rishav001

<p>Rishav AuthNova OTP adds a one-time-password verification layer to core WordPress authentication flows.</p>
<p>Features include:</p>
<ul>
<li>Configurable OTP length and charset (numeric or alphanumeric)</li>
<li>OTP expiry and retry limits with temporary lockouts</li>
<li>Login OTP verification step (after password check)</li>
<li>OTP-gated registration flow</li>
<li>OTP-gated password reset flow</li>
<li>Delivery via wp_mail, SendGrid, and Twilio</li>
<li>OTP storage using hashes (never plaintext)</li>
<li>Resend OTP with cooldown and challenge rotation</li>
</ul>
<p>Security highlights:</p>
<ul>
<li>OTP values are hashed before storage and are never saved as plaintext</li>
<li>OTP hashes use keyed HMAC storage and constant-time verification</li>
<li>OTP challenges expire automatically and enforce retry limits per challenge</li>
<li>Request throttling applies cooldown and exponential backoff per IP and identifier</li>
<li>Lockout windows reduce repeated invalid OTP submissions</li>
<li>Nonces are applied on sensitive form submissions</li>
<li>Public auth responses are intentionally generic to reduce account-enumeration leakage</li>
<li>Delivery uses synchronous-first send with bounded async retry fallback and challenge-level delivery status tracking</li>
</ul>
<p>Security limitations:</p>
<ul>
<li>This plugin does not replace passwords, HTTPS, WAF/rate-limiting at the edge, or secure hosting controls</li>
<li>OTP delivery depends on the configured email/SMS provider uptime and deliverability</li>
<li>Administrators should combine this plugin with standard WordPress hardening and monitoring</li>
</ul>
<p>Reliability notes:</p>
<ul>
<li>OTP delivery is attempted synchronously first to reduce silent failures</li>
<li>If synchronous delivery fails and background delivery is healthy, the plugin schedules bounded retries</li>
<li>If background delivery is unhealthy (for example DISABLE_WP_CRON), fallback queueing is skipped and users receive a retry-safe error</li>
<li>Resend cooldown state is server-authoritative and exposed through a status endpoint used by frontend countdown UX</li>
<li>Background queue payload contains only challenge ID (no raw OTP or destination data)</li>
</ul>
<h3>External Services</h3>
<p>This plugin can connect to third-party services to deliver OTP messages. These services are optional and only used if enabled in plugin settings.</p>
<h4>Twilio (SMS Delivery)</h4>
<ul>
<li>Service: Twilio Programmable Messaging API</li>
<li>Purpose: Send OTP codes by SMS</li>
<li>Data sent: destination phone number, sender phone number, OTP message text, account SID for authentication</li>
<li>Credential handling: Twilio credentials are stored in WordPress options and used only when sending OTP messages</li>
<li>When sent: when OTP delivery method includes SMS and an OTP is generated for login, registration, password reset, or resend</li>
<li>Why sent: to deliver time-sensitive OTP codes to the user by SMS</li>
<li>Terms of Service: https://www.twilio.com/legal/tos</li>
<li>Privacy Policy: https://www.twilio.com/en-us/legal/privacy</li>
</ul>
<h4>SendGrid (Email Delivery)</h4>
<ul>
<li>Service: SendGrid Mail Send API</li>
<li>Purpose: Send OTP codes by email</li>
<li>Data sent: recipient email address, sender email/name, message subject, OTP message body, API key for authentication</li>
<li>Credential handling: SendGrid API key is stored in WordPress options and used only when sending OTP messages</li>
<li>When sent: when email provider is set to SendGrid and an OTP is generated for login, registration, password reset, or resend</li>
<li>Why sent: to deliver time-sensitive OTP codes to the user by email</li>
<li>Terms of Service: https://sendgrid.com/policies/terms/</li>
<li>Privacy Policy: https://sendgrid.com/policies/privacy/</li>
</ul>
<h3>Configuration</h3>
<ol>
<li>Set OTP length, type, expiry, retry limit, and lockout duration.</li>
<li>Choose delivery method: Email, SMS, or Both.</li>
<li>Configure provider credentials for SendGrid and/or Twilio if needed.</li>
<li>Enable or disable OTP on login, registration, and password reset flows.</li>
</ol>


Rishav AuthNova OTP

OTP verification for WordPress login, registration, and password reset using email and SMS delivery.

clearoutio

<p>Clearout Email Validation plugin seamlessly integrates with all major forms to validate the email addresses in real time.</p>
<p>The plugin performs 20+ refined real-time validation checks to determine the current status of the email address. These checks include extensive verifications like greylist verification, anti-spam check, gibberish check, catch-all verification, email blacklist verification, temporary email address check, and more.</p>
<h4>Key Benefits of Using Clearout Email Verification Plugin:</h4>
<ul>
<li>Accept only <strong>safe-to-send</strong> email address to <strong>protect your sender reputation</strong></li>
<li>Accept only <strong>business or work email addresses</strong></li>
<li><strong>Prevent fraudulent signups or leads getting into CRM</strong> by stopping <a href="https://clearout.io/blog/2020/09/30/dont-let-your-email-campaigns-be-a-victim-of-disposable-email-addresses" rel="nofollow ugc">temporary / disposable / throw away email addresses</a></li>
<li><strong>Customization to Block free email address providers</strong> like gmail.com / yahoo.com / hotmail.com</li>
<li><strong>Remove</strong> duplicate and <strong>alias email addresses</strong></li>
</ul>
<h4>How to Install Clearout Email Verifier Plugin</h4>
<p><strong>Obtain an API Token:</strong><br />
1. <strong>Log in</strong> to your Clearout account.<br />
2. Navigate to the <a href="https://app.clearout.io/developer/api/list" rel="nofollow ugc">‘Developer’</a> menu and click on <strong>‘+ Create API Token’</strong>.<br />
3. Add the necessary details for reference, and click on “Create” to generate the API token.</p>
<p><strong>Create a Clearout Account (if you don’t have one):</strong><br />
1. <a href="https://app.clearout.io/register" rel="nofollow ugc">Sign up</a> for a Clearout account to <strong>get 100 free email validation credits with no credit card required</strong>.</p>
<p>For more detailed instructions, visit Clearout <a href="https://clearout.io/integrations/wordpress/" rel="nofollow ugc">Email Verifier Plugin Installation</a>.</p>
<p><span class="embed-youtube" style="text-align:center; display: block;"><iframe loading="lazy" class="youtube-player" width="750" height="422" src="https://www.youtube.com/embed/YG5BrBn7FHo?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent" allowfullscreen="true" style="border:0;" sandbox="allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox"></iframe></span></p>
<h4>Supported Forms/Plugins</h4>
<p>The Clearout email verification plugin supports a rich set of popular form-based plugins by listening to email address capture flow or by hooking into WordPress is_email() function:</p>
<ul>
<li>Elementor Form</li>
<li>Gravity Forms</li>
<li>Forminator Form</li>
<li>WooCommerce Checkout Forms</li>
<li>WooCommerce Registration Form</li>
<li>Fluent Form</li>
<li>WP Forms</li>
<li>Formidable forms</li>
<li>WS Form </li>
<li>WP-Members</li>
<li>Contact Form</li>
<li>Mailster Form</li>
<li>MailChimp</li>
<li>Ninja Forms</li>
<li>Profile Builder</li>
<li>Ultimate Member registration form</li>
<li>Users Ultra registration form</li>
<li>JetPack comments and a contact form</li>
<li>MailPoet</li>
<li>Theme My Login</li>
<li>Paid Memberships Pro</li>
<li>Form Maker by 10Web</li>
<li>Visual Form Builder</li>
<li>Any WordPress registrations & contact forms   </li>
</ul>
<h4>Key Features</h4>
<ul>
<li>Accurate Email Verification</li>
<li>Fastest Real-time Email Validation</li>
<li>Seamless API Integration</li>
<li>Guaranteed Deliverability (Safe to send)</li>
<li>High Precision Advanced Catch-all Resolver</li>
<li>Block Role Email</li>
<li>Block Disposable Email</li>
<li>Block Gibberish Email</li>
<li>Email / Domain Allowlisting and Blocklisting</li>
<li>Custom Error Message</li>
<li>Limit email validation to only required pages</li>
<li>Low Credit Notification Alert</li>
<li>Team Accounts</li>
<li>Syntax Verification</li>
<li><a href="https://docs.clearout.io/api-overview.html#testing" rel="nofollow ugc">Test email addresses</a></li>
</ul>
<h4>Know A Little More About Clearout Email Verification Service</h4>
<p>In addition to its availability as a WordPress Plugin, Clearout Email Verifier supports email verification in multiple forms and ways to meet the needs of the user. Other verification methods supported by Clearout Email Verifier are – Bulk email list validation, real-time email validation API, and Form Guard Email Validation.</p>
<h4>FURTHER READING</h4>
<p>More about Clearout Email Verification</p>
<ul>
<li><a href="https://clearout.io/email-verification-api/" rel="nofollow ugc">https://clearout.io/email-verification-api/</a></li>
<li><a href="https://clearout.io/disposable-email-checker/" rel="nofollow ugc">https://clearout.io/disposable-email-checker/</a></li>
<li><a href="https://clearout.io/integrations/" rel="nofollow ugc">https://clearout.io/integrations/</a></li>
<li><a href="https://clearout.io/help/" rel="nofollow ugc">https://clearout.io/help/</a></li>
<li><a href="https://docs.clearout.io/" rel="nofollow ugc">https://docs.clearout.io/</a></li>
</ul>
<p>Other Clearout Services</p>
<ul>
<li><a href="https://clearout.io/email-finder/" rel="nofollow ugc">https://clearout.io/email-finder/</a></li>
<li><a href="https://clearout.io/sales-prospecting/chrome-extension/" rel="nofollow ugc">https://clearout.io/sales-prospecting/chrome-extension/</a></li>
<li><a href="https://clearout.io/sales-prospecting/advanced-data-enrichment/" rel="nofollow ugc">https://clearout.io/sales-prospecting/advanced-data-enrichment/</a></li>
<li><a href="https://clearout.io/reverse-lookup/linkedin/" rel="nofollow ugc">https://clearout.io/reverse-lookup/linkedin/</a></li>
<li><a href="https://clearout.io/reverse-lookup/email/" rel="nofollow ugc">https://clearout.io/reverse-lookup/email/</a></li>
</ul>


Clearout Email Validator – Real-Time Email Verification on WordPress Forms

Block invalid emails like temporary, disposable, etc. with our real-time email verification. Verify email address during form-fill and stop form spam.

Rishav AuthNova OTP vs Clearout Email Validator – Real-Time Email Verification on WordPress Forms