# Marketplace Copy Pack — Epic OTP Login

## Product card

**Epic OTP Login**

Let customers sign in with a one-time email code while keeping OTP storage hashed, single-use, and rate-limited.

Pricing pending owner review · Lifetime Updates Included after owner-approved paid license · 6 Months Support Included after owner-approved paid license

Owner Review CTA only — checkout must remain disabled until pricing and publication are explicitly approved.

## Short description

Passwordless OTP login foundation with request and verify shortcode flow, hashed single-use transient storage, non-enumerating responses, rate limiting, settings, and broker-ready license/update guardrails.

## Feature bullets

- Owner-review passwordless email OTP flow for WordPress and WooCommerce login surfaces
- `[epic_otp_login]` request and verification shortcode with separate email and code steps
- Hashed single-use OTP transient storage with expiry and deletion after successful verification
- Rate limiting per email/IP plus non-enumerating responses to reduce account-discovery risk
- Auth-cookie login for matching WordPress users after successful code verification
- Admin settings for code expiry, code length, success redirect, and attempt-log foundation
- Broker-ready license activate/validate/deactivate handlers and native update guardrails

## Proof / trust copy

- Owner-review QA passed PHP lint, JavaScript syntax checks, plugin smoke tests, SDK smoke tests, and a local include/activation/admin harness.
- Storefront asset review matched shortcode, hashed OTP, rate-limit, WooCommerce hook, license SDK, and owner-review ZIP evidence.
- Package manifest keeps status as owner-review artifacts only; not published and not sale-ready.

## Visual reference

Use `assets/images/product-mockups/epic-otp-login-mockup.svg` as the safe owner-review product-page mockup until real staging screenshots are approved.

## CTA

Owner Review / Prepare Checkout

## Claim boundaries

- Do not claim publication, live checkout, or sale-ready status until owner approval is complete.
- Do not show backup products or Epic Builder beside this approved-review product set.
- Do not expose credentials, license keys, customer data, private IPs, or real booking/customer records in screenshots.