OTP Login With Phone Number, OTP Verification
View on WordPress.orgScores higher than 43% of indexed plugins
About
Passwordless OTP login for WordPress. Login or register with phone number via SMS or Firebase. Compatible with WooCommerce. GDPR-compliant.
Security History
What It Does
OTP Login With Phone Number replaces traditional WordPress usernames and passwords with one-time passcodes sent to the user's phone via SMS or Firebase. It hooks into standard WordPress and WooCommerce login and registration flows so visitors can authenticate or create accounts using only a mobile number. The plugin also includes GDPR compliance features out of the box.
Who It's For
This plugin is a good fit for WooCommerce stores, membership sites, or any WordPress site targeting a mobile-first audience where password fatigue is hurting conversions. It works well for site owners serving regions where SMS is more reliable than email, or where owners want to reduce account friction for first-time customers. Developers building custom registration flows that need Firebase-backed authentication will also find value here.
Who Should Skip It
If your audience primarily uses desktop and already has no trouble with email-and-password logins, the extra SMS costs and complexity are not worth it. Sites needing deep third-party integrations, custom user meta on registration, or multilingual OTP flows may find the feature set too narrow for their needs.
The Bottom Line
The plugin delivers exactly what it promises: clean, passwordless OTP login with SMS and Firebase support, backed by a near-perfect user rating and fresh maintenance. The catch is its tiny install base and complete absence of public support activity, so you are relying heavily on the developer's responsiveness if something breaks. For a small WooCommerce store or test project that wants phone-based login without complexity, it is worth a try, but larger or mission-critical sites should weigh the support gap carefully.
Related Plugins
Pick this instead if you want popups, sliders, and full profile management rather than OTP-specific flows.
Pick this instead if you only need to share short-lived access links with contractors or clients, not phone-based authentication.
Pick this instead if your goal is to secure the existing login form with captchas and limits rather than replacing passwords with SMS.
Pick this instead if you need broader 2FA, social login, and SMS notifications from a more established vendor.
Pick this instead if you mainly want to verify user emails and approve new registrations rather than authenticate via phone.