ZapQR
Setup guide →
Try Sign in with ZapQR
This page is a real relying party. The button below runs the same OpenID Connect flow your WordPress, Drupal, or Shopify site would — against the live auth.zapqr.ai identity provider. No password exists anywhere in this flow.
Acme Demo Store
An imaginary site that outsourced its login to ZapQR.
First time? You'll create an account with just your email (magic link), then you can add a passkey so next time is one touch of Face ID / Touch ID.
Signed in
as
Sign-out round-trips through auth.zapqr.ai and returns here — exactly what happens when a user logs out of your site.
1. Redirect to the IdP
The button sends you to auth.zapqr.ai with an authorization-code request (PKCE S256, state, nonce) — the standard OIDC dance.
2. Passwordless ceremony
You sign in with a passkey or an email magic link, and approve sharing your email with this demo — once.
3. Signed ID token
This page exchanges the code for an RS256-signed ID token and shows you the claims — verified email, stable subject ID.
WordPress plugin, Drupal, or any OIDC platform. About 10 minutes.
The ZapQR app's QR credential fill
Different trick, same app: for sites that still use passwords, the ZapQR iOS app can beam a stored credential into a login form by scanning a QR. Try it — test credentials: demo / demo
Sign In
Scan the QR with the ZapQR app, or type demo/demo. This widget uses embed.js — the QR fills the form fields for you.