Sachithra Vidmal Pinnaduwa

Vesess Pvt. Ltd.

<p>VesessAuth plugin provides a modern, secure authentication method for WordPress websites without requiring passwords. Instead of remembering complex passwords, users receive a secure, time-limited login link via email.</p>
<p><strong>Key Features:</strong></p>
<ul>
<li>One-click email authentication</li>
<li>No passwords to remember or store</li>
<li>Time-limited secure tokens</li>
<li>Brute-force attack protection</li>
<li>Compatible with existing WordPress user accounts</li>
<li>Easy setup and configuration</li>
</ul>
<p>Passwordless authentication improves security by eliminating common password-related vulnerabilities such as weak passwords, password reuse, and phishing attacks.</p>
<h3>Privacy Policy</h3>
<p>This plugin collects and processes the following user data:</p>
<ul>
<li><strong>Email Addresses</strong>: Used solely for authentication purposes to send login links.</li>
<li><strong>IP Addresses</strong>: Temporarily stored for security purposes to prevent abuse.</li>
<li><strong>Login Timestamps</strong>: Recorded to maintain security logs.</li>
</ul>
<p>All collected data is stored exclusively in your WordPress database and is not shared with third parties. Authentication tokens are temporarily stored and automatically expire after login completion or a predefined timeout period.</p>
<h3>Technical Details</h3>
<p>The plugin creates secure, time-limited tokens stored in the WordPress database. When a token is used, it’s immediately invalidated to prevent replay attacks. All communication containing authentication tokens uses encryption when possible.</p>


VesessAuth

Enable secure passwordless login for WordPress through magic email links. Enhance security by eliminating password vulnerabilities.

oaron

<p>OneCode Login provides a modern, passwordless authentication experience for your WordPress site. Instead of traditional passwords, users receive a secure 6-digit verification code via email.</p>
<h4>Key Features</h4>
<ul>
<li><strong>Passwordless Authentication</strong> – Users log in with just their email address</li>
<li><strong>6-Digit Verification Codes</strong> – Secure, time-limited codes sent via email</li>
<li><strong>Rate Limiting</strong> – Built-in protection against brute force attacks</li>
<li><strong>Request ID Binding</strong> – Each code is bound to a specific login session for enhanced security</li>
<li><strong>Neutral Feedback</strong> – Prevents user enumeration attacks by not revealing if an email exists</li>
<li><strong>Customizable</strong> – Configure expiry times, cooldowns, and email templates</li>
<li><strong>Accessible</strong> – Full keyboard navigation and screen reader support</li>
<li><strong>Gutenberg Block</strong> – Easy to add login forms to any page</li>
<li><strong>Shortcode Support</strong> – Use [onecode_login] anywhere</li>
<li><strong>wp-login.php Integration</strong> – Optionally replace the default WordPress login</li>
</ul>
<h4>Security Features</h4>
<ul>
<li>Cryptographically secure code generation</li>
<li>Configurable code expiry (default: 10 minutes)</li>
<li>Resend cooldown to prevent spam</li>
<li>IP-based and email-based rate limiting</li>
<li>Automatic lockout after failed attempts</li>
<li>Codes are single-use and invalidated after successful login</li>
</ul>
<h4>Use Cases</h4>
<ul>
<li>Membership sites where password fatigue is an issue</li>
<li>Customer portals requiring simple authentication</li>
<li>Internal tools where security without complexity is needed</li>
<li>Any site wanting to improve user experience</li>
</ul>


OneCode Login

Simple and secure passwordless login using email verification codes. No passwords to remember, just enter your email and verify with a 6-digit code.

VesessAuth vs OneCode Login