A password less login using a smart device is caused to retrieve from a cloud-server a one-time use code. The smart device is associated with a virtual user account to control a plurality of controllable devices with a device app installed on a smart device. The one-time use code is provided to a controllable device and the controllable device is caused to provide the one-time use code back to the smart device. The app causes the one-time use code provided back to the smart device by the controllable device to be authenticated. In response to the one-time use code being authenticated, the controllable device is bound to the app whereupon the controllable device is controllable through use of the app.