Jafran Hasan

iclanzan

<p>I have created this plugin because it is of great use to me and I hope it will be of use to others but it might break things. Please use it with caution and at your own risk. If you find bugs please get in touch with me or better yet help fix it on <a href="https://github.com/iclanzan/Passwordless" title="Passwordless on GitHub" rel="nofollow ugc">GitHub</a>.</p>
<h4>Login process</h4>
<p>Passwordless allows your site’s users to log in using only their email addresses. After submitting the login form with the email address filled in, the user will receive an email containing a login link which can only be used once. Clicking that link results in the user getting logged in for one year or until he logs out. Unused login links expire after one day.</p>
<h4>New users</h4>
<p>New users will have accounts created for them automatically when they try to log in for the first time. In this case their email will also act as the username. Their visible name will be set to ‘Annonymous’ but can obviously be changed on the profile page.</p>
<h4>Login page</h4>
<p>The plugin changes the login page URI to <code>example.com/login</code> from the default <code>example.com/wp-login.php</code>. If permalinks are disabled the login page will instead be <code>example.com/?login</code>.</p>
<p>The page can be customized using some of the same filters and action hooks that the original login page used. If a total overhaul of the page is desired, placing a <code>login.php</code> template file in the currently active theme directory will override the plugin’s login page.</p>
<h4>Filters</h4>
<p>I have included some new filter hooks to make it easy to change important aspects of the plugin’s inner workings.</p>
<pre><code>passwordless_login_page applied to the login page URI. Filter function argument: string containing the login page URI. passwordless_pass_length applied to the length of the generated passwords/keys. Filter function argument: integer representing the number of characters. passwordless_key_expire applied to the number of seconds a login key is valid for. Filter function argument: integer number of seconds. passwordless_login_redirect applied to the URI where a user is sent after logging in. Filter function arguments: string URI, integer user id. passwordless_email_subject applied to the subject of the email that gets sent to users logging in. Filter function arguments: string email subject, string email address. passwordless_email_body applied to the body of the email that gets sent to users logging in. Filter function arguments: string email body, string email address. </code></pre>


Passwordless

Passwordless allows users to sign up and log in using only email addresses, removing the need for them to remember yet another password.

oaron

<p>OneCode Login provides a modern, passwordless authentication experience for your WordPress site. Instead of traditional passwords, users receive a secure 6-digit verification code via email.</p>
<h4>Key Features</h4>
<ul>
<li><strong>Passwordless Authentication</strong> – Users log in with just their email address</li>
<li><strong>6-Digit Verification Codes</strong> – Secure, time-limited codes sent via email</li>
<li><strong>Rate Limiting</strong> – Built-in protection against brute force attacks</li>
<li><strong>Request ID Binding</strong> – Each code is bound to a specific login session for enhanced security</li>
<li><strong>Neutral Feedback</strong> – Prevents user enumeration attacks by not revealing if an email exists</li>
<li><strong>Customizable</strong> – Configure expiry times, cooldowns, and email templates</li>
<li><strong>Accessible</strong> – Full keyboard navigation and screen reader support</li>
<li><strong>Gutenberg Block</strong> – Easy to add login forms to any page</li>
<li><strong>Shortcode Support</strong> – Use [onecode_login] anywhere</li>
<li><strong>wp-login.php Integration</strong> – Optionally replace the default WordPress login</li>
</ul>
<h4>Security Features</h4>
<ul>
<li>Cryptographically secure code generation</li>
<li>Configurable code expiry (default: 10 minutes)</li>
<li>Resend cooldown to prevent spam</li>
<li>IP-based and email-based rate limiting</li>
<li>Automatic lockout after failed attempts</li>
<li>Codes are single-use and invalidated after successful login</li>
</ul>
<h4>Use Cases</h4>
<ul>
<li>Membership sites where password fatigue is an issue</li>
<li>Customer portals requiring simple authentication</li>
<li>Internal tools where security without complexity is needed</li>
<li>Any site wanting to improve user experience</li>
</ul>


OneCode Login

Simple and secure passwordless login using email verification codes. No passwords to remember, just enter your email and verify with a 6-digit code.

Passwordless vs OneCode Login