BerryPress

<p>LoginBerry bundles <strong>account verification</strong>, <strong>two-factor authentication (2FA)</strong>, <strong>passwordless login</strong>, and <strong>login logs</strong>. Each feature can be enabled or disabled independently. Outgoing codes are delivered by <strong>email</strong>.</p>
<p>The plugin works for standard WordPress sites. When WooCommerce is active, additional customer- and order-related options are available (for example 2FA on the My Account login form and optional account activation tied to orders).</p>
<h4>User-facing behavior (when features are enabled)</h4>
<ul>
<li><strong>Account verification:</strong> After registration, the user signs in and completes activation on the configured activation page using a six-digit code sent by email.</li>
<li><strong>Two-factor authentication:</strong> After a successful username and password, the user enters a second code sent by email. Per-role modes are Required, Optional, or Disabled.</li>
<li><strong>Passwordless login:</strong> On <code>wp-login.php</code>, eligible roles may request a one-time email code instead of entering a password.</li>
<li><strong>Login logs:</strong> Success and failure records are listed in the WordPress admin.</li>
</ul>
<p>Authentication codes are email-based; end users do not install a separate authenticator app for the flows described here.</p>
<h4>Account verification</h4>
<ul>
<li>New accounts receive a six-digit activation code by email.</li>
<li>After fifteen failed activation attempts, the account is locked until an administrator intervenes.</li>
<li>Administrators can resend codes, activate accounts manually, and unlock accounts from <strong>Users <span aria-hidden="true" class="wp-exclude-emoji">→</span> All Users</strong>.</li>
</ul>
<h4>Two-factor authentication (2FA)</h4>
<ul>
<li>Per-role setting: Required, Optional, or Disabled.</li>
<li>Optional mode allows users to enable 2FA from the profile when permitted by role.</li>
<li>Supported on <code>wp-login.php</code> and on the WooCommerce <strong>My Account</strong> login form.</li>
</ul>
<h4>Passwordless login</h4>
<p>Let users log in without a password – just enter a username or email and receive a one-time login code. Improves user experience while maintaining strong security through email verification.</p>
<ul>
<li>Toggle between password and passwordless login on wp-login.php</li>
<li>One-time email codes on <code>wp-login.php</code>, controlled per role.</li>
<li>When both passwordless login and 2FA are enabled for the same role, the passwordless flow does not require a separate 2FA step (email possession is already verified).</li>
</ul>
<h4>WooCommerce</h4>
<ul>
<li>Optional automatic account activation when an WooCommerce order is created.</li>
<li>Optional restriction so that only <strong>paid</strong> orders trigger activation.</li>
<li>Integration points include classic checkout, block checkout (Store API), and paid-order completion hooks, as implemented in the plugin.</li>
</ul>
<h4>Login logs</h4>
<p>Monitor all login activity on your site. Essential for detecting suspicious behavior and meeting security compliance requirements for e-commerce stores.</p>
<ul>
<li>Records successful and failed login attempts</li>
<li>Logs username, email, IP address, and timestamp</li>
<li>View all logs in a dedicated admin page with sortable columns</li>
<li>Identify patterns of brute force attacks and suspicious login activity</li>
<li>Audit trail for security compliance and fraud investigation</li>
</ul>
<h4>Admin interface</h4>
<ul>
<li>Centralized settings under <strong>BerryPress <span aria-hidden="true" class="wp-exclude-emoji">→</span> LoginBerry</strong>, with separate screens per feature.</li>
</ul>
<h4>Email templates</h4>
<p>HTML email templates for activation, 2FA, and passwordless login ship in the plugin <code>templates/</code> directory. To override, copy the desired template into the active theme or child theme under <code>templates/loginberry/</code> (see each template file header for the exact path).</p>
<h4>Email delivery</h4>
<p>Reliable outbound email is required for codes to arrive. Typical setups use the hosting provider’s mail relay, a transactional email API (for example Brevo, Mailchimp Transactional / Mandrill, Postmark, SendGrid, Amazon SES), or a WordPress plugin that sends mail via SMTP or a provider API. Test delivery with a real signup or code request before relying on the feature in production.</p>
<h4>Typical use cases</h4>
<ul>
<li>Reducing unwanted or automated registrations and limiting abuse of disposable email addresses.</li>
<li>Verifying that a customer or member controls the email address on file.</li>
<li>Adding a second factor after password entry for selected roles.</li>
<li>Reviewing login success and failure history in the admin.</li>
<li>WooCommerce: applying optional post-order account activation, including a paid-order-only mode where configured.</li>
</ul>
<h4>Roadmap</h4>
<p>LoginBerry is a brand new plugin and we are improving it quickly based on real user feedback. If you have ideas, feature requests, or run into a theme-specific styling issue, we would love to hear from you.</p>
<p>Planned work includes:</p>
<ul>
<li>Configurable failed-attempt limits (instead of the fixed fifteen for activation lockout)</li>
<li>Track last login time for each user</li>
<li>Custom activation page URL</li>
<li>Custom redirect URL after successful verification</li>
<li>Rate limiting on code verification attempts</li>
<li>Social login options</li>
<li>Improved styling flexibility and theme compatibility</li>
</ul>
<p>Feedback and compatibility reports are welcome via the plugin support channels. New features are prioritized based on user feedback.</p>


LoginBerry – 2FA, Passwordless & Email Verification

Complete login security for WordPress & WooCommerce: LoginBerry adds email-based account verification, optional two-factor authentication (2FA), o …

Chandan Shrivastava

<p><strong>Email OTP Authenticator</strong> is a lightweight authentication plugin for WordPress that combines passwordless login, quick registration, optional 2FA and session protection into one flexible solution.</p>
<p>Built using independent security layers instead of a monolithic system, the plugin loads only the required components during use to keep runtime execution compact and avoid external service dependency.</p>
<h3>Delivering these key benefits:</h3>
<ul>
<li>Reduce login friction</li>
<li>Increase signup conversions</li>
<li>Reduce password reset requests</li>
<li>Strengthen multi-layered website security</li>
<li>Enhance user trust with secure authentication</li>
</ul>
<p>Designed to make WordPress authentication faster, smarter and more secure.</p>
<h3>Authentication Layers</h3>
<p>The plugin is engineered around three dedicated security Layers:</p>
<p><strong>Access Layer</strong></p>
<p>Handles secure user entry through passwordless authentication.</p>
<p>Features:<br />
* OTP Login<br />
* OTP Registration<br />
* Guest Verification<br />
* Email authorization<br />
* Fast Authentication Flow</p>
<p><strong>Validation Layer</strong></p>
<p>Adds identity confirmation and verification controls.</p>
<p>Features:<br />
* New Device detection<br />
* Auto-popup with UI lock<br />
* Parallel login validation<br />
* Two-Factor Authentication<br />
* Login Validity Enforcement</p>
<p><strong>Security Layer</strong></p>
<p>Protects active sessions and detects abnormal activity.</p>
<p>Features:<br />
* Dynamic Session Shield<br />
* Session Validity Check<br />
* Session Inactivity Lock<br />
* Adaptive 2FA Enforcement<br />
* Suspicious Activity Guard</p>
<h3>Lightweight By Design</h3>
<p>Built to stay lightweight.</p>
<p>Although the complete package includes templates, images and supporting resources for setup and compatibility, the actual authentication runtime remains compact.</p>
<ul>
<li>Admin Browser Load: ~97 KB</li>
<li>Admin PHP Runtime: ~564 KB</li>
<li><strong>Frontend Browser Load: ~68 KB</strong></li>
<li><strong>Frontend PHP Runtime: ~274 KB</strong></li>
<li>Templates & visual assets: ~2.1 MB</li>
<li>Distribution package (zipped): ~2.3 MB</li>
<li>Distribution package (unzipped): ~3.6 MB</li>
</ul>
<p>Only required components are loaded during use.<br />
No external APIs, frameworks or unnecessary scripts.</p>
<p><strong>Plugin runtime execution is highly optimized and fast.</strong><br />
<strong>However, overall performance also depends on external factors.</strong></p>
<h3>Key Highlights</h3>
<ul>
<li><strong>Quick Login & Signup</strong> – Instant, easy, and password-free; Login & signup with OTP.</li>
<li><strong>Built-in Two-Factor Authentication</strong> – Additional identity protection layer.</li>
<li><strong>Verified Access Control</strong> – Verify visitors without account for access to restricted pages.</li>
<li><strong>Adaptive Session Shield</strong> – Intelligent session protection engine.</li>
<li><strong>Zero External Dependency</strong> – Works without third-party services.</li>
<li><strong>Modern Vanilla JavaScript</strong> – No jQuery dependency.</li>
<li><strong>Flexible Integration Options</strong> – Add authentication anywhere.</li>
<li><strong>Complete Admin Control</strong> – Fine-tune authentication behavior.</li>
<li><strong>Built-in Interface System</strong> – Attractive ready-to-use templates.</li>
<li><strong>Lightweight & Fast</strong> – Optimized for performance.</li>
</ul>
<h3>Flexible Integration Options</h3>
<p>Add authentication forms anywhere on your website using simple integration methods.</p>
<p>Integration methods include:</p>
<ul>
<li>Shortcode integration (auto-popup, popup or inline forms)</li>
<li>Menu trigger integration (popup forms)</li>
<li>Redirect support for auto-popup & inline form pages</li>
<li>Multiple forms on the same page</li>
<li>Easy setup without coding complexity</li>
</ul>
<h3>Built-in Templates</h3>
<p>Attractive 27 ready-to-use templates with auto-popup, popup and inline support.</p>
<p>Easy-to-apply modern designs that match your website style, with options to customize pre-built templates or create your own.</p>
<h3>Complete Admin Control</h3>
<p>Customize authentication behavior, layout options, security restrictions and verification rules with ease. Admins gain complete control over user access and interaction across the website.</p>
<h3>Zero External Dependency</h3>
<p>Run a complete authentication system without relying on any third-party services.</p>
<ul>
<li>Full data control</li>
<li>Standalone operation</li>
<li>No external APIs required</li>
<li>Self-hosted OTP processing</li>
<li>Reliable authentication flow</li>
</ul>
<h3>Modern Architecture</h3>
<p>Built using modern development practices:</p>
<ul>
<li>Vanilla JavaScript implementation (no jQuery)</li>
<li>Modular resource loading</li>
<li>Secure token validation</li>
<li>Compact runtime execution</li>
<li>Optimized performance structure</li>
</ul>
<h3>Ideal Use Cases</h3>
<p>This plugin is ideal for:</p>
<ul>
<li>Membership websites</li>
<li>WooCommerce stores</li>
<li>SaaS dashboards</li>
<li>Community platforms</li>
<li>Agencies managing client websites</li>
<li>Developers needing flexible authentication</li>
<li>Beginners and small websites needing simple security</li>
</ul>
<p>Designed to scale from beginner websites to enterprise environments.</p>
<h3>Compatibility</h3>
<p>Works smoothly with popular WordPress tools:</p>
<ul>
<li>WooCommerce</li>
<li>Ultimate Member</li>
<li>MemberPress</li>
<li>BuddyPress</li>
<li>ProfileGrid</li>
<li>ProfilePress</li>
<li>User Registration</li>
<li>WP User Manager</li>
<li>Paid Memberships Pro</li>
<li>RegistrationMagic</li>
<li>Forminator</li>
<li>Login/Signup Popup plugins</li>
<li>And many more</li>
</ul>
<h3>Why Choose This Plugin</h3>
<ul>
<li>FAST – Quick OTP authentication process</li>
<li>FRIENDLY – Simple user experience</li>
<li>SMART – Intelligent access handling</li>
<li>SMOOTH – Clean UI integration</li>
<li>SECURED – Strong authentication protection</li>
</ul>
<h3>Basic Mode and Advanced Features</h3>
<p>Explore the default <strong>basic mode</strong> screenshots below, designed to be simple and beginner-friendly for non-technical admins. For screenshots of advanced integrations, customization, and extended functionality, visit the <a href="https://eotpa.cs7.in/docs/showcase.htm" rel="nofollow ugc">Plugin Showcase</a>.</p>
<h3>Support</h3>
<p>Feedback helps improve this plugin.<br />
Send suggestions or issues to:<br />
<a href="mailto:Mr.Chandan.Shrivastava@gmail.com" rel="nofollow ugc">Mr.Chandan.Shrivastava@gmail.com</a></p>
<h3>Notes</h3>
<p>This is the Lite version with advanced features included for exploration.<br />
Visit the <a href="https://eotpa.cs7.in/" rel="nofollow ugc">plugin homepage</a> to discover everything available across editions.</p>


Email OTP Authenticator – Login, Register, 2FA & Session Lock

A lightweight OTP-powered plugin for Login, Registration, 2FA Protection and Dynamic Session Security. It is FAST, FRIENDLY, SMART, SMOOTH & SECURE.

LoginBerry – 2FA, Passwordless & Email Verification vs Email OTP Authenticator – Login, Register, 2FA & Session Lock