Email OTP Authenticator
An Authentication & Security Plugin for WordPress
About The Plugin
Email OTP Authenticator is an OTP-based security module that combines passwordless login, quick user registration, built-in 2FA protection and Dynamic Session Security into one powerful WordPress plugin — designed for a fast, user-friendly and reliable experience.
It is engineered as a complete authentication security system powered by three dedicated protection engines with a fully independent architecture.
Delivering these key benefits:- Reduce login friction
- Increase signup conversions
- Reduce password reset requests
- Strengthen multi-layered website security
Access Engine
Features:- OTP login
- OTP registration
- Guest verification
- Email authorization
Validation Engine
Features:- New Device detection
- Parallel login validation
- Two-factor authentication
- Verification failure handling
Security Engine
Features:- Session validity check
- Session inactivity lock
- Suspicious Activity Guard
- Dynamic 2FA Enforcement
Zero Dependency
Features:- No external APIs required
- Self-hosted OTP validation
- Pure Vanilla JS Framework
- Self - contained operations
Why choose Email OTP Authenticator
Designed to deliver a faster, smarter and more secure environment for websites from beginner to enterprise level.
Hassle-free Integration
Flexible integration options let you add inline & popup forms to pages, posts or menus smartly. Designed for quick deployment so you can enable OTP security without technical effort.
Built-in Templates
Attractive 27 ready-to-use templates with popup and inline support. Easy-to-apply modern designs that match your website style while enhancing both security and user experience.
Complete Admin Control
Customize authentication behavior, layout options, security restrictions & verification rules with ease. Admins have full control over how users access and interact with your website.
Features
Check out the smart and powerful features built for security and ease of use.
Security & Verification
- OTP send limits
- OTP expiry control
- Wrong attempt limits
- Email blocking
- Domain blocking
- Session timeout
- Activity & Event Logs
- Verify users without login
- Verify visitors without signup
- Restrict pages to verified visitors
Interface & Administration
- 27 in-built templates
- Popup and inline forms
- Template customization
- Custom HTML OTP emails
- Security policies
- Access restrictions
- Auto-popup with UI lock
- Enable advanced admin mode
Integration
- Menu trigger support
- Shortcode based integration
- Works smoothly on pages and posts
- Support multiple forms on the same page
- Supports different actions for different forms
- Built-in integration guide for quick and easy setup
Compatibility
- Capable of standalone operations
- Also compatible with :
- WooCommerce
- MemberPress
- Ultimate Member
- BuddyPress
- ProfileGrid
- Forminator
- many user management plugins
Changelog
The plugin is actively maintained with regular updates, security improvements, and new features.
You can review the complete version history and improvements in the changelog.
Gallery
Explore screenshots showcasing key features and functionality.
Testimonials
Read what users say about their experience with the plugin.
Pricing
Explore flexible pricing plans, offered 33% below actual market value.
Yearly OnetimeLite
FREE
- Basic security
- Unlimited Websites
- License not required
- Basic admin controls
- Zero External Dependency
- Best for Personal projects
- 2FA protection
- Dynamic session security
- Multiple login validation
- Session inactivity protection
- Suspicious activity protection
- Validate without login/signup
- Forced global logout
- OTP login
- OTP registration
- OTP send limits
- OTP expiry control
- Wrong attempt limit
- Popup & inline forms
- Supports multiple forms
- Custom OTP emails
- Activity logs
- Priority support
- Email support
- Free updates
- Upgrade available
- Enterprise demo included
Business
$49 / Year
- Enhanced security
- Up to 3 Websites
- License required
- Advanced admin controls
- Zero External Dependency
- Best for Professional websites
- 2FA protection
- Dynamic session security
- Multiple login validation
- Session inactivity protection
- Suspicious activity protection
- Validate without login/signup
- Forced global logout
- OTP login
- OTP registration
- OTP send limits
- OTP expiry control
- Wrong attempt limit
- Popup & inline forms
- Supports multiple forms
- Custom OTP emails
- Activity logs
- Priority support
- Email support
- Free updates
- Upgrade available
- Enterprise demo included
Enterprise
$99 / Year
- Advanced security
- Up to 5 Websites
- License required
- Complete admin controls
- Zero External Dependency
- Best for Commercial platforms
- 2FA protection
- Dynamic session security
- Multiple login validation
- Session inactivity protection
- Suspicious activity protection
- Validate without login/signup
- Forced global logout
- OTP login
- OTP registration
- OTP send limits
- OTP expiry control
- Wrong attempt limit
- Popup & inline forms
- Supports multiple forms
- Custom OTP emails
- Activity logs
- Priority support
- Email support
- Free updates
- Upgrade available
- Enterprise demo included
Frequently Asked Questions
Find answers to common questions about the plugin.
Can I use inline form instead of popup?
Yes, inline forms are supported from version 6.0.0 and above.
Can I add a login popup to my site menu?
Yes, just add the class "emailotpauthn-popup" to your menu item's parent element.
Does it support SMS or WhatsApp OTPs?
Currently, only email OTPs are supported — SMS/WhatsApp features are planned.
Can a guest user verify or register using OTP?
Yes, guests can register and verify their email from version 4.2.1.
Can I log in to the WordPress admin using OTP?
Absolutely. Admins can log in securely using an email OTP.
Can I process verification responses in my code?
Yes, you can handle popup responses using JavaScript, jQuery, or PHP hooks.
Can I use multiple inline forms or popups on one page?
Yes, this is supported from version 6.0.0 onwards.
Can I enable Two-Factor Authentication (2FA) for login or registration?
Yes, 2FA can be enabled for both login and registration to add an extra layer of security.
What happens if the 2FA verification fails?
If verification fails, the user will be redirected to the configured failure redirect URL.
Can I enforce 2FA when a new device is detected?
Yes, the Dynamic Session Lock (DSS) can enforce 2FA when a new device or browser session is detected.
What happens if a session becomes inactive?
The session will be locked after the configured inactivity period, and 2FA verification will be required.
Can the plugin log out all active sessions on suspicious activity?
Yes, DSS can automatically terminate all active sessions if verification fails or suspicious activity is detected.
Does the session lock affect all logged-in devices?
No, session lock applies only to the current session unless global logout is triggered.
Can I customize the 2FA verification page?
Yes, you can specify the page URL where the 2FA shortcode is placed for verification.
Is it possible to disable the session inactivity timeout?
Yes, the inactivity timeout can be disabled or customized from the plugin settings.
Is Dynamic Session Lock enabled by default?
No, DSS is optional and can be enabled or configured from the plugin settings.
Do you offer discounts for bulk license purchases?
Yes. Bulk purchases (10–50 licenses) are eligible for an additional discount ranging from 10% to 50%, depending on the quantity.
How can I request a bulk license discount?
Contact me through the contact form or send an email at Mr.Chandan.Shrivastava@gmail.com for bulk pricing.
Contact
Get in touch for feedback, queries, or assistance.
Address
Sindri, Dhanbad (JH), INDIA





