QuickAuth – Checkout Login Without Password

FAQ

Answers to common questions about login methods, SMS, countries and data. For diagnosing problems in a running shop, see Troubleshooting.

Do I need an SMS provider?

No. In "Email only" mode, the login code is delivered through your shop's normal email setup, and the mobile number option is hidden entirely. SMS is optional – through the commercewerk gateway, Twilio or Vonage.

Does the password login stay?

Yes. The password login remains available in parallel; customers can switch to the password at any time via a link in the form. By default, email login starts with the login code – the classic password-first flow can be restored in the settings.

What changes at checkout?

The login form appears on the account login page and on the checkout registration page – expanded there by default; you can change this if preferred. After logging in, the normal Shopware checkout continues to the final order step; the extension does not change the checkout navigation.

Does the login code work for guest orders?

The login code signs customers in to an existing, registered customer account – just like the password login. Guest accounts have no login; guests order as guests, unchanged. The form on the checkout registration page is an offer to log in and does not replace guest ordering.

Can I restrict SMS login?

Yes, in two ways: you define which countries mobile numbers may come from, and you can restrict login codes by SMS to mobile numbers already linked to a customer account – unknown numbers then see a notice and no SMS is sent.

What happens if the SMS provider fails?

If the request to the provider fails, the customer sees the message "We couldn't send the login code via SMS. Please log in using your email address instead." Login by email (code or password) remains available; the error is recorded in the extension's error log.

Which countries do mobile numbers work from?

From the countries you select in the setting "Allow login via mobile number". The selection is enforced server-side on every request – numbers with a different country code are rejected, both when the code is sent and at login.

What data does the extension process and store?

Email delivery uses the email address; with SMS, the mobile number is sent only to the provider you choose, solely for delivery. The extension stores login codes (encrypted, single-use, expiring automatically, removed after login) and the mobile numbers customers link to their accounts. Review your privacy notices to match your setup.

What happens on uninstall?

With Shopware's "Keep user data" option, all data remains. Without it, the extension removes its data completely: login codes, linked mobile numbers, pending links, the associated flow and the email template.