Handling</strong> – Emails are hashed when stored in transients to protect user data.</li>
<li><strong>Streamlined User Experience</strong> – Clean, minimal login flow with conditional fields for existing vs. new users.</li>
</ul>
<h3>Why Choose Password Less Login?</h3>
<ul>
<li>No passwords to remember or reset.</li>
<li>OTP verification ensures true ownership of email.</li>
<li>Protects against brute-force attacks.</li>
<li>Simple setup – works with the native WordPress login page.</li>
<li>Modern and user-friendly design.</li>
<li>Reduces “Forgot Password” support requests.</li>
</ul>
<h3>Usage</h3>
<ol>
<li>Go to your WordPress login page.</li>
<li>Enter your email address and click “Send OTP”.</li>
<li>Check your email for the OTP.</li>
<li>Enter the OTP in the login form:
<ul>
<li>If your account exists, you’ll be logged in.</li>
<li>If not, you’ll be prompted to provide a username before registration and login.</li>
</ul>
</li>
<li>You’ll be redirected to your dashboard after successful verification.</li>
</ol>
<h3>License</h3>
<p>This plugin is released under the GPL license. You are free to use and modify it.</p>
<p>For support, contact: <a href="mailto:sadekur0rahman@gmail.com" rel="nofollow ugc">sadekur0rahman@gmail.com</a></p>


Password Less Login

A powerful and easy-to-use WordPress plugin for passwordless and OTP-based login.

corytrevor

<h3>Test email sending, SPF, DKIM & DMARC</h3>
<p>Mailsure provides a simple one-click email authentication test to check if WordPress is able to send properly authenticated emails.</p>
<p>Also included:</p>
<ul>
<li>Send a test email to any address</li>
<li>Mail server IP blacklist check via <a href="https://mxtoolbox.com/" rel="nofollow ugc">MXToolbox</a>. View their privacy policy <a href="https://mxtoolbox.com/privacypolicy.aspx" rel="nofollow ugc">here</a>.</li>
</ul>
<p>Plugin settings are in Tools -> Mailsure</p>


Password Less Login vs Mailsure