Passwordless Login

73 Quality Score

Active Installs

14/30

At roughly 1,000 active installs this is a small player, well behind alternatives like Temporary Login Without Password at 100,000 installs, so the popularity score reflects niche rather than mainstream adoption.

Update Freshness

23/25

Last updated in early February 2026 and tested against WordPress 6.9.4, indicating the author is actively keeping the plugin current with recent core releases.

User Rating

15/15

A perfect 100/100 from 10 ratings is impressive but rests on a very small sample, so treat the rating as positive signal rather than statistically meaningful evidence.

Support Health

8/15

Zero support threads means there is no public track record to evaluate, leaving the support health neutral and forcing you to rely on documentation or direct author contact.

WP Compatibility

15/15

Requires WordPress 3.9 and has no stated PHP requirement, which is unusually permissive and suggests the codebase avoids modern PHP features, raising minor concerns about long-term forward compatibility.

Scores higher than 32% of indexed plugins

About

Passwordless login form via a simple to use shortcode: [passwordless-login]

Active Installs 1k+

Rating ★★★★★ 5/5

Last Updated 2026-02-02 8:30am GMT

Requires WordPress 3.9+

Tested Up To 6.9.7

Security History

1 known vulnerability, all patched

1 Medium

Most recent: March 18, 2024

View details ▸

What It Does

Passwordless Login lets site owners drop a [passwordless-login] shortcode onto any page or post, generating a login form that authenticates users via a one-time link sent to their email rather than a password. It is aimed at simplifying the front-end sign-in experience without requiring users to remember (or you to manage) credentials. Core functionality is narrow and focused: a shortcode-driven form and email-based magic link flow.

Who It's For

This plugin fits small to mid-sized WordPress sites that want to replace the default password login with a frictionless email-link experience, particularly membership, course, or community sites where recurring logins matter. It is also a reasonable choice for privacy-focused or mobile-first audiences who prefer email-based authentication over typing passwords on small screens. Developers building custom front-end experiences will appreciate the simple shortcode integration.

Who Should Skip It

If you run a high-traffic site, multi-factor authentication workflow, or need role-based access controls bundled into your login flow, this is too lightweight and you are better served by Magic Login or Secure Passkeys. Sites relying on social login, SSO, or WooCommerce customer accounts should also skip it, since the plugin does not address those flows at all.

The Bottom Line

Passwordless Login does one thing and appears to do it well, earning a 75.93/100 quality score that reflects solid maintenance and ratings offset by low adoption and no public support history. The perfect rating on only 10 reviews is encouraging but not conclusive, and the missing PHP version requirement is a small yellow flag. It is a sensible pick for a simple shortcode-based login experience, but anyone needing scale, SSO, or modern passkey support should look at Magic Login or Secure Passkeys instead.

Related Plugins

Temporary Login Without Password 80/100

Choose this when you need to grant short-lived admin or editor access to developers, support agents, or clients without sharing real credentials.

User Verification by PickPlugins 78/100

Pick this when passwordless authentication is just one piece of a broader user verification and account confirmation workflow.

Magic Login 77/100

Pick this for a more feature-rich passwordless authentication plugin that handles account creation, deep links, and broader WooCommerce or custom-form integrations.

Secure Passkeys 75/100

Choose this if you want modern WebAuthn passkey support, including device biometrics and hardware security keys, rather than emailed magic links.

Temporary Login 54/100

Pick this when you specifically need temporary, expiring login links for granting short-term backend access to non-registered users.