Passwords get reused, forgotten and phished. Passwordless lets users log in with a link or code sent to their email, or with a passkey on their phone, computer or security key. Turn on either or both, keep links and codes off for the roles that shouldn’t use them, and let new users register without ever choosing a password.
Features
- Log in with a one-time link or an 8-digit code sent by email
- Links and codes work once and expire after 15 minutes, or any time you set up to a day
- Email scanners can’t use up a link: opened in a different browser, it asks for a click first
- Log in with a passkey using Face ID, Touch ID, Windows Hello, a phone or a security key
- Passkeys show up in the browser’s username autofill
- Users are offered a passkey after they log in, and browsers that support it add one automatically after a saved-password login
- Users add, rename and remove their passkeys on their profile, and are emailed when one is added
- Turn off login links and codes for the roles you choose
- Let visitors register without choosing a password, with a login link in their welcome email (single site)
- Works across a multisite network
- When 2FA is installed, a passkey counts as both factors, while a link or code still asks for the second step
- When Social is installed, the buttons sit alongside its sign-in buttons on the login form
- When Notifications is installed, customize the login link and passkey emails, and send your own on passwordless logins and passkey changes