Sign up users without setting a password #669

Closed
opened 2026-03-13 07:59:47 -05:00 by GiteaMirror · 1 comment
Owner

Originally created by @cbodin on GitHub (Feb 13, 2025).

Is this suited for github?

  • Yes, this is suited for github

I want to go passwordless using email OTP but let users sign up using a sign-up form without a password. The OTP plugin allows for sign-up, but that will happen automatically when signing in.

Describe the solution you'd like

  • Add a sign-up option in the OTP plugin, e.g. authClient.signUp.emailOtp, that does not require a password and sends an OTP directly after the user signs up.

  • Make the password field optional on the authClient.signUp.email endpoint. authClient.signIn.emailOtp can be called directly after to sign in client-side.

Describe alternatives you've considered

  • Generate a random password for the user during sign-up, and call authClient.signIn.emailOtp afterwards.

  • Duplicating the built-in signUp.email endpoint, skipping the password, and removing the functionality that creates an "account".

Additional context

Account-less users are already supported when using the Email OTP sign-in, so this should not affect anything except the sign-up endpoints.

But for this to be usable, the "Smart login" concept discussed in https://github.com/better-auth/better-auth/issues/756 would be needed.

Originally created by @cbodin on GitHub (Feb 13, 2025). ### Is this suited for github? - [x] Yes, this is suited for github ### Is your feature request related to a problem? Please describe. I want to go passwordless using email OTP but let users sign up using a sign-up form without a password. The OTP plugin allows for sign-up, but that will happen automatically when signing in. ### Describe the solution you'd like - Add a sign-up option in the OTP plugin, e.g. `authClient.signUp.emailOtp`, that does not require a password and sends an OTP directly after the user signs up. - Make the password field optional on the `authClient.signUp.email` endpoint. `authClient.signIn.emailOtp` can be called directly after to sign in client-side. ### Describe alternatives you've considered - Generate a random password for the user during sign-up, and call `authClient.signIn.emailOtp` afterwards. - Duplicating the built-in `signUp.email` endpoint, skipping the password, and removing the functionality that creates an "account". ### Additional context Account-less users are already supported when using the Email OTP sign-in, so this should not affect anything except the sign-up endpoints. But for this to be usable, the "Smart login" concept discussed in https://github.com/better-auth/better-auth/issues/756 would be needed.
Author
Owner

@dosubot[bot] commented on GitHub (Jun 14, 2025):

Hi, @cbodin. I'm Dosu, and I'm helping the better-auth team manage their backlog. I'm marking this issue as stale.

Issue Summary:

  • Proposal for a feature enhancement to enable user sign-up without a password using email OTP.
  • Suggests modifying the OTP plugin to send an OTP immediately after sign-up, making the password field optional.
  • Complements existing support for account-less users signing in with email OTP.
  • Requires implementation of the "Smart login" concept from a related issue.
  • No comments or activity on the issue since it was opened.

Next Steps:

  • Please confirm if this issue is still relevant to the latest version of the better-auth repository by commenting on the issue.
  • If no updates are provided, the issue will be automatically closed in 7 days.

Thank you for your understanding and contribution!

@dosubot[bot] commented on GitHub (Jun 14, 2025): Hi, @cbodin. I'm [Dosu](https://dosu.dev), and I'm helping the better-auth team manage their backlog. I'm marking this issue as stale. **Issue Summary:** - Proposal for a feature enhancement to enable user sign-up without a password using email OTP. - Suggests modifying the OTP plugin to send an OTP immediately after sign-up, making the password field optional. - Complements existing support for account-less users signing in with email OTP. - Requires implementation of the "Smart login" concept from a related issue. - No comments or activity on the issue since it was opened. **Next Steps:** - Please confirm if this issue is still relevant to the latest version of the better-auth repository by commenting on the issue. - If no updates are provided, the issue will be automatically closed in 7 days. Thank you for your understanding and contribution!
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: github-starred/better-auth#669