Lalit Yadav

sumitkamboj53

<p>This plugin enhances the default WordPress login security by adding a One-Time Password (OTP) verification step via email:</p>
<ul>
<li>Users log in with their regular email/username and password.</li>
<li>If credentials are valid, an OTP is generated and emailed to the user.</li>
<li>A popup is shown on the same login page (<code>wp-login.php</code>) to enter the OTP.</li>
<li>Once the correct OTP is entered, the user is logged in.</li>
</ul>
<p>To help you get started, there’s a comprehensive video tutorial available that guides you through the process of setting.<br />
<span class="embed-youtube" style="text-align:center; display: block;"><iframe loading="lazy" class="youtube-player" width="750" height="422" src="https://www.youtube.com/embed/AZ6w1lkltOI?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent" allowfullscreen="true" style="border:0;" sandbox="allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox"></iframe></span></p>
<h3>Features</h3>
<ul>
<li>Secure login via OTP sent to user’s email.</li>
<li>Role-based OTP enforcement.</li>
<li>Uses native wp-login.php form — no custom forms required.</li>
<li>Session-based OTP handling for security.</li>
<li>Expiring OTP (default: 40 seconds).</li>
<li>No third-party dependencies.</li>
</ul>
<h3>Donate</h3>
<p>If you find this plugin useful and want to support its development, you can make a donation via the following link:</p>
<p><a href="https://donate.stripe.com/3cI5kE7sv6ex30s5LB5kk2x" rel="nofollow ugc">Donate Here</a></p>
<p>Your donation helps to ensure that this plugin remains free and receives regular updates!</p>
<h3>Credits</h3>
<p>The plugin development was supported by [webnotics], [sumitkamboj53]. Contributions and feedback are always welcome.</p>
<h3>Documentation and Support</h3>
<p><strong><a href="https://webnotics.org/email-otp-login-with-default-login-form/" title="documentation" rel="nofollow ugc">Documentation</a></strong><br />
For detailed documentation, visit https://webnotics.org/email-otp-login-with-default-login-form/<br />
For support, please contact us at <a href="mailto:support@webnotics.solutions" rel="nofollow ugc">support@webnotics.solutions</a>.</p>
<h3>License</h3>
<p>This plugin is licensed under the GPLv2 or later.</p>


Email OTP Login with default login form


A highly trusted plugin for adding OTP verification to login. It supports both email.






Best plugin for login with email otp

Adds email OTP (One-Time Password) verification after valid login credentials on the default wp-login.php form for added security.

dillilabs

<p>Add advanced email address validation using Dilli Email Validation API (DEVA). Prevent a site visitor from submitting a form with fake or incorrect email address on your site. No more lost leads due to mis-typed email addresses. No more wasting your precious time reading and responding to spam leads with incorrect email addresses. It hooks into the WordPress core function that is used by most form plugins to validate email address. As a result, it works with most forms.</p>
<p>Learn more about <a href="https://www.dillilabs.com/products/email-validation-api/" rel="nofollow ugc">Dilli Email Validation API</a>. This plugin requires an API Key which can be obtained for FREE by <a href="https://deva.dillilabs.com/register" rel="nofollow ugc">signing up here</a>.</p>
<h4>Known Compatible Forms</h4>
<ul>
<li>WordPress registration</li>
<li>Contact Form 7</li>
<li>Gravity Forms</li>
<li>Ninja Forms</li>
<li>Jetpack/Grunion contact forms</li>
<li>Any other forms that uses <code>is_email($email)</code> WordPress core function to validate email address field.</li>
</ul>
<h4>Available Languages</h4>
<ul>
<li>English</li>
<li>German (Deutsche)</li>
</ul>
<h4>Features</h4>
<ul>
<li>Validates email address format. Ex: email address <code>fooAtdillilabs.com</code> is invalid because of missing ‘@’</li>
<li>Checks for existence of MX records of the email address domain. Ex: <code>foobar@dlfkdlfkf.co</code> is invalid because no MX records exist for domain dlfkdlfkf.co.</li>
<li>Checks for Disposable/Temporary email addresses. Ex: user@mailinator.com is invalid because mailinator.com provides temporary shared temporary email inboxes.</li>
<li>Checks for conformity with ESP (Email Service Provider) grammar rules. Ex: <code>bob@yahoo.com</code> is invalid because Yahoo does not allow user part (<code>bob</code> in this case) to be less than 4 characters.</li>
<li>Checks for profanity in user part of email address. Ex: <code>f***you@gmail.com</code> is invalid.</li>
<li>Checks user and domain parts of an email address for known malicious patterns. Ex: <code>jondoe@gmail.com</code>, <code>foobar@yahoo.com</code>, <code>idontwanttogive@gmail.com</code> and <code>noemail@gmail.com</code> will be treated as invalid.</li>
<li>Checks email address domain against a known blacklist.</li>
<li>Checks email address against a known blacklist of frequently used email addresses for spam.</li>
<li>Checks for reserved domains. Ex: example.com is a reserved domain. Therefore, validemail@example.com is not allowed.</li>
<li>Checks for Role-based email addresses. Ex: info@someorganization.com will be treated as invalid.</li>
<li>Checks for safe domains. Restricts emails whose domains represents sites with adult content.</li>
<li>Checks for non-business email address.  Ex: *@gmail.com, *@yahoo.com, *@hotmail.com email addresses will be treated as invalid.</li>
<li>Add custom blocklist. You may request certain domains, emails and users to be blocked.</li>
</ul>


Dilli Email Validator

Using the free 100 validation took 5 minutes having 10 logins only on my site.
Each login (not registration! login!!!) used 5 validations. I see no sense in validating logins (well, it makes sense for the provider asking 0.5 cents per validation). Even my admin user's (already logged in) ajax calls were validated each time.

And the worst is that it blocked valid users logging in with an email address from free email providers (not disposable).


BIG waste of money

Validates email address in forms. Prevents form submission if email address is detected to be invalid thereby reducing spam and eliminating typos.

Email OTP Login with default login form vs Dilli Email Validator