Àpèjúwe
This plugin enhances the default WordPress login security by adding a One-Time Password (OTP) verification step via email:
- Users log in with their regular email/username and password.
- If credentials are valid, an OTP is generated and emailed to the user.
- A popup is shown on the same login page (
wp-login.php) to enter the OTP. - Once the correct OTP is entered, the user is logged in.
To help you get started, there’s a comprehensive video tutorial available that guides you through the process of setting.
Features
- Secure login via OTP sent to user’s email.
- Role-based OTP enforcement.
- Uses native wp-login.php form — no custom forms required.
- Session-based OTP handling for security.
- Expiring OTP (default: 40 seconds).
- No third-party dependencies.
Donate
If you find this plugin useful and want to support its development, you can make a donation via the following link:
Your donation helps to ensure that this plugin remains free and receives regular updates!
Credits
The plugin development was supported by [webnotics], [sumitkamboj53]. Contributions and feedback are always welcome.
Documentation and Support
Documentation
For detailed documentation, visit https://webnotics.org/email-otp-login-with-default-login-form/
For support, please contact us at support@webnotics.solutions.
License
This plugin is licensed under the GPLv2 or later.
Àwọn àwòrán ìbòjú
OTP entry modal on wp-login.php. 
Role-based OTP settings page in WordPress admin. 
Error message when OTP is invalid or expired
Ìgbéwọlẹ̀
- Upload the plugin files to the
/wp-content/plugins/email-otp-login-with-default-login-formdirectory, or install the plugin through the WordPress plugins screen directly. - Activate the plugin through the ‘Plugins’ screen in WordPress.
- Navigate to Settings Email OTP Settings to select which user roles require OTP login verification.
FAQ
-
Does this plugin work with custom login forms?
-
No. This plugin is designed to work only with the default
wp-login.phpform. -
Can I enable OTP only for specific roles?
-
Yes. Go to Settings Email OTP Settings and select the roles you want to enforce OTP for.
-
Is the OTP stored securely?
-
OTP is stored in the PHP session temporarily and cleared after use or expiration.
-
What happens if the OTP expires?
-
The user will be redirected back to the login page and asked to log in again.
Àwọn àgbéyẹ̀wò
Àwọn Olùkópa & Olùgbéejáde
“Email OTP Login with default login form” jẹ́ ètò ìṣàmúlò orísun ṣíṣí sílẹ̀. Àwọn ènìyàn wọ̀nyí ti ṣe ìkópa sí plugin yìí.
Àwọn Olùkópa
Túmọ̀ “Email OTP Login with default login form” sí èdè rẹ.
Ṣe o nífẹ̀ẹ́ sí ìdàgbàsókè?
Ṣàwárí koodu, ṣàyẹ̀wò ibi ìpamọ́ SVN, tàbí ṣe àgbékalẹ̀ sí àkọsílẹ̀ ìdàgbàsókè nípasẹ̀ RSS.
Àkọsílẹ̀ àwọn àyípadà
1.0.0
- Initial release with OTP popup, email sending, and expiration logic
1.0.2
Release Date 17th June 2025
* Update email template design *
1.0.3
Release Date 1st Aug 2025
* Modified existing actions and filters related to the Email Login OTP system for improved flexibility and developer customization. *