Tushar Sharma

Email OTP Login adds an additional layer of security to your WordPress site by requiring users to verify an OTP sent to their email after entering their username and password. This ensures that only users with access to the registered email can log in.
Features:
<ul>
<li>Email OTP verification during login.</li>
<li>OTP expires in 5 minutes (configurable).</li>
<li>OTP stored securely using WordPress password hashing.</li>
<li>Works with the default WordPress login form.</li>
<li>Uses WordPress built-in <code>wp_mail()</code> function (works with SMTP plugins).</li>
</ul>
This plugin does not modify WordPress core files.
<h3>License</h3>
This plugin is free software: you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation, version 2 or later.
This plugin is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

Email OTP Login

Adds OTP (One-Time Password) verification after login for enhanced security in WordPress. OTP is sent to the user's email.

zerobounce

Need an email validation tool to block invalid and high-risk emails on your WordPress website?
The ZeroBounce email verification plugin assists users by validating email addresses entered into your registration forms, comments sections, eCommerce shops, and more. Install the plugin, connect your API key, and select the forms you want to monitor with email validation.
<h3>Key Features</h3>
<ul>
<li>Automated real-time email validation – Automatically prevent selected email types from creating accounts, leaving comments, or signing up</li>
<li>Detect more than 30+ email address types – Including invalid, abuse, disposable, spam trap, toxic domains, catch-all, and more</li>
<li>Choose what to accept – Create your own rules for email validation and disallow emails based on status</li>
<li>Email verification for 9 form types – Easily select which forms you want to protect with email validation</li>
<li>Fast manual email validation – Verify any email address in the tools section using our interactive form</li>
<li>Email validation API logs – Keep track of monthly email verifications, including status, sub-status, IP, date, and credits used</li>
</ul>
<h3>Benefits</h3>
<ul>
<li>Keep your email list clean & accurate</li>
<li>Reduce your email bounce rate</li>
<li>Boost your inbox placement</li>
<li>Protect your email sender reputation</li>
<li>Improve email deliverability</li>
<li>Eliminate fraudulent, untrustworthy shoppers</li>
<li>Block spammers and spoofers</li>
<li>Keep your comments section clean</li>
</ul>
<h3>Supported Forms/Plugins</h3>
<ul>
<li>Contact Form 7</li>
<li>WPForms</li>
<li>Ninja Forms</li>
<li>Formidable Forms</li>
<li>WooCommerce</li>
<li>WordPress Post Comments</li>
<li>WordPress Registration</li>
<li>MC4WP: Mailchimp for WordPress</li>
<li>Gravity Forms</li>
<li>Fluent Forms</li>
<li>WS Forms</li>
<li>Mailster Forms</li>
<li>Forminator Forms</li>
</ul>
And more support is being added gradually.

ZeroBounce Email Verification & Validation


I have tested this plugin on several of my personal and business websites, it's awesome. No more spam and fake signups. Service pricing is also decent. Recommended.


Excellent in blocking SPAM


You have a problem with NF form validation. It detects html fields that contains emails (eg mailto links) as email fields and validates those.



if (!empty($value) && is_string($value) && preg_match('/@.+\./', $value) && !str_contains($value, "\n") && !str_contains($value, '\n')) {// rest of the code}



Your approach needs to be changed to:



if (!empty($value) && is_string($value) && preg_match('/@.+\./', $value) && !preg_match('/mailto:/i', $value)) {  $ninjaForm = new Zerobounce_Email_Validator_Form_Public('ninjaforms', $form_data['id']);   // rest of the code}



This should be safer to validate only email addresses (or use a better regex).


Ninja Forms problem

ZeroBounce validates emails on your WordPress site in real-time, blocking invalid and risky emails to improve deliverability and reduce bounce rates.

Email OTP Login vs ZeroBounce Email Verification & Validation