Passwordless Login and 2FA: customers sign in with an email OTP code module for PrestaShop

⚡ One module, three ways to sign in: drop passwords entirely, let your customers choose between a code and their password, or keep the password and add a one-time code as a mandatory second step. You pick, the module does the rest.

➖

❓ Why choose our module?

• Three login modes

Pick the one that suits your store, and change your mind whenever you like. With the verification code only, nobody needs a password at any point. With code or password, the page leads with the code and a link underneath lets anyone who remembers their password use it instead. With password and verification code, both are required and every account gains a second lock.

• Nothing extra to set up

You switch it on and it works. Registration follows the mode you chose, so the password field appears or disappears by itself, and when it is gone your customer still gets a strong password, created quietly for them. There is nothing else to prepare and nobody to call.

• Codes that expire

You decide how long a code lives, from 5 to 60 minutes, and how long it is: 4, 5, 6 or 8 digits. Each one works a single time and is thrown away after five wrong tries. An old code sitting in an inbox is worth nothing to whoever finds it later.

• Brute-force protection built in

Decide how many codes one email address may ask for, from 1 to 10 every 15 minutes, and how long it waits between tries, from 30 to 300 seconds. The same window applies to each IP address on its own, so a single machine cannot work its way down your customer list. And whatever happens, the page never reveals whether an address has an account in your store.

• Full activity log

Every code sent and every sign-in lands in a table in your back office, with the date, the email address, the customer, the IP address and how it ended. Six colour-coded results tell you at a glance whether the code arrived, whether it was typed wrong, and whether somebody ran into the limit. Clear the table whenever you want.

• It looks like your store

The module reuses the login page your theme already draws and adds the code panel to it, so your customers see the page they know. No second login page, no detour to anywhere else, and nothing new for anyone to learn.

• Works inside one-page checkouts

Your customers sign in without leaving the checkout. Only the account block is replaced, so the delivery and payment columns stay on screen and the order keeps its place. A shopper who has to stop and sign in somewhere else is a shopper you can lose, and here nobody leaves the page.

• You decide where it appears

A panel in the configuration lists every place the sign-in can show up in your store and tells you which ones are live right now. If your theme puts the login form somewhere unusual, turn the right one on with a click. No code, no developer, no waiting.

• Social and one-click checkout safe

Google, Facebook, PayPal and any other sign-in that already identifies the customer carry on untouched. The module never steps in front of them, so the social login or one-click checkout you already paid for keeps working exactly as it did.

➖

❓ What makes this module essential for your store?

• Passwordless login

Customers enter their email and the one-time code they receive in their inbox. There is no password to phish, guess or breach, and no "I forgot my password" support tickets.

• Two-factor security

Prefer to keep passwords? Switch to the two-factor mode and the password becomes the first step, with an emailed code as a mandatory second one. A stolen or reused password is no longer enough to reach an account.

• Nobody abandons the checkout

The sign-in works inside one-page checkout modules too, replacing only the account block. Your customer gets their code and carries on with the same order, with the delivery and payment steps still on screen.

• Every email says who is signing in

The code email lists the date and time, the device, the browser and the IP address with its approximate location, so your customer recognises their own request or spots one that is not theirs. On an iPhone, an iPad or a Mac the code is offered right above the keyboard, so they tap once instead of copying digits.

• Security and audit

Rate limiting stops attackers from spraying your login form, and the built-in activity log shows exactly what happened for every attempt: code sent, login success, verification failed, rate limited, no account or send failed.

➖

♻️ Constant updates: the module is kept compatible with every new PrestaShop release.

⚜️ Certified PrestaShop Partner: developed by idnovate, a PrestaShop partner agency with more than 10 years of experience.

☎️ Fast support: our team helps you set up and adapt the module to your theme.