Authentication during checkout

When Enable Authentication is active, a guest can use the checkout authentication block to sign in or request a password reset. A signed-in customer does not see the block. The current custom template does not render a registration form or registration link, so account creation remains a separate Magento customer flow.

Sign in during checkout

The block submits the normal customer authentication request. After a successful login, customer data, cart data and checkout data are refreshed and the page reloads so the saved customer context is applied to the quote.

If the store uses Customer TFA or another login extension, its normal authentication rules still apply. One Step Checkout does not replace the customer authentication service.

Forgot password

The Forgot Your Password? action opens the reset form in the checkout block. A syntactically valid address receives Magento's normal reset request. The response is generic so the form does not reveal whether an account exists. An invalid email is rejected in the form before the request is sent.

Never capture a password, reset URL or reset token in a screenshot.

Troubleshooting

If the block is missing, check the authentication setting, login state, store scope and the checkout component tree. If a login succeeds but the checkout remains in guest state, inspect customer-data invalidation and browser console errors before changing quote data manually.