FAQ
Answers to common questions about login methods, SMS, countries and data. For diagnosing problems in a running shop, see Troubleshooting.
Do I need an SMS provider?
No. In "Email only" mode, the login code is delivered through your shop's normal email setup, and the mobile number option is hidden entirely. SMS is optional – through the commercewerk gateway, Twilio or Vonage.
Can I use several SMS providers at once?
No. QuickAuth uses only the provider selected in the SMS provider card; credentials in the other cards are not used for sending. See Choosing a provider.
What does the SMS gateway cost?
The commercewerk gateway costs €0.12 per SMS sent, and new customers receive a €2 welcome credit. See Cost for details about billing and several tokens per account.
Where do I get the API token?
Register in the commercewerk dashboard, then open the QuickAuth menu item. The Get the API token for commercewerk SMS section gives the direct URL and the steps to create, copy, paste and verify the token.
Does the password login stay?
Yes. The password login remains available in parallel; customers can switch to the password at any time via a link in the form. By default, email login starts with the login code – the classic password-first flow can be restored in the settings.
What changes at checkout?
The login form appears on the account login page and on the checkout registration page – expanded there by default; you can change this if preferred. After logging in, the normal Shopware checkout continues to the final order step; the extension does not change the checkout navigation.
Does the login code work for guest orders?
The login code logs customers in to an existing, registered customer account – just like the password login. Guest accounts have no login; guests order as guests, unchanged. The form on the checkout registration page is an offer to log in and does not replace guest ordering.
Can existing customers use the SMS login?
Yes. Existing customers can use SMS login once their mobile number is linked to their customer account. They can add it under "Your profile" or link it during the SMS login confirmation flow. See Linking mobile numbers.
Who can log in by SMS?
Customers can log in by SMS when their mobile number has an allowed country code and is linked to their customer account. Unless Block unregistered mobile numbers is enabled, a new mobile number is linked to the customer account once the customer enters the correct login code and confirms their email address. See Login code by SMS and Linking mobile numbers.
Can I restrict SMS login?
Yes, in two ways: you define which countries mobile numbers may come from, and you can restrict login codes by SMS to mobile numbers already linked to a customer account – unknown numbers then see a notice and no SMS is sent.
What happens after a wrong login code?
The attempt is rejected; the login code stays valid. By default, up to 3 login attempts per minute are allowed for each combination of email address or mobile number and IP address; this limit is configurable. A successful login resets the counter; otherwise it expires after 1 hour. See Rate limits.
What happens if the SMS provider fails?
If the request to the provider fails, the customer sees the message "We couldn't send the login code via SMS. Please log in using your email address instead." Login by email (code or password) remains available; the error is recorded in the extension's error log.
Which countries do mobile numbers work from?
From the countries you select in the setting "Allow login via mobile number". The selection is enforced server-side on every request – numbers with a different country code are rejected, both when the code is sent and at login.
What data does the extension process and store?
Email delivery uses the email address; with SMS, the mobile number is sent only to the provider you choose, solely for delivery. The extension stores login codes (encrypted, single-use, expiring automatically, removed after login) and the mobile numbers customers link to their accounts. Review your privacy notices to match your setup.
What happens on uninstall?
With Shopware's "Keep user data" option, all data remains. Without it, the extension removes its data completely: login codes, linked mobile numbers, pending links, the associated flow and the email template.