Sadekur Rahman

<p><strong>Password Less Login</strong> is a passwordless and OTP-based login system for WordPress.<br />
Every user — both existing and new — must verify their identity using a <strong>One-Time Password (OTP)</strong> sent to their email before being logged in.</p>
<p>This ensures that no one can access an account without confirming ownership of the email address, providing a secure, passwordless authentication process.</p>
<h3>How It Works</h3>
<ol>
<li>The user enters their email address.</li>
<li>The plugin sends a <strong>6-digit OTP</strong> to that email.</li>
<li>The user enters the OTP:
<ul>
<li>If the email exists <span aria-hidden="true" class="wp-exclude-emoji">→</span> the user is securely logged in.</li>
<li>If the email is new <span aria-hidden="true" class="wp-exclude-emoji">→</span> the user provides a username, verifies the OTP, and a new account is created automatically.</li>
</ul>
</li>
<li>The OTP is valid for <strong>10 minutes</strong> and expires after use.</li>
</ol>
<blockquote>
<p><strong>Note:</strong> The plugin never logs in users without OTP verification.</p>
</blockquote>
<h3>Key Features</h3>
<ul>
<li><strong>OTP-Based Authentication for All Users</strong> – Both existing and new users must verify the OTP before login.</li>
<li><strong>Passwordless Login</strong> – Securely log in using only your email and OTP.</li>
<li><strong>Auto User Registration</strong> – New users can register instantly after OTP verification.</li>
<li><strong>Temporary OTP (10 Minutes)</strong> – Each OTP expires after 10 minutes and can only be used once.</li>
<li><strong>Rate Limiting</strong> – Prevents brute-force or spam OTP requests (maximum 5 per 15 minutes per email).</li>
<li><strong>Nonce Verification</strong> – Protects REST API endpoints from unauthorized access.</li>
<li><strong>Secure Email Handling</strong> – Emails are hashed when stored in transients to protect user data.</li>
<li><strong>Streamlined User Experience</strong> – Clean, minimal login flow with conditional fields for existing vs. new users.</li>
</ul>
<h3>Why Choose Password Less Login?</h3>
<ul>
<li>No passwords to remember or reset.</li>
<li>OTP verification ensures true ownership of email.</li>
<li>Protects against brute-force attacks.</li>
<li>Simple setup – works with the native WordPress login page.</li>
<li>Modern and user-friendly design.</li>
<li>Reduces “Forgot Password” support requests.</li>
</ul>
<h3>Usage</h3>
<ol>
<li>Go to your WordPress login page.</li>
<li>Enter your email address and click “Send OTP”.</li>
<li>Check your email for the OTP.</li>
<li>Enter the OTP in the login form:
<ul>
<li>If your account exists, you’ll be logged in.</li>
<li>If not, you’ll be prompted to provide a username before registration and login.</li>
</ul>
</li>
<li>You’ll be redirected to your dashboard after successful verification.</li>
</ol>
<h3>License</h3>
<p>This plugin is released under the GPL license. You are free to use and modify it.</p>
<p>For support, contact: <a href="mailto:sadekur0rahman@gmail.com" rel="nofollow ugc">sadekur0rahman@gmail.com</a></p>


Password Less Login

A powerful and easy-to-use WordPress plugin for passwordless and OTP-based login.

DuoCircle LLC

<p>DMARCREPORT Domain Auth Checker lets you embed interactive email authentication record checkers on any WordPress page or post using a simple shortcode. All DNS lookups run locally through PHP’s native <code>dns_get_record()</code> function. The MTA-STS checker also fetches the domain’s MTA-STS policy file over HTTPS (see External Services below).</p>
<h4>SPF Checker</h4>
<ul>
<li>Analyze SPF records for any domain</li>
<li>Monitor DNS lookup count (RFC 7208 limit of 10)</li>
<li>View SPF record structure in an interactive tree</li>
<li>Per-mechanism lookup count breakdown</li>
<li>Health status indicator (Good / At Limit / Critical)</li>
</ul>
<h4>DMARC Checker</h4>
<ul>
<li>Analyze DMARC policies and configuration</li>
<li>Interactive DMARC record builder</li>
<li>Tag parsing with descriptions</li>
<li>DKIM and SPF alignment checks</li>
<li>Reporting configuration (rua/ruf) verification</li>
</ul>
<h4>TLS-RPT Checker</h4>
<ul>
<li>Check SMTP TLS Reporting configuration</li>
<li>Validate mailto: and https: reporting endpoints</li>
<li>Health scoring for TLS-RPT setup</li>
</ul>
<h4>BIMI Checker</h4>
<ul>
<li>Verify Brand Indicators for Message Identification setup</li>
<li>Visual logo preview</li>
<li>VMC (Verified Mark Certificate) detection</li>
<li>Custom selector support</li>
</ul>
<h4>MTA-STS Checker</h4>
<ul>
<li>Verify MTA-STS DNS TXT record</li>
<li>Fetch and parse the MTA-STS policy file</li>
<li>Mode detection (enforce/testing/none)</li>
<li>MX host listing from policy</li>
<li>Max age analysis</li>
</ul>
<h4>Common Features</h4>
<ul>
<li>Copy to clipboard for domains and record values</li>
<li>Fully responsive design (desktop and mobile)</li>
<li>URL deep linking — share results via <code>?domain=example.com</code></li>
<li>Visual health indicators for all checkers</li>
<li>Powered by dmarcreport.com watermark</li>
</ul>
<h3>Usage</h3>
<p>Use the <code>[dmarcreport_domain_auth_checker]</code> shortcode with the <code>type</code> attribute:</p>
<ul>
<li><strong>SPF</strong> (default): <code>[dmarcreport_domain_auth_checker]</code> or <code>[dmarcreport_domain_auth_checker type="spf"]</code></li>
<li><strong>DMARC</strong>: <code>[dmarcreport_domain_auth_checker type="dmarc"]</code></li>
<li><strong>TLS-RPT</strong>: <code>[dmarcreport_domain_auth_checker type="tlsrpt"]</code></li>
<li><strong>BIMI</strong>: <code>[dmarcreport_domain_auth_checker type="bimi"]</code></li>
<li><strong>MTA-STS</strong>: <code>[dmarcreport_domain_auth_checker type="mta-sts"]</code></li>
</ul>
<p>All checkers support the <code>?domain=example.com</code> URL parameter for deep linking and auto-analysis.</p>
<h3>External services</h3>
<p>This plugin performs DNS lookups and, for the MTA-STS checker, an HTTPS request to the domain being analyzed. No data is sent to any third-party API or service operated by the plugin author.</p>
<h4>DNS lookups</h4>
<p>When a user submits a domain for analysis, the plugin uses PHP’s built-in <code>dns_get_record()</code> function to query DNS records directly from your WordPress server. The domain name entered by the user is sent as a standard DNS query. This happens each time a user clicks the analyze button for any checker (SPF, DMARC, TLS-RPT, BIMI, or MTA-STS).</p>
<p>DNS lookups are handled by your server’s configured DNS resolver and are not routed through any external API.</p>
<h4>MTA-STS policy file fetch</h4>
<p>The MTA-STS checker fetches the domain’s MTA-STS policy file by making an HTTPS GET request to:<br />
    https://mta-sts.{domain}/.well-known/mta-sts.txt</p>
<p>This request is sent to the web server of the domain being analyzed (not to a third-party service). It is made each time a user analyzes a domain using the MTA-STS checker. Only the HTTP request itself is sent — no additional user data, cookies, or tracking information is included.</p>
<p>Since this request goes directly to the analyzed domain’s own web server, there is no third-party service provider with separate terms of use or privacy policy. The connection uses HTTPS with SSL verification enabled.</p>
<h4>Outbound links</h4>
<p>The plugin includes links to <a href="https://dmarcreport.com" rel="nofollow ugc">dmarcreport.com</a> and <a href="https://autospf.com" rel="nofollow ugc">autospf.com</a> (services by the plugin author, DuoCircle). These appear as “Powered by” watermarks and pricing call-to-action buttons within the checker interface. They are standard hyperlinks that open in a new browser tab when clicked by the user — no data is sent to these sites automatically by the plugin.</p>
<ul>
<li><a href="https://dmarcreport.com/terms-and-conditions/" rel="nofollow ugc">dmarcreport.com Terms and Conditions</a></li>
<li><a href="https://dmarcreport.com/privacy-policy/" rel="nofollow ugc">dmarcreport.com Privacy Policy</a></li>
<li><a href="https://autospf.com/terms-and-conditions/" rel="nofollow ugc">autospf.com Terms and Conditions</a></li>
<li><a href="https://autospf.com/privacy-policy/" rel="nofollow ugc">autospf.com Privacy Policy</a></li>
</ul>


DMARCREPORT Domain Auth Checker

Check SPF, DMARC, BIMI, MTA-STS and TLS-RPT records for any domain. Embed email authentication checkers with a shortcode.

Password Less Login vs DMARCREPORT Domain Auth Checker