NNFP – Passwordless Email OTP Login
No Need For Password lets users log in and register using a one-time password (OTP) sent to their email — no traditional passwords required. – No passwords to remember. – Fast, simple, and user-friendly authentication for WordPress.
This plugin is designed for modern websites that want: – Better user experience – Fewer failed logins – Reduced password-related security risks
Users simply enter their email, receive a secure OTP, and log in instantly.
Perfect for: – Blogs – Membership sites – WooCommerce stores – SaaS-style WordPress websites
No external services. No third-party APIs. Everything runs inside WordPress.
🔐 Key Features
- Passwordless login via email OTP
- Automatic user registration for new emails
- Secure OTP with expiry time
- Login popup with clean UI
- Logout link for logged-in users
- Gutenberg & Full Site Editing (FSE) compatible
- Works with block themes like Twenty Twenty-Three
- ACF support for user registration fields
- AJAX-based (no page reloads)
- Lightweight & fast
- Developer-friendly and extensible
- Compatible with modern block themes
🚀 How It Works
- User clicks Login
- Enters email address
- Receives a 6-digit OTP by email
- Enters OTP
- Logged in instantly
No passwords. No reset links. No friction.
👨💻 Who Is It For?
- Membership websites
- WooCommerce stores
- Blogs and communities
- SaaS-style WordPress apps
- Anyone who wants password-free authentication
🧱 Shortcodes
Use these shortcodes anywhere on your site:
Login button
[nnfp_login_button]
Login page container
[nnfp_login_form]
Registration popup button
[nnfp_register_popup_button]
Registration form
[nnfp_registration_form]
🎨 Theme Compatibility
This plugin works with: – Classic themes – Block themes (Full Site Editing) – Twenty Twenty-Three – Twenty Twenty-Four – Most modern WordPress themes
No theme files need to be edited.
🔌 ACF Integration (Optional)
If Advanced Custom Fields (ACF) is installed: – User registration fields are automatically detected – ACF values are saved to the user profile after OTP verification
ACF is optional — the plugin works perfectly without it.
🔒 Security
- OTP is time-limited
- Nonce protection on all AJAX requests
- Sanitized and validated user input
- Uses WordPress authentication APIs
- No passwords stored or transmitted
👨💻 Developer Friendly
Hooks and filters can be added easily. Clean class-based architecture. No hard dependencies.
Support
For support, feature requests, or bug reports: https://github.com/developer-ramesh