OTP Login & Verification via Phone and Email

Passwordless OTP Login for CS-Cart

WebCartics OTP Addon lets customers log in and sign up with a one-time code sent to email or mobile. No password, no extra registration form, and no core file edits.

Key features

• Single login field — enter email or mobile number; the addon detects the type automatically.
• International phone codes — country code dropdown with auto-detect from the number pattern, similar to CS-Cart phone fields.
• Auto signup — if the account does not exist, it is created and the customer is logged in after OTP verify.
• Unified Login/SignUp — storefront Sign in and Register go to one OTP page.
• Secure profile updates — email and phone stay locked until Edit. SAVE opens an OTP popup; the new value is saved only after successful verification.
• Duplicate protection — if the email or phone is already used by another account, a clear notification is shown. No ugly empty popup.
• SMS ready — Twilio and other SMS settings from the addon configuration.
• Security controls — OTP length, expiry, resend timeout, max attempts, and rate limiting.

How it works

1. Customer opens Login/SignUp and enters email or phone.
2. OTP is sent. After verify, they are logged in (new users are registered automatically).
3. On My Account → Profile, email/phone can be changed only after OTP verify on the new contact.

Compatibility

• CS-Cart / Multi-Vendor
• Responsive theme and child themes (including Nova)

What’s included

• Addon package
• Storefront login, OTP popup, and profile verification templates
• Admin settings for OTP, security, and SMS