--- title: "Login Only vs Login & Register" description: Magic Link and Email OTP each have a registration mode. Passkeys now have one too. Social Login does not. Free Available in VentraConnect Free. The registration mode decides whether a method may create a new account. On some surfaces another… url: "https://wpventra.com/docs/login-only-vs-login-register/" updated: "2026-10-26" category: "Account Creation & Guardrails" --- # Login Only vs Login & Register Magic Link and Email OTP each have a registration mode. Passkeys now have one too. Social Login does not. Free Available in VentraConnect Free. The registration mode decides whether a method may create a new account. On some surfaces another VentraConnect rule can also block account creation, such as **Allow new accounts from default login forms** on the WordPress login form. 1 ## Login Only Use **Login only** (shown as “Login only (existing users)”) when that authentication method should never create a new WordPress user. Existing users Existing WordPress users can authenticate by successfully verifying access to the email address associated with their account. New email A completely new email cannot create an account through that method. Other settings This stays true even when other settings would allow new accounts on that surface. 2 ## Login & Register Use **Login & Register** when the method is allowed to create a new user as part of authentication. Existing users Sign in normally. New users The method can create a new account unless another VentraConnect rule blocks it on that surface: for example **Allow new accounts from default login forms** on `wp-login.php`, or the Pro WooCommerce and integration rules. WordPress registration The WordPress **Anyone can register** setting is not checked for Magic Link or Email OTP. **On the WordPress login form, Allow new accounts from default login forms still applies.** If it is off, Login & Register does not let Magic Link or Email OTP create an account there. 3 ## How the Rules Work Together Where more than one rule applies to a surface, **all of them must allow account creation**: 1. Surface rule On the WordPress login form, **Allow new accounts from default login forms**. In Pro, the WooCommerce or integration login-form setting. On a registration or checkout form, the surface’s own rule (for WooCommerce, WooCommerce’s account settings). 2. Method rule Magic Link and Email OTP then apply their own **Login only** / **Login & Register** mode. Login only always blocks account creation for that method. **Simple rule:** Login only never creates accounts. Login & Register creates them only where nothing else on that surface blocks it. 4 ## Typical Choices Existing-user login only Turn off **Allow new accounts from default login forms** for the WordPress login form (and the Pro login-form settings for WooCommerce and integrations). Existing users can still authenticate, while new visitors use your registration or checkout flow. Magic Link must never register Set Magic Link to Login only. This stays restrictive on every surface. Email OTP may register Set Email OTP to Login & Register. It can create an account on any surface that does not block it. Store with checkout registration Turn off the WooCommerce login-form setting so My Account is for existing customers, and let WooCommerce checkout remain the customer account-creation path according to your WooCommerce settings. See [Guardrails with WooCommerce](/docs/guardrails-with-woocommerce/). 5 ## What About Social Login? Social Login does not have a Login only / Login & Register selector. Outside the surfaces covered by **Allow new accounts from default login forms** (or a Pro integration setting), Social Login can create a new account for an unknown visitor. To keep Social Login from creating accounts on a surface, use that surface’s setting where one exists, or do not offer Social Login there. 6 ## What Does “Default Login Forms” Mean Here? **Allow new accounts from default login forms** is in **VentraConnect → Settings** (General Settings card) and is on by default. Covered The WordPress login form (`wp-login.php`), and the [ventraconnect_sl_social_login] shortcode only when you add `context="shortcode"`. Not covered The WordPress registration screen, the default [ventraconnect_sl_social_login] shortcode, generic pages, and WooCommerce, membership and LMS forms. Pro has separate login-form settings for WooCommerce and each integration. 7 ## What About Passkeys? Passkeys have their own **Registration mode** in **Login Methods → Passkey**, with two options: **Login & Register (default)** and **Login only (existing users)**. Login only Hides the passkey sign-up button on the WordPress registration page and refuses new passkey accounts there. Other requirements Passkey sign-ups also need WordPress **Anyone can register** and the **Register form** toggle. Other settings **Allow new accounts from default login forms** and the Magic Link / Email OTP modes do not affect passkeys. 8 ## Guardrails Documentation Guardrails & Account Creation — Overview How account creation is controlled across login methods and surfaces. [Open guide](/docs/guardrails-account-creation-overview/) Guardrails with WooCommerce Account-creation rules for My Account, registration and checkout. [Open guide](/docs/guardrails-with-woocommerce/) Guardrails with Membership & LMS Flows Login-form settings for membership, community and LMS integrations. [Open guide](/docs/guardrails-with-membership-lms-flows/) Troubleshooting Account Creation Checks for unexpected or blocked account creation. [Open guide](/docs/troubleshooting-account-creation/)