QuickAuth – Checkout Login Without Password

Configuration

A reference to every setting, card by card in the order of the configuration page. Some technical names contain "OTP" (one-time password) – the technical term behind the login code.

Where to find the settings

Settings → Extensions → My extensions → QuickAuth → Configure. Every setting can be overridden per sales channel using the selector at the top. The first card, Setup & support, holds no settings: it links to a demo shop, the documentation and support (support@commercewerk.de).

Login methods and wording

Card Login methods:

  • Login methods offered to customers (selection, default: "Email & mobile number"): sets which identifiers customers may use to log in. "Email only" hides the mobile number option and disables the SMS login path; login attempts by mobile number are then rejected even via the Store API.
  • Start email login with a login code (recommended) (toggle, default: On): entering an email address offers a login code first; the customer switches to the password via a link. When off, the classic password-first flow applies. This setting covers the email path in both modes; mobile numbers always use a code.
  • Block unregistered mobile numbers (toggle, default: Off): when on, login codes by SMS are sent only to mobile numbers already linked to a customer account. Unknown numbers see a notice, and no SMS is sent.

Card Passwordless login wording (snippets, editable per language):

  • Request-code button (default: "Request login code"): the primary button in code-first mode.
  • Helper line under the button (default: "We'll send you a login code."): the short note under the button.
  • "Use password" link (default: "Or log in with password"): the link that switches from the code to the password field.

SMS provider and message

Card SMS provider:

  • SMS provider (selection, default: commercewerk): the service that sends login codes by SMS – commercewerk, Twilio or Vonage. Only the credentials card of the selected provider takes effect.

Card commercewerk SMS:

  • API URL (URL, default: https://sms-gateway.commercewerk.de/api): fixed, not editable.
  • API Token (text area): the access token for the commercewerk gateway.
  • Verify API Credentials (button): tests the credentials against the provider. The same button also sits in the Twilio and Vonage cards.

Card SMS Twilio:

  • Account SID (text) and Auth Token (password field).
  • Twilio Region & Edge (selection, default: "US (us1) via Ashburn"): further options are "US (us1) via Umatilla", "US (us1) via Roaming (auto)", "Ireland (ie1) via Dublin" and "Australia (au1) via Sydney".

Card SMS Vonage:

  • API Key (text) and API Secret (password field).

Card SMS Message (snippets, editable per language):

  • Sender (default: "YourShop"): the sender name of the SMS on the customer's phone.
  • Message text (default: "Your login code is %otpCode%. Please do not share this code with anyone."): the SMS text; %otpCode% is replaced with the login code.

Form, login code, rate limiter

Card QuickAuth form:

  • Enable on account login page (toggle, default: On): shows the QuickAuth form on the account login page.
  • Enable on checkout registration page (toggle, default: On): shows the form on the checkout registration page.
  • Expand on checkout registration page (toggle, default: On): when on, the form starts expanded there; when off, collapsed.

Card Login code:

  • Login code lifetime (seconds) (number, default: 300): how long a requested login code remains valid before it expires.

Card Rate Limiter:

  • Wait time before resending the login code (seconds) (number, default: 20): the countdown before Resend code becomes active again in the form.
  • Maximum login code requests per minute (number, default: 3): further requests are rejected with a wait-time message.
  • Maximum login attempts per minute (number, default: 3): caps login attempts.
How the rate limiter counts

Counting happens per combination of recipient (email address or mobile number) and IP address. After a successful login, the counters are reset.

Mobile number input

Card Mobile number input – controls the mobile number entry field:

  • Allow country selection dropdown (toggle, default: On): shows the country dropdown on the input field.
  • Priority order for country list (multi-select, default: Germany, Netherlands): these countries are pinned to the top of the dropdown.
  • Enable country search for mobile numbers (toggle, default: On): shows a search field in the country dropdown.
  • Fix the dropdown width to the input width (toggle, default: Off): pins the dropdown width to the width of the input field.
  • Automatically format the number as the user types (toggle, default: On): formats the number while the customer is typing.
  • Automatically format the input value according to the nationalMode option (toggle, default: On): formats prefilled or pasted values according to the chosen format.
  • Use national mobile number format (nationalMode) (toggle, default: Off): when off, the international format with country code applies. Also affects the example number in format error messages.
  • Allow login via mobile number (multi-select, default: Germany, Austria, Switzerland, Netherlands, France, United Kingdom, United States, Poland, Czech Republic, Belgium, Italy, Spain, Sweden, Denmark): the country allowlist. Numbers with other country codes are rejected – server-side too.
  • Display the country code of the selected country next to the input field (toggle, default: Off): shows the dial code separately next to the field.
  • Display flags in the dropdown (toggle, default: On): shows country flags in the dropdown.

Card Legal Text – the notice block beneath the login form:

  • Enable (toggle, default: On): switches the block on or off.
  • Text (snippet): the notice; the default is a consent to SMS/RCS messages. %shopName% is replaced with the shop name.
  • Font Size (px) (number, default: 12).
  • Font colour (colour picker, default: #6B6B6B).

Card Mobile number tooltip – the hint icon at the billing address phone field:

  • Enable for billing address (toggle, default: On).
  • Text (snippet, default: "You can use your mobile number to log in without a password later. Enter a valid number including the country code, e.g. +44 7400 123456.").
  • Icon colour (colour picker, default: #2B3136).