BerryPress

<p>LoginBerry bundles <strong>account verification</strong>, <strong>two-factor authentication (2FA)</strong>, <strong>passwordless login</strong>, and <strong>login logs</strong>. Each feature can be enabled or disabled independently. Outgoing codes are delivered by <strong>email</strong>.</p>
<p>The plugin works for standard WordPress sites. When WooCommerce is active, additional customer- and order-related options are available (for example 2FA on the My Account login form and optional account activation tied to orders).</p>
<h4>User-facing behavior (when features are enabled)</h4>
<ul>
<li><strong>Account verification:</strong> After registration, the user signs in and completes activation on the configured activation page using a six-digit code sent by email.</li>
<li><strong>Two-factor authentication:</strong> After a successful username and password, the user enters a second code sent by email. Per-role modes are Required, Optional, or Disabled.</li>
<li><strong>Passwordless login:</strong> On <code>wp-login.php</code>, eligible roles may request a one-time email code instead of entering a password.</li>
<li><strong>Login logs:</strong> Success and failure records are listed in the WordPress admin.</li>
</ul>
<p>Authentication codes are email-based; end users do not install a separate authenticator app for the flows described here.</p>
<h4>Account verification</h4>
<ul>
<li>New accounts receive a six-digit activation code by email.</li>
<li>After fifteen failed activation attempts, the account is locked until an administrator intervenes.</li>
<li>Administrators can resend codes, activate accounts manually, and unlock accounts from <strong>Users <span aria-hidden="true" class="wp-exclude-emoji">→</span> All Users</strong>.</li>
</ul>
<h4>Two-factor authentication (2FA)</h4>
<ul>
<li>Per-role setting: Required, Optional, or Disabled.</li>
<li>Optional mode allows users to enable 2FA from the profile when permitted by role.</li>
<li>Supported on <code>wp-login.php</code> and on the WooCommerce <strong>My Account</strong> login form.</li>
</ul>
<h4>Passwordless login</h4>
<p>Let users log in without a password – just enter a username or email and receive a one-time login code. Improves user experience while maintaining strong security through email verification.</p>
<ul>
<li>Toggle between password and passwordless login on wp-login.php</li>
<li>One-time email codes on <code>wp-login.php</code>, controlled per role.</li>
<li>When both passwordless login and 2FA are enabled for the same role, the passwordless flow does not require a separate 2FA step (email possession is already verified).</li>
</ul>
<h4>WooCommerce</h4>
<ul>
<li>Optional automatic account activation when an WooCommerce order is created.</li>
<li>Optional restriction so that only <strong>paid</strong> orders trigger activation.</li>
<li>Integration points include classic checkout, block checkout (Store API), and paid-order completion hooks, as implemented in the plugin.</li>
</ul>
<h4>Login logs</h4>
<p>Monitor all login activity on your site. Essential for detecting suspicious behavior and meeting security compliance requirements for e-commerce stores.</p>
<ul>
<li>Records successful and failed login attempts</li>
<li>Logs username, email, IP address, and timestamp</li>
<li>View all logs in a dedicated admin page with sortable columns</li>
<li>Identify patterns of brute force attacks and suspicious login activity</li>
<li>Audit trail for security compliance and fraud investigation</li>
</ul>
<h4>Admin interface</h4>
<ul>
<li>Centralized settings under <strong>BerryPress <span aria-hidden="true" class="wp-exclude-emoji">→</span> LoginBerry</strong>, with separate screens per feature.</li>
</ul>
<h4>Email templates</h4>
<p>HTML email templates for activation, 2FA, and passwordless login ship in the plugin <code>templates/</code> directory. To override, copy the desired template into the active theme or child theme under <code>templates/loginberry/</code> (see each template file header for the exact path).</p>
<h4>Email delivery</h4>
<p>Reliable outbound email is required for codes to arrive. Typical setups use the hosting provider’s mail relay, a transactional email API (for example Brevo, Mailchimp Transactional / Mandrill, Postmark, SendGrid, Amazon SES), or a WordPress plugin that sends mail via SMTP or a provider API. Test delivery with a real signup or code request before relying on the feature in production.</p>
<h4>Typical use cases</h4>
<ul>
<li>Reducing unwanted or automated registrations and limiting abuse of disposable email addresses.</li>
<li>Verifying that a customer or member controls the email address on file.</li>
<li>Adding a second factor after password entry for selected roles.</li>
<li>Reviewing login success and failure history in the admin.</li>
<li>WooCommerce: applying optional post-order account activation, including a paid-order-only mode where configured.</li>
</ul>
<h4>Roadmap</h4>
<p>LoginBerry is a brand new plugin and we are improving it quickly based on real user feedback. If you have ideas, feature requests, or run into a theme-specific styling issue, we would love to hear from you.</p>
<p>Planned work includes:</p>
<ul>
<li>Configurable failed-attempt limits (instead of the fixed fifteen for activation lockout)</li>
<li>Track last login time for each user</li>
<li>Custom activation page URL</li>
<li>Custom redirect URL after successful verification</li>
<li>Rate limiting on code verification attempts</li>
<li>Social login options</li>
<li>Improved styling flexibility and theme compatibility</li>
</ul>
<p>Feedback and compatibility reports are welcome via the plugin support channels. New features are prioritized based on user feedback.</p>


LoginBerry – 2FA, Passwordless & Email Verification

Complete login security for WordPress & WooCommerce: LoginBerry adds email-based account verification, optional two-factor authentication (2FA), o …

PickPlugins

Nafis Mahmud Ayon

<p>User Verification – Complete WordPress User Authentication & Security Plugin</p>
<h3>User Verification by <a href="http://www.pickplugins.com" rel="nofollow ugc">http://www.pickplugins.com</a></h3>
<ul>
<li><a href="https://www.pickplugins.com/item/user-verification/?ref=wordpress.org" rel="nofollow ugc">Donate</a></li>
<li><a href="https://www.pickplugins.com/support/?ref=wordpress.org" rel="nofollow ugc">Support</a></li>
<li><a href="https://pickplugins.com/documentation/user-verification/?ref=wordpress.org" rel="nofollow ugc">Documentation</a></li>
</ul>
<h3>Secure Your WordPress Site with Advanced User Verification & Authentication</h3>
<p><strong>User Verification</strong> is a comprehensive WordPress security plugin that provides multiple layers of user authentication and spam protection to safeguard your website from unauthorized access and malicious registrations.</p>
<h3>🔐 Key Features</h3>
<h4><strong>Email Verification System</strong></h4>
<ul>
<li><strong>Mandatory Email Verification</strong>: Ensure all new users verify their email addresses before accessing your site</li>
<li><strong>Customizable Verification Pages</strong>: Choose custom redirect pages for successful and failed verifications  </li>
<li><strong>Automatic Login</strong>: Seamlessly log users in after successful email verification</li>
<li><strong>Role-Based Control</strong>: Exclude specific user roles (like Administrators) from verification requirements</li>
<li><strong>Flexible Configuration</strong>: Enable/disable email verification with simple toggle controls</li>
</ul>
<h4><strong>Magic Login (Passwordless Authentication)</strong></h4>
<ul>
<li><strong>🆕 NEW Feature</strong>: Enable secure passwordless login for enhanced user experience</li>
<li><strong>Email-Based Authentication</strong>: Users receive login links directly in their inbox</li>
<li><strong>Customizable Key Length</strong>: Set secure authentication key length (default: 6 characters)</li>
<li><strong>Attempt Limits</strong>: Configure maximum login attempts for security (default: 3 attempts)</li>
<li><strong>Custom Redirect Pages</strong>: Set specific pages for successful logins, failures, and magic login forms</li>
<li><strong>Email Verification Integration</strong>: Require verified emails for magic login access</li>
<li><strong>Easy Implementation</strong>: Simple shortcode <code>[user_verification_magic_login_form]</code> for frontend display</li>
</ul>
<h4><strong>OTP (One-Time Password) Login</strong></h4>
<ul>
<li><strong>SMS/Email OTP</strong>: Secure one-time password authentication system</li>
<li><strong>Configurable OTP Length</strong>: Customize OTP length (default: 6 digits)</li>
<li><strong>Character Flexibility</strong>: Support for numbers, uppercase, lowercase, and special characters</li>
<li><strong>Custom Success/Error Messages</strong>: Personalized user feedback for OTP processes</li>
<li><strong>Post-Login Redirects</strong>: Direct users to specific pages after successful authentication</li>
<li><strong>Easy Integration</strong>: Simple shortcode <code>[user_verification_otp_login_form]</code> implementation</li>
</ul>
<h4><strong>Advanced Spam Protection</strong></h4>
<ul>
<li><strong>Domain Blocking</strong>: Block registrations from specific email domains</li>
<li><strong>Domain Allowlist</strong>: Allow only approved email domains for registration</li>
<li><strong>Username Protection</strong>: Block specific usernames from registration</li>
<li><strong>Flexible Domain Management</strong>: Easy-to-use interface for managing blocked/allowed domains</li>
</ul>
<h4><strong>reCAPTCHA Integration</strong></h4>
<ul>
<li><strong>Google reCAPTCHA v2</strong>: Complete bot protection with checkbox verification</li>
<li><strong>Multiple Implementation Points</strong>: Add reCAPTCHA to login, registration, password reset, and comment forms</li>
<li><strong>WooCommerce Ready</strong>: Full integration with WooCommerce forms</li>
<li><strong>Easy Configuration</strong>: Simple setup with site key and secret key</li>
</ul>
<h4><strong>User Management Tools</strong></h4>
<ul>
<li><strong>Unverified User Cleanup</strong>: Automatically delete unverified user accounts</li>
<li><strong>Existing User Verification</strong>: Mark existing users as verified with customizable intervals</li>
<li><strong>User Status Monitoring</strong>: Track verification status across your user base</li>
</ul>
<h4><strong>Email Customization</strong></h4>
<ul>
<li><strong>Custom Email Templates</strong>: Personalize verification and notification emails</li>
<li><strong>WPAutoP Support</strong>: Enable/disable automatic paragraph formatting in emails</li>
<li><strong>Branded Communications</strong>: Add your logo and customize email appearance</li>
<li><strong>Multiple Email Types</strong>: Templates for registration, verification, OTP, magic login, and activation</li>
</ul>
<h4><strong>WooCommerce Compatibility</strong></h4>
<ul>
<li><strong>E-commerce Ready</strong>: Full integration with WooCommerce login, registration, and password reset forms</li>
<li><strong>Customer Protection</strong>: Prevent fake customer registrations and protect customer data</li>
<li><strong>Seamless Experience</strong>: Maintain smooth checkout process while ensuring security</li>
</ul>
<h3>🎯 Perfect For:</h3>
<ul>
<li><strong>Membership Sites</strong>: Protect exclusive content with verified users only</li>
<li><strong>E-commerce Stores</strong>: Prevent fake customer accounts and fraudulent orders  </li>
<li><strong>Corporate Websites</strong>: Ensure legitimate user registrations for business platforms</li>
<li><strong>Community Forums</strong>: Maintain quality user base with verified members</li>
<li><strong>Educational Platforms</strong>: Secure student and instructor account creation</li>
<li><strong>Any WordPress Site</strong>: Enhance security for blogs, portfolios, and business websites</li>
</ul>
<h3>⚡ Easy Setup & Management</h3>
<ul>
<li><strong>User-Friendly Interface</strong>: Intuitive admin dashboard for all configurations</li>
<li><strong>Shortcode Ready</strong>: Simple shortcodes for frontend form implementation</li>
<li><strong>One-Click Configuration</strong>: Enable/disable features with simple toggle switches</li>
<li><strong>Comprehensive Documentation</strong>: Detailed setup guides and troubleshooting support</li>
</ul>
<h3>🔧 Technical Specifications</h3>
<ul>
<li><strong>WordPress Compatibility</strong>: Works with latest WordPress versions</li>
<li><strong>PHP 7.4+ Support</strong>: Modern PHP compatibility for optimal performance</li>
<li><strong>Mobile Responsive</strong>: All forms and interfaces work perfectly on mobile devices</li>
<li><strong>Translation Ready</strong>: Multi-language support for global websites</li>
<li><strong>Developer Friendly</strong>: Clean code structure with hooks and filters for customization</li>
</ul>
<h3>📧 Default Email Configuration</h3>
<ul>
<li><strong>Professional Setup</strong>: Comes with pre-configured professional email settings</li>
<li><strong>Custom From Address</strong>: Set your preferred sender email (e.g., public.nurhasan@gmail.com)</li>
<li><strong>Branded Sender Name</strong>: Customize sender name (default: wordpress)</li>
<li><strong>Template Variety</strong>: Multiple email templates for different verification scenarios</li>
</ul>
<h3>🚀 Why Choose User Verification?</h3>
<ol>
<li><strong>Complete Security Solution</strong>: Multiple authentication methods in one plugin</li>
<li><strong>Zero Spam Guarantee</strong>: Advanced filtering eliminates fake registrations</li>
<li><strong>User Experience Focused</strong>: Smooth verification process that doesn’t frustrate legitimate users</li>
<li><strong>Highly Customizable</strong>: Adapt every aspect to match your site’s needs</li>
<li><strong>Regular Updates</strong>: Continuously updated with new features and security improvements</li>
<li><strong>Professional Support</strong>: Dedicated support for setup and troubleshooting</li>
</ol>
<h3>Installation & Usage</h3>
<p>Simply install the plugin, configure your preferred verification methods, and add the provided shortcodes to your pages. The plugin integrates seamlessly with WordPress default forms and popular plugins like WooCommerce.</p>
<p><strong>Transform your WordPress site security today with User Verification – the most comprehensive user authentication plugin available.</strong></p>
<h3>External services</h3>
<h3>Spam Protection by [https://isspammy.com](http://isspammy.com)</h3>
<p>isspammy.com is owned by PickPlugins and it’s used to protect spam users from login in, registering, commenting, posting reviews and etc. Once you mark a comment as spam it will send a request to isspammy.com and it will create a record for this mail and marked as spam, so later when the same email is used to post a comment it will block them as a spammer. isspammy.com is commited to keep user email private and only accessible when requested.</p>
<ul>
<li><a href="http://isspammy.com/privacy-policy/" rel="nofollow ugc">isspammy.com/privacy-policy/</a></li>
<li><a href="http://isspammy.com/privacy-policy/" rel="nofollow ugc">isspammy.com/About Us/</a></li>
</ul>


User Verification by PickPlugins


There was an error after I opened the plugin. It started well, but I don't know what I configured to cause the problem.



[18-Feb-2025 08:44:58 UTC] PHP Warning: Trying to access array offset on value of type null in /data/wwwroot/wordpress/wp-content/plugins/post-smtp/Postman/PostmanEmailLogs.php on line 724


Trying to access array offset on value of type null


I am writing to support for the second time. The WooCommerce section is not working! Settings are not being saved. Could you at least respond and explain why? Is it a paid feature or a bug on your side?


woocommerce problems

Email verification for user registration to protect spam.

LoginBerry – 2FA, Passwordless & Email Verification vs User Verification by PickPlugins