Enable OTP login for WordPress that supports WooCommerce using phone numbers, SMS, or WhatsApp. Secure passwordless login with custom gateways and GDPR compliance.
Login/register with phone number in WordPress can happen with this plugin. Your customer can authenticate with their mobile number via OTP.
Added country flags to login with phone number form
You can add almost every SMS gateways (if you have) yourself for free, or you can ask us to develop your sms gateway with paying extra.
you can change style and appearance of forms
You can use Firebase, textlocal and other SMS gateways
Redirect Users to Specific URLs After Logging in or Registering
You can use your custom gateway. you can also use other ready sms gateways from idehweb.com.
Supported gateways for now:
Firebase – Free
Msg91
Twilio
Netgsm
Alibabacloud
Messagebird
Kavenegar
Trustsignal
taqnyat
2factor
Textlocal
BlueSoft
IQSMS
Whatsapp
Ultramessage
Telegram
Ippanel
Sms.ir
MelliPayamak
Farazsms
You can now choose to store phone numbers with or without the country code.
External Services
This plugin uses external services to provide chat support and analyze user behavior. Below is the list of services used and what data is sent:
Crisp Chat
– Used to provide live chat functionality within the plugin for user support.
– Data sent: user chat messages, name, email, IP address.
– Service provider: Crisp IM SARL
– Terms of Service: https://crisp.chat/en/terms/
– Privacy Policy: https://crisp.chat/en/privacy/
Microsoft Clarity
– Used for user behavior analytics to understand how users interact with the plugin’s administrative pages.
– Data sent: user interactions like mouse movements, clicks, and scrolling. Personally identifiable information (PII) is masked.
– Service provider: Microsoft
– Terms of Service: https://clarity.microsoft.com/terms
– Privacy Policy: https://privacy.microsoft.com/en-us/privacystatement
Firebase Authentication
– Used to verify users’ phone numbers with OTP for secure authentication.
– Data sent: phone number and verification requests. IP addresses are used for security and abuse prevention.
– Service provider: Google Firebase
– Terms of Service: https://firebase.google.com/terms
– Privacy Policy: https://firebase.google.com/support/privacy
Yes, the plugin is fully compatible with WooCommerce. You can use phone number login and registration on WooCommerce account pages and checkout forms.
What countries are supported for phone number login?
The plugin supports international phone numbers. You can configure default country codes and formatting options in the plugin settings.
Is OTP (One-Time Password) login supported?
Yes. Users can log in using an OTP sent to their phone number. You can choose between SMS gateways to handle OTP delivery.
Which SMS gateways are supported?
The plugin supports multiple SMS gateways, including local (Iranian) and international providers. You can select your preferred gateway from the settings panel.
Can I customize the login form design?
Yes, the plugin provides shortcodes and hooks for developers. You can fully customize the form layout using CSS or integrate it into your theme templates. Also you can purchase Pro version for customizing easier.
Can this plugin work with existing users?
Yes. The plugin can be synchronized with existing WordPress users. If a phone number is already stored (e.g., in user meta), the plugin can match and allow login without requiring re-registration.
Can I allow login with both phone number and email?
Yes, you can enable dual login. The plugin lets users log in using either their phone number or email address — whichever is more convenient.
Does the plugin support Google SSO (Single Sign-On)?
Yes. You can enable Google SSO alongside phone login. This allows users to log in quickly with their Google account, providing a seamless and flexible login experience.
Does this plugin replace the default WordPress login?
You can either use this plugin alongside the default login or redirect users to the phone-based login form exclusively. This behavior is configurable in the settings.
Is the plugin translation-ready?
Yes, the plugin is fully translation-ready and compatible with WPML, Polylang, and other popular translation plugins. It also includes Persian (fa_IR) translations out of the box.
How can I report security bugs?
You can report security bugs through the Patchstack Vulnerability Disclosure Program. The Patchstack team help validate, triage and handle any security vulnerabilities. Report a security vulnerability.
Escaped user-generated output in JSON responses to prevent potential security issues.
Refactored main plugin code: split one large file into five smaller modular files for better readability and maintainability.
Fixed fatal error on sites without WooCommerce by guarding is_account_page() calls with function_exists().
Added versioning to all enqueued CSS and JS files for proper cache-busting (filemtime() recommended).
Fixed intlTelInput integration: ensured script and inline initialization work properly; added proper footer handling.
Corrected HTML input for security code (id attribute added, pattern changed to [0-9]{6} for HTML5 compliance).
Fixed minor typos and double slashes in Firebase script paths.
Ensured all scripts intended for front-end are hooked to wp_enqueue_scripts and not admin_enqueue_scripts.
Enhanced compatibility with PHP 8+ to avoid deprecated warnings.
Optimized SMS sending for faster processing and lower server load.
Added filter hooks to allow customizations for the SMS sending logic.
Improved error messages for failed phone number validation to be more user-friendly.
Added an option to enable/disable automatic phone number verification during registration.
Updated translation files to include new language keys for recently added features.
Fixed issue with multi-site installations where the plugin settings were not being saved correctly.
Improved UI for the admin settings page to make it more user-friendly and responsive.
Added feature to send a test SMS to verify gateway settings before saving them.
1.8.48
Strengthened Firebase OTP verification logic to properly validate API responses before authenticating users.
Prevented unauthorized logins caused by improper handling of Firebase verification errors.
Added validation to ensure Firebase API key is configured before attempting verification.
1.8.46
Added option to customize the text displayed after login (instead of the form)
Added logout className support
Added UserName and IsLoggedIn to the wp_localize_script object
1.8.44
Added conditional check to ensure the .lwp_login_overlay is appended only if it does not already exist.
Enhanced the overlay display functionality for improved user experience when the sticky option is enabled.
1.8.43
New Feature: Added an option to show the login/register form on all pages, except the “My Account” page in WooCommerce.
Admin can enable this option via the settings page.
The form will be displayed in the footer of all pages, excluding the WooCommerce account pages (my-account).
1.8.42
Added a notice to encourage users to activate an SMS gateway for enabling login via phone number.
The notice informs users to configure the SMS gateway and highlights WhatsApp OTP as a more efficient, cost-effective solution.
Provides a direct link to the gateway settings page for easy configuration.
1.8.41
System Default Gateway Upgrade! See your credit, track expiry, and send OTPs over WhatsApp with ease!
1.8.39
Updated prices for the system default SMS gateway. You can enable it under the General tab by selecting System default in the “SMS Default Gateway” field.
1.8.37
solve problem of “lwp_forgot_password”
1.8.36
Added Netgsm Turkey SMS gateway
1.8.26
Added system default sms gateway (Whatsapp OTP gateway)
1.8.25
Added Option to store phone numbers without the country code. By default, phone numbers are stored with the country code.
1.8.24
update lwp_update_password_action function
update extra fields with method firebase
1.8.23
update algorithm of setting extra fields and registration
1.8.21
add usage tracking code
enable button to disable support chat and tracking code
only show chat on admin page
1.8.15
solve msg91 for indian users
1.8.14
add firebase label
1.8.13
remove conflicting for iti__flags
1.8.12
remove ads
1.8.11
update readme and docs
remove wizard
optimize flags styles
add some other sms gateways
sync old woocommerce users billing_phone with $billing_phone
