Active installationsNewAdoption metric — not a quality score
WordPress.org ratingNo WordPress.org ratings yet
Official packageDirect from WordPress.org
Repository metrics are context, not quality scores. Active installations measure adoption and can strongly reflect a plugin’s age and historical popularity. Ratings, recent updates and “Tested up to” metadata also do not guarantee modern code, error-free operation, security, feature completeness or suitability for a particular site. Why active installs don’t tell the whole story →
WP PlugIndex currently records Password Less Login version 1.0.0.1 as active, updated 9mo ago and tested up to WordPress 6.8.
Overview
About this plugin
Password Less Login is a passwordless and OTP-based login system for WordPress.
Every user — both existing and new — must verify their identity using a One-Time Password (OTP) sent to their email before being logged in.
This ensures that no one can access an account without confirming ownership of the email address, providing a secure, passwordless authentication process.
How It Works
The user enters their email address.
The plugin sends a 6-digit OTP to that email.
The user enters the OTP:
If the email exists → the user is securely logged in.
If the email is new → the user provides a username, verifies the OTP, and a new account is created automatically.
The OTP is valid for 10 minutes and expires after use.
>
Note: The plugin never logs in users without OTP verification.
Key Features
OTP-Based Authentication for All Users – Both existing and new users must verify the OTP before login.
Passwordless Login – Securely log in using only your email and OTP.
Auto User Registration – New users can register instantly after OTP verification.
Temporary OTP (10 Minutes) – Each OTP expires after 10 minutes and can only be used once.
Rate Limiting – Prevents brute-force or spam OTP requests (maximum 5 per 15 minutes per email).
Nonce Verification – Protects REST API endpoints from unauthorized access.
Secure Email Handling – Emails are hashed when stored in transients to protect user data.
Streamlined User Experience – Clean, minimal login flow with conditional fields for existing vs. new users.
Why Choose Password Less Login?
No passwords to remember or reset.
OTP verification ensures true ownership of email.
Protects against brute-force attacks.
Simple setup – works with the native WordPress login page.
Modern and user-friendly design.
Reduces “Forgot Password” support requests.
Usage
Go to your WordPress login page.
Enter your email address and click “Send OTP”.
Check your email for the OTP.
Enter the OTP in the login form:
If your account exists, you’ll be logged in.
If not, you’ll be prompted to provide a username before registration and login.
You’ll be redirected to your dashboard after successful verification.
License
This plugin is released under the GPL license. You are free to use and modify it.
com
WordPress.org metadata
Plugin tags
Topics listed for this plugin in the WordPress.org directory.
easy login
email authentication
otp login
passwordless login
secure login
Compatibility & maintenance
Compatibility & maintenance
Tested up to WordPress 6.8
Not yet marked as tested with WordPress 7.1. WordPress.org currently lists Tested up to 6.8.
Current WordPress releaseWordPress 7.1
WordPress.org Tested up to6.8
Minimum requirementsWordPress 5.9 · PHP 7.4
Update activity7 Jan 20269mo ago
“Tested up to” is directory metadata supplied by the plugin author. WP PlugIndex does not turn an older declaration into a claim that the plugin is incompatible.
Changes recorded by WP PlugIndex
Recent tracked changes
No tracked version or compatibility changes have been recorded by WP PlugIndex yet.
Tracking & source
WP PlugIndex tracks public WordPress.org directory metadata and records selected version, compatibility and availability changes as they are detected.
