# Should checkout login codes use autocomplete one-time-code? | Checkout Optimize Lab

Source: https://checkoutoptimizelab.com/one-time-code-checkout-login/

Yes. The one-time-code value tells the browser the field is for a code sent by text or email, so the phone can offer to fill it.

## What MDN says

one-time-code marks a one-time password used as an extra step in sign-in, usually a code from SMS, email, or an authenticator app.

## Why it matters

Shoppers switching apps to copy a code is a common drop-off point. One attribute on the input removes that step on most phones.

Source: [MDN, HTML autocomplete attribute](https://developer.mozilla.org/en-US/docs/Web/HTML/Reference/Attributes/autocomplete). Reviewed Sep 23, 2026.

## Frequently asked questions

### What is a one time code checkout login?

Instead of a password, the store emails or texts a short code that the shopper enters to prove they own the account. It removes password friction and password resets from checkout, which is why large platforms have moved toward it for returning customers.

### Are one time codes slower than passwords?

For most shoppers, no. Autofill from messages apps makes code entry a few seconds, and nobody has to remember or reset anything. It is slower when email delivery lags, which is why a resend option and a guest path matter as fallbacks.

### What breaks with one time code logins?

Shared inboxes, codes landing in spam, and shoppers checking out on a device that cannot see the code easily. Each failure needs a designed fallback: guest checkout, a magic link, or support that can verify another way. The code flow is only as good as its exceptions.