Email and password authentication has been the default login method for WordPress sites since the platform launched, but user behavior has shifted significantly. More people browse and shop on mobile devices than on desktop, and asking someone to remember a password they created months ago on a different device creates exactly the kind of friction that turns registrations into abandonments and repeat visits into lost customers. Digits changes the authentication model entirely by replacing or supplementing the traditional email and password flow with mobile phone number verification using one-time passwords delivered via SMS or WhatsApp.
Available on CodeCanyon and actively maintained with a strong update history, Digits is one of the most complete phone-based authentication plugins available for WordPress. It handles OTP-based registration, login, password recovery, and two-factor authentication, and it does all of it through a polished front-end interface that works seamlessly on the mobile devices where most of your users actually are.
What Is Digits
Digits is a premium WordPress plugin that enables phone number based user registration and login using one-time password verification. Instead of asking users to create and remember a password, Digits sends a verification code to their mobile number via SMS, WhatsApp, or voice call, and the user enters that code to authenticate. The entire process takes seconds, works on any device, and eliminates the password recovery loop that frustrates users and increases support requests on any membership or eCommerce site.
The plugin integrates with all major SMS gateways, supports WhatsApp OTP delivery through multiple providers, works alongside WooCommerce for checkout authentication, and includes a growing library of addons that extend its functionality into social login, custom form building, and deeper WooCommerce integration. For any WordPress site where user accounts matter, Digits provides a modern authentication experience that matches what users have come to expect from apps and platforms outside the WordPress ecosystem.
Key Features
| Feature | Description |
|---|---|
| Mobile OTP Registration | Allow new users to register using their mobile phone number with OTP verification instead of email |
| Mobile OTP Login | Let existing users log in using their phone number and a one-time password sent via SMS or WhatsApp |
| Two-Factor Authentication | Add an OTP verification step on top of the standard WordPress email and password login |
| Phone Number as Username | Use the verified mobile number as the WordPress username for a cleaner registration experience |
| OTP via WhatsApp | Deliver one-time passwords through WhatsApp in addition to traditional SMS channels |
| OTP via Voice Call | Send OTP codes as automated voice calls for users who cannot receive SMS messages |
| Custom OTP Forms | Design fully custom registration and login forms using the built-in form builder |
| WooCommerce Integration | Enable phone-based checkout login and registration directly on the WooCommerce checkout page |
| Country Code Selector | Automatic and manual country code selection with a searchable country dropdown |
| OTP Expiry and Resend Control | Configure OTP validity period, maximum attempts, and resend cooldown intervals |
Supported SMS and OTP Gateways
| Gateway | Delivery Method |
|---|---|
| Twilio | SMS and Voice Call |
| Vonage (Nexmo) | SMS and Voice Call |
| MessageBird | SMS |
| AWS SNS | SMS |
| Firebase | SMS via Google Firebase Authentication |
| BulkSMS | SMS |
| Clickatell | SMS |
| Plivo | SMS and Voice Call |
| Infobip | SMS and WhatsApp |
| 2Factor | SMS for Indian phone numbers |
| MSG91 | SMS and OTP for Indian phone numbers |
| Kaleyra | SMS for Indian and global numbers |
| WhatsApp via Twilio | WhatsApp OTP delivery |
| WhatsApp via 360dialog | WhatsApp OTP delivery |
| Custom Gateway | HTTP API integration for any SMS provider not listed above |
Digits Addons
| Addon | What It Adds |
|---|---|
| Social Login | Allow users to register and log in using Google, Facebook, Apple, and Twitter accounts |
| WooCommerce Addon | Deep WooCommerce integration with phone-based checkout, order tracking by phone, and customer phone verification |
| Custom Form Builder | Create fully custom registration forms with additional fields beyond the default phone and OTP inputs |
| BuddyPress Integration | Sync Digits phone verification with BuddyPress profiles and member registration flows |
| Profile Builder Integration | Connect Digits OTP authentication with Profile Builder Pro registration and login forms |
| User Meta Display | Show verified phone number data in user profiles and admin user list tables |
| Phone Number Visibility Control | Control which user roles can see phone numbers in the admin and on front-end profiles |
| Multisite Support | Extend Digits authentication across all sites in a WordPress multisite network |
Authentication Flow Options
| Flow Type | How It Works |
|---|---|
| Phone Only Registration | User enters phone number, receives OTP, verifies, and account is created with no password required |
| Phone and Email Registration | User provides both phone number and email, OTP verifies the phone, email is stored as a secondary identifier |
| Phone Number Login | Existing users log in by entering their phone number and verifying with a fresh OTP |
| Email or Phone Login | Users can choose to log in with either their email and password or their phone number and OTP |
| Two-Factor Authentication | Standard WordPress login followed by OTP verification as a mandatory second step |
| Phone Number Linking | Existing users with email accounts can link a verified phone number to their profile for future OTP login |
| WooCommerce Checkout Login | Customers can log in or register during checkout using phone number and OTP without leaving the checkout page |
| Password Recovery via OTP | Users who forget their password can reset it by verifying their registered phone number with an OTP |
Who Should Use Digits
eCommerce store owners running WooCommerce who want to reduce checkout abandonment caused by forgotten passwords and failed login attempts will find Digits one of the most practically impactful plugins available. When a returning customer can authenticate at checkout by simply entering their phone number and a code they receive within seconds, the friction that causes cart abandonment at the login step drops significantly. The WooCommerce addon extends this further with phone-based order tracking and customer verification throughout the post-purchase experience.
Membership site owners and online community builders who deal with the ongoing frustration of password reset requests and inactive accounts caused by login friction will find that switching to phone-based authentication reduces support burden while increasing login completion rates. Users are far more likely to successfully complete a phone OTP login on a mobile device than to remember a password they set up during a desktop session weeks earlier.
App developers and agencies building mobile-first WordPress experiences will appreciate how naturally Digits fits into a workflow where most users are expected to access the site from a smartphone. The phone number becomes the primary identifier rather than an email address that may or may not be regularly checked, and the OTP flow mirrors the authentication experience users already know from banking apps, food delivery platforms, and messaging services.
Indian and Southeast Asian market websites will benefit from the regional SMS gateway support that Digits includes natively. Providers like MSG91, 2Factor, and Kaleyra are specifically optimized for high-volume OTP delivery in markets where international gateways like Twilio can be unreliable or cost-prohibitive, and having them available as first-class integrations makes Digits a practical choice for WordPress sites serving those markets.
Security-conscious site owners who want to add a meaningful authentication layer without forcing users through a complex multi-factor setup will find the two-factor authentication mode a clean middle ground. Standard email and password login remains available, but every login attempt requires a second verification step via OTP before access is granted, which blocks credential-stuffing attacks and unauthorized logins even when passwords have been compromised.
Digits vs Other WordPress OTP and Phone Login Plugins
| Feature | Digits | OTP Login | Mobile Number Login | miniOrange OTP | WP Phone Authentication |
|---|---|---|---|---|---|
| SMS OTP Login | Yes | Yes | Yes | Yes | Yes |
| WhatsApp OTP | Yes | No | No | Yes | No |
| Voice Call OTP | Yes | No | No | Yes | No |
| Two-Factor Authentication | Yes | No | Limited | Yes | No |
| WooCommerce Integration | Yes | No | No | With addon | No |
| Social Login Addon | Yes | No | No | Yes | No |
| Custom Form Builder | Yes | No | No | No | No |
| Gateway Options | 15 plus | 5 plus | Limited | 10 plus | Limited |
| BuddyPress Integration | Yes | No | No | No | No |
| One-Time Price | Yes | Yes | Yes | No, monthly | Yes |
How to Install Digits
Download the Digits zip file from WPDropzone. In your WordPress admin panel navigate to Plugins, click Add New, then Upload Plugin, and select the downloaded file. Click Install Now and activate the plugin once installation completes. After activation, Digits will appear in your WordPress sidebar. Navigate to the Digits settings panel to select your preferred SMS gateway, enter your gateway API credentials, and configure your OTP delivery preferences including message template, expiry time, and resend interval. You can then choose which authentication flows to enable, whether that is phone-only registration, two-factor authentication, or a combination of both, and use the provided shortcodes or Gutenberg blocks to place the Digits login and registration forms on any page. For addon installation, each addon installs as a separate zip file through the same upload process.
Frequently Asked Questions
Does Digits completely replace the default WordPress login system? Not necessarily. Digits gives you full control over how authentication works on your site and you can choose to replace the default login entirely, run it alongside the standard system, or add OTP as a mandatory second factor on top of email and password. The configuration is flexible enough to accommodate any combination that suits your site’s requirements.
Which SMS gateway is recommended for Digits? The best gateway depends on your target audience and geographic location. Twilio is the most commonly used choice for international sites due to its reliability and broad coverage. For sites primarily serving India, MSG91 and 2Factor offer better delivery rates and more competitive pricing. Digits also supports a custom HTTP gateway option that allows integration with any SMS provider not included in the default list.
Can existing WordPress users link a phone number to their account without re-registering? Yes. Digits includes a phone number linking feature that allows existing users with standard email and password accounts to add a verified phone number to their profile. Once linked, they can use that phone number for OTP login going forward without needing to create a new account or lose their existing user data.
Does Digits work with WooCommerce My Account and checkout pages? Yes. With the WooCommerce addon, Digits integrates directly into the WooCommerce My Account page and the checkout login form. Customers can register or log in during checkout using phone number and OTP, and the My Account page reflects the phone-based authentication options alongside the standard account management features.
Is OTP delivery reliable enough for production use on a high-traffic site? Yes, provided you choose a gateway with adequate capacity for your volume. Digits itself adds no latency to OTP delivery beyond the API call to your chosen gateway. For high-volume sites, it is recommended to use a gateway that offers delivery reports and fallback routing, both of which Digits supports through its gateway configuration options.
Can I customize the OTP message that gets sent to users? Yes. Digits includes a message template editor where you can write a custom SMS message that includes the OTP code as a dynamic placeholder. You can personalize the message with your site name, adjust the tone and wording, and create separate templates for registration, login, and password recovery OTP messages.
⚠️ Disclaimer: This plugin/theme is for personal use and practice only. Run a malware scan before use. For commercial use, purchase a license from the official website.
