Title: Riverbox Passwordless Login
Author: riverbox
Published: <strong>2026년 7월 13일</strong>
Last modified: 2026년 7월 13일

---

플러그인 검색

![](https://ps.w.org/riverbox-passwordless-login/assets/banner-772x250.png?rev=3606049)

![](https://ps.w.org/riverbox-passwordless-login/assets/icon-256x256.png?rev=3606049)

# Riverbox Passwordless Login

 작성자: [riverbox](https://profiles.wordpress.org/riverbox/)

[다운로드](https://downloads.wordpress.org/plugin/riverbox-passwordless-login.1.1.1.zip)

 * [세부사항](https://ko.wordpress.org/plugins/riverbox-passwordless-login/#description)
 * [평가](https://ko.wordpress.org/plugins/riverbox-passwordless-login/#reviews)
 *  [설치](https://ko.wordpress.org/plugins/riverbox-passwordless-login/#installation)
 * [개발](https://ko.wordpress.org/plugins/riverbox-passwordless-login/#developers)

 [지원](https://wordpress.org/support/plugin/riverbox-passwordless-login/)

## 설명

Riverbox replaces passwords with modern, frictionless login. Users sign in with 
a one-time code, a magic link, a passkey, or their phone number — and new visitors
can get an account automatically.

**Login methods**

 * **Email one-time codes** — type your address, get a short code, you’re in.
 * **Magic links** — one-click login links by email; single-use and expiring.
 * **Passkeys (WebAuthn)** — sign in with a fingerprint, face, or security key. 
   Includes an account page (`[riverbox-account]`) where users manage their devices.
   No external services; the WebAuthn ceremony is verified on your own server.
 * **Phone one-time codes** — SMS login through your own HTTP SMS gateway ({{to}}/{{
   message}} placeholder templates).
 * **Password** — classic login can stay available alongside the passwordless methods.

**Security**

 * Codes stored only as hashes, with expiry, attempt caps, and resend cooldowns.
 * Per-IP and per-identifier rate limiting; responses never reveal whether an account
   exists.
 * Magic links are single-use and blocked for accounts that require multi-factor
   login.
 * A delivery log records every code dispatch with the raw gateway response.

**Developer friendly**

 * REST API under `riverbox/v1` (`/begin`, `/verify`, passkey endpoints) built on
   an extensible authentication-factor architecture — every method is a “factor”,
   and login flows are factor chains.
 * Documented hooks: `riverbox_register_factors`, `riverbox_login_chain`, `riverbox_otp_sent`,`
   riverbox_logged_in`, `riverbox_login_redirect`, `riverbox_user_created`, plus
   settings extension points.

**Riverbox Pro** (sold separately at [dontworry2much.com](https://dontworry2much.com/riverbox))
adds Twilio and WhatsApp Cloud API gateways, social login (Google, Microsoft, Facebook,
GitHub, LinkedIn, Discord), and role-based 2FA/3FA login flows.

**Privacy**

The free plugin does not connect to any external service. Emails go through your
site’s own mail system, SMS goes through the gateway you configure, and all data
stays in your WordPress database.

## 스크린샷

[⌊The login form with every method enabled: one-time codes (email or phone), magic
links, password, passkeys, and social login (Pro).⌉⌊The login form with every method
enabled: one-time codes (email or phone), magic links, password, passkeys, and social
login (Pro).⌉[

The login form with every method enabled: one-time codes (email or phone), magic
links, password, passkeys, and social login (Pro).

[⌊The one-time code verification step after a code has been sent.⌉⌊The one-time 
code verification step after a code has been sent.⌉[

The one-time code verification step after a code has been sent.

## 설치

 1. Install and activate the plugin.
 2. Add `[riverbox-login]` to any page; optionally add `[riverbox-account]` to a members
    page for passkey management.
 3. Configure methods, codes, signup behavior, and gateways under **Settings  Riverbox**.

## FAQ

### Does this replace my normal WordPress login?

No. Riverbox adds passwordless login wherever you place the shortcode. The standard
wp-login.php form keeps working, so you can never lock yourself out.

### Can new visitors register through the form?

Yes — enable automatic account creation in settings and choose the role new users
receive. Signup works with email and phone codes.

### Do passkeys need a third-party service?

No. Registration and verification happen entirely on your server using the WebAuthn
standard. Passkeys require HTTPS in production (browsers allow localhost for testing).

### How does phone login send SMS?

The free plugin includes a generic HTTP gateway you can point at any SMS provider’s
API. Riverbox Pro adds ready-made Twilio and WhatsApp Cloud API integrations.

### The code email doesn’t arrive — what do I check?

Email delivery depends on your site’s mail configuration. Check the Riverbox delivery
log and consider an SMTP plugin if your host’s default mail is unreliable.

## 후기

이 플러그인에 대한 평가가 없습니다.

## 기여자 & 개발자

“Riverbox Passwordless Login”(은)는 오픈 소스 소프트웨어입니다. 다음의 사람들이 
이 플러그인에 기여하였습니다.

기여자

 *   [ riverbox ](https://profiles.wordpress.org/riverbox/)

[자국어로 “Riverbox Passwordless Login”(을)를 번역하세요.](https://translate.wordpress.org/projects/wp-plugins/riverbox-passwordless-login)

### 개발에 관심이 있으십니까?

[코드 탐색하기](https://plugins.trac.wordpress.org/browser/riverbox-passwordless-login/)
는, [SVN 저장소](https://plugins.svn.wordpress.org/riverbox-passwordless-login/)
를 확인하시거나, [개발 기록](https://plugins.trac.wordpress.org/log/riverbox-passwordless-login/)
을 [RSS](https://plugins.trac.wordpress.org/log/riverbox-passwordless-login/?limit=100&mode=stop_on_copy&format=rss)
로 구독하세요.

## 변경이력

#### 1.1.1

 * Security: rate limiting is now atomic (single-statement counter on a dedicated
   table), so concurrent requests can no longer race past the limit.
 * Security: a code’s expiry is fixed at issue time — failed verification attempts
   can no longer extend its lifetime.

#### 1.1.0

 * New: magic link login (single-use, expiring, blocked for MFA accounts).
 * New: passkey (WebAuthn) login and registration with an account security page.
 * New: phone one-time-code login via a configurable HTTP SMS gateway.
 * New: password as an optional method alongside passwordless login.
 * New: multi-step login chains (foundation for role-based 2FA/3FA in Pro).
 * New: extension hooks for gateways, factors, and settings.

#### 1.0.0

 * Initial release: email one-time-code login and signup, `[riverbox-login]` shortcode,
   REST API, delivery log, rate limiting.

## 기초

 *  버전 **1.1.1**
 *  최근 업데이트: **3개월 전**
 *  활성화된 설치 **10보다 적음**
 *  워드프레스 버전 ** 6.4 또는 그 이상 **
 *  다음까지 시험됨: **7.0.7**
 *  PHP 버전 ** 8.1 또는 그 이상 **
 *  언어
 * [English (US)](https://wordpress.org/plugins/riverbox-passwordless-login/)
 * 태그:
 * [authentication](https://ko.wordpress.org/plugins/tags/authentication/)[login](https://ko.wordpress.org/plugins/tags/login/)
   [otp](https://ko.wordpress.org/plugins/tags/otp/)[passkeys](https://ko.wordpress.org/plugins/tags/passkeys/)
   [passwordless](https://ko.wordpress.org/plugins/tags/passwordless/)
 *  [고급 보기](https://ko.wordpress.org/plugins/riverbox-passwordless-login/advanced/)

## 평점

아직 제출된 리뷰가 없습니다.

[Your review](https://wordpress.org/support/plugin/riverbox-passwordless-login/reviews/#new-post)

[모든  리뷰 보기](https://wordpress.org/support/plugin/riverbox-passwordless-login/reviews/)

## 기여자

 *   [ riverbox ](https://profiles.wordpress.org/riverbox/)

## 지원

할 말 있으신가요? 도움이 필요하신가요?

 [지원 포럼 보기](https://wordpress.org/support/plugin/riverbox-passwordless-login/)