Passwordless Login

Passwordless Login eliminates authentication friction at checkout and account entry points by replacing traditional passwords with instant one-time passcodes (OTP) and one-click Magic Links. Standard password reset flows and mobile password typing frequently cause cart abandonment and dropped purchases.

This extension streamlines customer access while supporting hybrid authentication, allowing shoppers to choose between passwordless verification and standard passwords. It features automatic guest cart merging, mobile cross-device authorization, configurable GDPR compliance prompts, and built-in security throttling to protect your email server reputation from brute-force bot attacks.

Business Value

• Reduce Checkout Abandonment: Eliminate forgotten-password friction at the final stage of purchase, keeping shoppers on the checkout page without forcing long reset workflows.
• Increase Mobile Conversion Rates: Replace complex password entry on mobile devices with fast 6-digit email OTPs or single-tap Magic Links.
• Protect Mail Server Infrastructure: Prevent mail server abuse, brute-force attacks, and spamming with built-in attempt limits, resend cooldown timers, and daily code caps.
• Maintain Regulatory Compliance: Seamlessly adapt your registration flow with choice-based settings—from silent auto-registration for frictionless UX to explicit confirmation prompts for strict GDPR adherence.
• Preserve Cart Continuity: Automatically merge guest cart items into customer accounts upon successful authorization, ensuring shoppers never lose selected items.

Feature Highlights

• Dual Passwordless Methods: Authenticate users via secure 6-digit email OTP passcodes or instant email Magic Links.
• Hybrid Login Flexibility: Run passwordless login alongside traditional password fields, giving customers freedom of choice.
• Cross-Device Session Authorization: Authorize desktop sessions automatically when a user clicks a Magic Link received on their mobile phone.
• Inline Checkout Authorization: Log users in directly on the checkout page without redirecting them away from their current purchase context.
• Automated Cart Merging: Instantly transfer and merge guest shopping carts into customer accounts upon verification.
• Configurable GDPR Onboarding: Choose between silent background account creation or explicit account registration prompts for unregistered emails.
• Infrastructure Protection & Throttling: Set maximum failed verification attempts, resend cooldown timers, daily request caps, and token expiration windows.
• Multi-Store Email Customization: Assign localized transactional email templates for OTP codes and Magic Links across individual Store Views.