rishav001

<p>Rishav AuthNova OTP adds a one-time-password verification layer to core WordPress authentication flows.</p>
<p>Features include:</p>
<ul>
<li>Configurable OTP length and charset (numeric or alphanumeric)</li>
<li>OTP expiry and retry limits with temporary lockouts</li>
<li>Login OTP verification step (after password check)</li>
<li>OTP-gated registration flow</li>
<li>OTP-gated password reset flow</li>
<li>Delivery via wp_mail, SendGrid, and Twilio</li>
<li>OTP storage using hashes (never plaintext)</li>
<li>Resend OTP with cooldown and challenge rotation</li>
</ul>
<p>Security highlights:</p>
<ul>
<li>OTP values are hashed before storage and are never saved as plaintext</li>
<li>OTP hashes use keyed HMAC storage and constant-time verification</li>
<li>OTP challenges expire automatically and enforce retry limits per challenge</li>
<li>Request throttling applies cooldown and exponential backoff per IP and identifier</li>
<li>Lockout windows reduce repeated invalid OTP submissions</li>
<li>Nonces are applied on sensitive form submissions</li>
<li>Public auth responses are intentionally generic to reduce account-enumeration leakage</li>
<li>Delivery uses synchronous-first send with bounded async retry fallback and challenge-level delivery status tracking</li>
</ul>
<p>Security limitations:</p>
<ul>
<li>This plugin does not replace passwords, HTTPS, WAF/rate-limiting at the edge, or secure hosting controls</li>
<li>OTP delivery depends on the configured email/SMS provider uptime and deliverability</li>
<li>Administrators should combine this plugin with standard WordPress hardening and monitoring</li>
</ul>
<p>Reliability notes:</p>
<ul>
<li>OTP delivery is attempted synchronously first to reduce silent failures</li>
<li>If synchronous delivery fails and background delivery is healthy, the plugin schedules bounded retries</li>
<li>If background delivery is unhealthy (for example DISABLE_WP_CRON), fallback queueing is skipped and users receive a retry-safe error</li>
<li>Resend cooldown state is server-authoritative and exposed through a status endpoint used by frontend countdown UX</li>
<li>Background queue payload contains only challenge ID (no raw OTP or destination data)</li>
</ul>
<h3>External Services</h3>
<p>This plugin can connect to third-party services to deliver OTP messages. These services are optional and only used if enabled in plugin settings.</p>
<h4>Twilio (SMS Delivery)</h4>
<ul>
<li>Service: Twilio Programmable Messaging API</li>
<li>Purpose: Send OTP codes by SMS</li>
<li>Data sent: destination phone number, sender phone number, OTP message text, account SID for authentication</li>
<li>Credential handling: Twilio credentials are stored in WordPress options and used only when sending OTP messages</li>
<li>When sent: when OTP delivery method includes SMS and an OTP is generated for login, registration, password reset, or resend</li>
<li>Why sent: to deliver time-sensitive OTP codes to the user by SMS</li>
<li>Terms of Service: https://www.twilio.com/legal/tos</li>
<li>Privacy Policy: https://www.twilio.com/en-us/legal/privacy</li>
</ul>
<h4>SendGrid (Email Delivery)</h4>
<ul>
<li>Service: SendGrid Mail Send API</li>
<li>Purpose: Send OTP codes by email</li>
<li>Data sent: recipient email address, sender email/name, message subject, OTP message body, API key for authentication</li>
<li>Credential handling: SendGrid API key is stored in WordPress options and used only when sending OTP messages</li>
<li>When sent: when email provider is set to SendGrid and an OTP is generated for login, registration, password reset, or resend</li>
<li>Why sent: to deliver time-sensitive OTP codes to the user by email</li>
<li>Terms of Service: https://sendgrid.com/policies/terms/</li>
<li>Privacy Policy: https://sendgrid.com/policies/privacy/</li>
</ul>
<h3>Configuration</h3>
<ol>
<li>Set OTP length, type, expiry, retry limit, and lockout duration.</li>
<li>Choose delivery method: Email, SMS, or Both.</li>
<li>Configure provider credentials for SendGrid and/or Twilio if needed.</li>
<li>Enable or disable OTP on login, registration, and password reset flows.</li>
</ol>


Rishav AuthNova OTP

OTP verification for WordPress login, registration, and password reset using email and SMS delivery.

debounce

<h3>🚀 Transform Your Email Quality with AI-Powered Validation</h3>
<p>Tired of fake emails, spam traps, and disposable addresses cluttering your database? DeBounce Email Validator is the ultimate solution for WordPress websites that demand real, deliverable email addresses.</p>
<h3>Why Choose DeBounce?</h3>
<ul>
<li><strong>99.9% Accuracy Rate</strong> – Industry-leading validation precision  </li>
<li><strong>Zero IP Impact</strong> – No emails sent, no blacklisting risk  </li>
<li><strong>GDPR Compliant</strong> – Complete privacy protection  </li>
<li><strong>Real-time Validation</strong> – Instant feedback for users  </li>
<li><strong>Advanced AI Detection</strong> – Catches sophisticated spam attempts</li>
</ul>
<h3>Perfect For</h3>
<ul>
<li>E-commerce stores (WooCommerce)  </li>
<li>Lead generation forms  </li>
<li>User registration systems  </li>
<li>Contact forms  </li>
<li>Newsletter signups  </li>
<li>Any WordPress form  </li>
</ul>
<p>Install, connect your API key, and watch your email quality soar while reducing spam and improving conversion rates.</p>
<h3>Supported Forms and Plugins</h3>
<p><strong>🛒 E-COMMERCE & BUSINESS FORMS</strong></p>
<ul>
<li>WooCommerce – Validate shipping and billing emails  </li>
<li>Gravity Forms – Enterprise-grade form validation  </li>
<li>Contact Form 7 – Most popular contact form plugin  </li>
<li>WPForms – Drag & drop form builder  </li>
</ul>
<p><strong>🏗️ ADVANCED FORM BUILDERS</strong></p>
<ul>
<li>Ninja Forms – Professional form creation  </li>
<li>Formidable Forms – Complex form solutions  </li>
<li>Forminator – Modern form builder  </li>
<li>Fluent Forms – Advanced form management  </li>
<li>Elementor Forms – Page builder integration  </li>
<li>WSForms – Premium form builder  </li>
</ul>
<p><strong>⚙️ WORDPRESS CORE FEATURES</strong></p>
<ul>
<li>WordPress Comments – Validate commenter emails  </li>
<li>User Registration – Ensure valid signup emails  </li>
<li>Jetpack Forms – Automattic’s form solution  </li>
</ul>
<p><strong>🔧 CUSTOM INTEGRATION</strong></p>
<ul>
<li>Any Custom Form – Works with <code>is_email()</code> function  </li>
<li>Third-party Plugins – Automatic compatibility  </li>
<li>API Integration – Direct API access available</li>
</ul>
<h3>Key Features</h3>
<p><strong>🔍 CORE VALIDATION CHECKS</strong></p>
<ul>
<li>DNS & MX Record Validation – Verify domain authenticity  </li>
<li>Syntax Verification – IETF/RFC standard compliance  </li>
<li>Mailbox Existence – Confirm email actually exists  </li>
<li>SMTP Connection Testing – Real server verification  </li>
</ul>
<p><strong>🛡️ SECURITY & SPAM PROTECTION</strong></p>
<ul>
<li>Disposable Email Detection – Block temporary email services  </li>
<li>Spam Trap Identification – Prevent honeypot emails  </li>
<li>Typosquatting Prevention – Catch misspelled domains  </li>
<li>Role-based Email Filtering – Block info@, admin@, etc.  </li>
<li>Custom Blocklist – Your own domain/email restrictions  </li>
</ul>
<p><strong>⚡ PERFORMANCE & RELIABILITY</strong></p>
<ul>
<li>Real-time Validation – Instant user feedback  </li>
<li>Temporary Unavailability Detection – Handle server issues  </li>
<li>Catch-All Domain Testing – Identify low-quality domains  </li>
<li>Greylisting Detection – Advanced spam protection  </li>
<li>99.9% Accuracy Rate – Industry-leading precision  </li>
</ul>
<p><strong>🔒 PRIVACY & COMPLIANCE</strong></p>
<ul>
<li>GDPR Compliant – No email storage  </li>
<li>Zero IP Impact – No emails sent from your servers  </li>
<li>Secure API Communication – Encrypted data transfer  </li>
<li>Privacy-First Design – Your data stays private  </li>
</ul>
<p><strong>📊 ANALYTICS & MONITORING</strong></p>
<ul>
<li>Validation Logs – Track all validation attempts  </li>
<li>Performance Metrics – Monitor validation success rates  </li>
<li>Custom Error Messages – Branded user feedback  </li>
<li>Multi-language Support – Global accessibility  </li>
</ul>
<p><strong>Start with 100 Free Validations</strong> – <a href="https://debounce.com/pricing/" rel="nofollow ugc">Get your API key now</a></p>


DeBounce Email Validator


This plugin is very useful and I have used it on my site. Recently, it has been developed very well and good facilities have been added to it. thank you very much


Greate Plugin

Real-time email validation for WordPress forms. Block invalid, disposable, and risky emails to keep your database clean and improve deliverability.

Rishav AuthNova OTP vs DeBounce Email Validator