Sign-in Codes

Passwordless sign-in for WooCommerce checkout

They forgot the password. You keep the sale.

Returning customers sign in at checkout with a one-time code by email or WhatsApp. No reset email, no new password, no trip away from checkout. Their bag and everything they typed stay put.

Try the live demo Watch the 2-minute tour

Coming to the WooCommerce Marketplace · Version 1.0.1

  • Checkout block
  • Classic checkout
  • My Account login
  • Email codes, no setup
  • WhatsApp optional

Juniper & Co.

Contact

Welcome back

You already have an account

This email already has an account with Juniper & Co. Sign in and you’ll come straight back here with your bag and the details you entered.

Not you? Use a different email

Shipping address

Your bag

1Linen overshirtSand · M$68.00
1Canvas toteNatural$24.00
Subtotal$92.00
ShippingFree
Total$92.00

Welcome back. The store knows her email. A card opens right there, before she ever reaches Place order.

The two-minute tour

See it on a real store, start to finish.

From the message it replaces to the settings screen, narrated, with captions.

Captions are in the player. The same video is the featured video on the WooCommerce.com listing.

The problem

The message that ends checkouts.

A returning customer types their email, fills in the address, and presses Place order. WooCommerce stops them and asks them to log in. Most don’t remember the password, and a reset means leaving checkout for their inbox.

An account is already registered with your email address. Please log in.

5% of shoppers hit that message at checkout and leave without buying.

One in every twenty shoppers.

From checkout data on WooCommerce stores we work with.

Sign-in Codes turns that message into a sign-in card, right where the shopper is. The same card shows earlier too, the moment a returning email is typed, so most customers never see the error at all.

Before and after

From seven steps to three taps.

The same returning customer, the same order, on the same store.

A password reset

WooCommerce on its own

  1. 1Press Place order, see “Please log in”
  2. 2Find the login link, try a password
  3. 3Click “Lost your password?”
  4. 4Leave checkout, open the inbox, wait
  5. 5Choose and confirm a new password
  6. 6Find the way back to checkout
  7. 7Or close the tab
2tabs1new password to remember

A sign-in code

With Sign-in Codes

  1. 1Type the email, the store says “Welcome back”
  2. 2Tap “Email me a sign-in code”
  3. 3Tap the code in the email notification
  4. Signed in at checkout, bag and details kept
0pages away from checkout0passwords

How it works

Recognized, signed in, back to paying.

01 · Recognized

The store knows them before Place order.

A line under the email field tells returning customers they can sign in with a code. When they type an email (or a mobile number) that has an account, a “Welcome back” card opens in place.

02 · One code

Six digits by email or WhatsApp.

Phones show the code in the notification and fill it in, so it is often one tap. Once all six digits are in, they’re signed in. The password still works for anyone who prefers it.

03 · Nothing lost

The bag and the typed details stay.

They never leave checkout. Their saved address fills in, what they already typed is kept, and the bag they built as a guest is the bag they pay for.

Wherever they sign in

One sign-in, everywhere a customer meets it.

  • Checkout block

    Added by itself, also on checkout pages saved before.

  • Classic checkout

    For themes and stores that keep the shortcode.

  • The Place order safety net

    “Already registered” becomes the same sign-in card.

  • My Account login

    A code on the account page, next to the password.

  • Pay for an order

    Signed in on the payment page, back to that order.

WhatsApp, when you want it

Codes and order updates where customers already are.

Email codes work on their own. Connect the WhatsApp Cloud API and customers can get their code on WhatsApp too, sign in with their mobile number, and follow their order without opening an email.

  • Opt-in at checkout, confirmed with a code after the order
  • Order updates by status, with View order, Track package and Finish payment buttons
  • A Notifications page in My Account: switches, change or remove the number
  • STOP and START honored at once, and “Where’s my order?” answered for them
  • No marketing messages, ever: codes and order updates only

Built to be safe

Easier for customers. Not easier for anyone else.

A code replaces only the password. Everything else your store checks at sign-in still runs.

  • Short-lived and single use

    Six digits, ten minutes, five tries, and it works once. A new code replaces the old one.

  • Only in the browser that asked

    A code sent to one checkout can’t be used from another device or browser.

  • Two-factor still runs

    If your store uses a two-factor or security plugin, its own step follows the code, over checkout. 33 plugins recognized.

  • Staff keep their password

    Admins, shop managers and any role you choose never get codes and sign in on the account page.

  • Never stored as a code

    Codes are kept only as a keyed hash and never written to logs. WhatsApp numbers in the message log are hashed too.

  • Limits on every door

    Requests are limited per address, per account and for the whole store, so nobody can guess or flood codes.

Looks like your store

Your theme’s colors, your words, your templates.

Colors and corners are a setting: your theme’s button color or one you pick, a white, dark or see-through card, and square to extra rounded corners, with a live preview. Colors that would be hard to read are adjusted for you.

Developers can go further: every color, corner and font is a CSS custom property, every customer-facing template can be copied to your theme, and the two emails are edited like any WooCommerce email. Other plugins can send their own order updates through the same opt-in and WhatsApp connection.

/* your theme’s style.css */
:root {
  --rb-sico-accent: #2f5d50;
  --rb-sico-radius: 4px;
  --rb-sico-heading-font: "Your Serif";
}

/* or the whole card: */
yourtheme/sign-in-codes/checkout/sign-in-card.php

See it for real

How it works in screenshots

Checkout, the code email, My Account, WhatsApp and the settings, from our demo store on version 1.0.1.

  • Checkout: a returning customer types their email, and the Welcome back card offers a code

  • The six-digit code, typed in or filled from the notification

  • The code email: it works once, for 10 minutes, in the browser that asked

  • Signed in at checkout: the saved address is in, the bag is kept

  • Place order with a known email: the sign-in card, not the error

  • A two-factor plugin’s own step, in a panel over checkout

  • The line under the email field, sign-in by mobile number, and the WhatsApp opt-in

  • My Account: sign in with a one-time code, next to the password

  • Sign in with a mobile number: the code goes to WhatsApp

  • WhatsApp order updates: opt in at checkout

  • Order received: confirm the number with a code

  • My Account, Notifications: switches, change or remove the number

  • Account details: the number, with a link to Notifications

  • Settings: Sign-in

  • Settings: the WhatsApp connection

  • Settings: templates and order status messages

  • Settings: Appearance, with a live preview of your choices

  • The card in your store’s own color, with rounder corners

  • A dark theme: the card takes its buttons and colors by itself

Spin up a live demo store

FAQ

Before you buy.

What store owners ask us about Sign-in Codes, answered straight.

01

Do I need WhatsApp?

No. Email codes work on their own, with no account anywhere else. WhatsApp stays off until you connect it, and turning it off again hides every WhatsApp option and keeps your data.

02

Does it replace my customers' two-factor sign-in?

No. A code stands in for the password only. Any second step another plugin asks for (an authenticator code, an emailed code, a security key) still runs, in a panel over checkout, and the customer comes straight back. It recognizes 33 two-factor and security plugins.

03

Does it work with the Checkout block?

Yes, and with the classic checkout. In the Checkout block the sign-in card is added by itself, also on checkout pages saved before you installed it. The My Account login form gets codes too.

04

Can staff sign in with a code?

No. Roles on "Password only for" (staff roles by default) always sign in with their password on the account page. You choose which roles are on that list.

05

Will customers get marketing messages?

No. The plugin sends sign-in codes and order updates only, to customers who opted in and confirmed their number. Replying STOP turns order updates off at once; sign-in codes still arrive when the customer asks for one, and the STOP reply says so.

06

What happens to my data if I uninstall it?

Settings and data stay unless you tick "Delete data on uninstall". Customer data is also part of WordPress's personal data export and erasure tools, and suggested privacy policy text is added under Settings > Privacy.

Every returning customer is one code away from paying.

Install it, and the next “already registered” is a “Welcome back”.

Spin up a live demo store

Coming to the WooCommerce Marketplace · Version 1.0.1

Built by RoundBorders, the WooCommerce engineering studio

WhatsApp is a trademark of WhatsApp LLC. Sign-in Codes and RoundBorders are not affiliated with or endorsed by Meta or WhatsApp.