Half of all login trouble is a forgotten password. OTP Login lets customers sign in with their mobile number or email and a 6-digit code, the way they already do with their bank and their taxi app.

Text message or email

Codes go out by SMS through your own Twilio or MSG91 account, or by email with no provider at all. With both SMS providers set up, numbers in India go through the one you choose and every other country through Twilio. A test button sends a message and shows you the provider's answer.

Sign-up in the same step

A number or address that has no account can get one created the moment the code is entered, with the role you choose. Existing WooCommerce customers are recognised by their billing phone.

Built to be hard to abuse

A code lives five minutes, works once and allows five wrong guesses; only a keyed hash of it is stored. Requests are limited per number and per computer, which also caps what a prankster can cost you in SMS fees. When sign-up is closed, an unknown number gets the same answer as a known one. Administrator accounts cannot sign in with a code.

Fits where you need it

Put the form on any page with a shortcode. A "Sign in with a code instead" link is added to the WordPress and WooCommerce login forms. On phones the code from the text message is offered by the keyboard, and typing the sixth digit signs in.