Customer Login within Loyalty Widget
All methods are available on all plans.
But Email OTP, Google Login, and Facebook Login require Shopify plus & Legacy customer account
Overview
Customers can sign in directly from the Joy loyalty widget without leaving the page. Joy supports four login methods — availability depends on your Shopify customer account type:
| Method | New customer accounts | Shopify plus & Legacy customer accounts | Merchant Setup |
|---|---|---|---|
| Sign in with Shop App | ✅ | ✅ | Toggle only |
| Email OTP | ❌ | ✅ | Paste Multipass key |
| Sign in with Google | ❌ | ✅ | Toggle only |
| Sign in with Facebook | ❌ | ✅ | Toggle only |
Using Shopify's new customer accounts? Email OTP, Google, and Facebook are automatically hidden — only Shop App Login will be available. Multipass only works with legacy (classic) customer accounts.
For All Merchants
Shop App Login
Customers with the Shop app (opens in a new tab) installed tap once and they're in — fastest method, no page reload.
Merchant Setup
Go to Joy Admin → Settings → Additional Features → toggle "Sign in with Shop App" ON.
That's it.
Works with both new and legacy Shopify customer accounts. No extra configuration needed.
Customer Experience
- Customer opens the Joy widget → taps "Sign in with Shop"
- Shop app authenticates the customer in the background
- Widget updates in place — points, tier, and rewards visible instantly
- No page reload needed
For Plus & Legacy Customer Account Merchants
Shopify plus merchants using legacy customer accounts unlock three more methods via Multipass: Email OTP, Google, and Facebook.
No OAuth credentials needed. Google and Facebook login are fully managed by Joy — just toggle them on after enabling Multipass.
Multipass Setup (prerequisite)
All three methods below require Multipass. Set it up once, then enable any combination.
Enable Multipass in Shopify
Go to Shopify Admin → Settings → Customer accounts → Multipass and enable it. Copy the Multipass Secret Key.
Multipass is only available on Shopify Plus plans with legacy (classic) customer accounts. If you don't see the Multipass option, check that your store is using legacy accounts.
Paste Key in Joy
Go to Joy Admin → Settings → Additional Features → find the Multipass section → Toggle it on → paste your secret key → Save.
Email OTP
Customers enter their email, receive a 4-digit code, type it in — done. Universal, works for every customer with an email.
Merchant Setup
Once multipass enabled, Email OTP will be visible by default. No set up needed!
Customer Experience
- Customer enters their email in the widget → clicks "Get Sign In Code"
- Receives a 4-digit code via email
- Enters the code → clicks "Sign In"
- Page reloads briefly — customer is logged in
Code details: 4 digits · expires in 5 minutes · single-use.
Google Login
One-click Google authentication. No Google Cloud Console setup needed — Joy manages OAuth server-side.
Merchant Setup
After enabling Multipass, toggle "Sign in with Google" ON. The toggle is grayed out until Multipass is active.
Customer Experience
- Customer clicks "Sign in with Google" in the widget
- Google authentication popup opens
- Customer selects their Google account and approves
- Page reloads briefly — customer is logged in
Facebook Login
One-click Facebook authentication. No Facebook Developer setup needed — Joy manages OAuth server-side.
Merchant Setup
After enabling Multipass, toggle "Sign in with Facebook" ON.
Customer Experience
- Customer clicks "Sign in with Facebook" in the widget
- Facebook login popup opens
- Customer logs in and approves
- Page reloads briefly — customer is logged in
Google, Facebook, and Email OTP briefly reload the page as part of Multipass login. Shop App Login does not reload.
Choosing the Right Methods
| Situation | Recommended |
|---|---|
| Any plan, quickest setup | Shop App — free, zero config |
| Using new customer accounts | Shop App (only option) |
| Universal coverage (legacy) | Shop App + Email OTP |
| Maximum convenience (legacy + Plus) | All four methods |
Tip: Start with Shop App Login (free, no setup, no page reload). If you're using legacy customer accounts with Shopify Plus, add Email OTP for broader coverage, then Google and Facebook for one-click social login.
After Successful Login
Regardless of method, customers instantly get:
- ✅ Points balance visible
- ✅ VIP tier status and perks shown
- ✅ Rewards available to redeem
- ✅ Activity history synced
- ✅ Full widget functionality unlocked
FAQ
Q: Do I need to set up Google Cloud Console or Facebook Developer?
No. Joy manages all OAuth connections server-side. Just toggle on after enabling Multipass.
Q: Why is the Google/Facebook toggle grayed out?
Enable Multipass first and paste the secret key. The toggles activate after that.
Q: Does Shop App Login require Shopify Plus?
No. Works on all Joy plans with both new and legacy customer accounts.
Q: Why does the page reload after Google/Facebook/OTP login?
These use Multipass which requires a Shopify redirect. Shop App Login does not reload.
Q: Can I enable multiple methods at once?
Yes! Enable any combination. Customers see all enabled options.
Q: Can I use OTP/Google/Facebook with Shopify's new customer accounts?
No. These methods require legacy (classic) customer accounts because they depend on Multipass. Only Shop App Login works with new customer accounts.
Q: Do I need Shopify Plus for Multipass?
Yes. Multipass is a Shopify Plus feature and only works with legacy customer accounts.
Troubleshooting
Shop App Login
- Button not showing — Check toggle is ON in Settings → Additional Features. Clear cache.
- "Allow popups" message — Customer needs to allow popups for your store domain.
- Login stuck — Joy checks every 2 seconds (5 min timeout). Ensure Shop app is installed.
Email OTP
- Code not received — Check spam folder. Wait 60 seconds. Request new code.
- "Invalid code" — Codes expire after 5 minutes. Must be exactly 4 digits.
- Multipass not showing — Store must have legacy (classic) customer accounts enabled.
Google / Facebook
- Toggle grayed out — Enable Multipass first.
- Popup not opening — Allow popups for your store domain. Try incognito.
- Not logged in after reload — Multipass key may be invalid. Re-paste from Shopify Admin.
Security
- 🔒 Multipass Secret Key — encrypted at rest
- 🔒 OTP codes — hashed before storage, single-use
- 🔒 Multipass tokens — single-use, time-limited (15 min max)
- 🔒 OAuth — managed server-side by Joy
- 🔒 HTTPS only — all data encrypted in transit
Need Help?
- 💬 Live chat: Use the chat widget in Joy Admin (opens in a new tab)
- 📧 Email: hi@joy.so
- 📖 More docs: help.joy.so