Title: Aslansheed Login Author: aslansheed Published: October 16, 2026 Last modified: October 16, 2026 --- Search plugins ![](https://ps.w.org/aslansheed-login/assets/icon-256x256.png?rev=3751158) # Aslansheed Login By [aslansheed](https://profiles.wordpress.org/aslansheed/) [Download](https://downloads.wordpress.org/plugin/aslansheed-login.1.0.0.zip) * [Details](https://wordpress.org/plugins/aslansheed-login/#description) * [Reviews](https://wordpress.org/plugins/aslansheed-login/#reviews) * [Installation](https://wordpress.org/plugins/aslansheed-login/#installation) * [Development](https://wordpress.org/plugins/aslansheed-login/#developers) [Support](https://wordpress.org/support/plugin/aslansheed-login/) ## Description Aslansheed Login lets visitors sign in or register with a phone number or email and a one-time code. Everything is free: there are no locked features and no license checks. **Sign-in and registration** * One smart form: the visitor types a phone number, email or username. The form offers a code or a password, and new users finish registration after verifying their code. * Configurable registration fields: first and last name, username, email, password with confirmation and strength meter, national ID, postal code and birth date. Each is hidden, optional or required. Birth date can use the Gregorian or the Jalali (Persian) calendar, or let the user switch. National IDs are checked with the Iranian checksum, kept unique and stored encrypted. * Optional email verification at registration: a code is sent to the address a new user gives, and the account is created only after it is entered. * Multi-country sites: an optional country list next to phone numbers, limited to the countries you allow. * Optional Google sign-in (Google Identity Services, no client secret needed). * Elementor widget with every text and style editable, and custom registration fields (text, number, date, dropdown, checkboxes and more). * Shortcode `[aslansheed_login]` and a block for the form, and `[aslansheed_account_phone]` so users can link or change their phone. * Optional replacement of the WordPress login page. It is off by default and needs a secret emergency address that always shows the classic form, so you can never lock yourself out. **Delivery channels with automatic fallback** * Email, SMS, WhatsApp Cloud API, Telegram Gateway and your own Telegram bot (send a code, or an Approve button). * SMS providers: Twilio, Vonage, Plivo, Telnyx, Sinch, Infobip, Africa’s Talking, Melipayamak, Kavenegar, SMS.ir and a custom HTTP gateway. If one fails, the next one is tried. * A “Send test” button for every channel and provider, and a masked message log. **Security and privacy** * 2FA with Google Authenticator, Microsoft Authenticator, Authy and other apps. Set it to off, optional or required, for everyone, chosen roles or chosen people. Users get recovery codes, and it also protects the classic wp-login.php form. * Codes are random, single use, expire quickly and are stored only as keyed hashes. * Gateway keys and secrets are encrypted at rest (libsodium, derived from your WordPress salts). * Rate limits per recipient and per IP, wrong-attempt limits and lockouts against SMS pumping and brute force. * Optional captcha: Cloudflare Turnstile, hCaptcha or Google reCAPTCHA v2. * Block lists for emails, phone numbers and IP addresses, and a country allow list for phone numbers. * Optional sign-in notification emails for users and for administrator sign-ins. * Audit log with configurable retention. * WordPress personal data export and erase tools, and suggested privacy policy text. **WooCommerce** * Optional sign-in form on My Account. * Optional phone verification at the classic checkout. * Billing phone, name, email, postal code and country sync from the registration form, and postal code kept in step with the billing address. * Billing phone sync and High-Performance Order Storage (HPOS) compatibility. * The block-based checkout is not covered yet. **Tools** * Import phone numbers stored by other login plugins or in any user meta key, with a preview. * Export and import the general settings as JSON. Secrets are never exported. ### About the author Aslansheed designs and supports websites (https://aslansheed.ir). Products such as plugins and Telegram bots are built in our lab at https://sheedcore.aslansheed. ir. This plugin is free and has no paid version. You can support its development at https://sheedcore.aslansheed.ir/Donate ### External services The plugin contacts a third-party service only when a site administrator turns on the matching feature. Nothing is sent to any of these services by default. Each service below is described with what it is used for, what is sent and when, and links to its terms and privacy policy. #### Feedback form (About tab) Not a third-party service. Only when an administrator presses Send, the message they wrote, the reply email they typed and, if ticked, the plugin, WordPress, PHP, WooCommerce and Elementor versions, the site language and the site address are emailed from your own site (wp_mail) to login@aslansheed.ir. Nothing is sent automatically. #### SMS providers Used to deliver one-time codes by text message. You choose one provider in Settings. When a visitor asks for a code, the provider receives the recipient phone number, the message text (which contains the code), the sender name or number you configured and your API credentials. Nothing is sent otherwise. * Twilio: [terms](https://www.twilio.com/en-us/legal/tos), [privacy policy](https://www.twilio.com/en-us/legal/privacy) * Vonage: [terms](https://www.vonage.com/legal/communications-apis/terms-of-use/), [privacy policy](https://www.vonage.com/legal/privacy-policy/) * Plivo: [terms](https://www.plivo.com/legal/tos/), [privacy policy](https://www.plivo.com/legal/privacy/) * Telnyx: [terms](https://telnyx.com/terms-and-conditions-of-service), [privacy policy](https://telnyx.com/privacy-policy) * Sinch: [terms](https://sinch.com/legal/terms-and-conditions/), [privacy policy](https://sinch.com/legal/privacy-notice/) * Infobip: [terms](https://www.infobip.com/policies/service-terms-conditions), [privacy policy](https://www.infobip.com/policies/privacy-notice) * Africa’s Talking: [terms](https://africastalking.com/terms_of_service), [privacy policy](https://africastalking.com/privacy_policy) * Melipayamak (https://www.melipayamak.com): [terms](https://www.melipayamak.com/rules/). The website does not publish a separate privacy policy page. * SMS.ir (https://sms.ir): [terms](https://sms.ir/terms-and-conditions/). The website does not publish a separate privacy policy page. * Kavenegar (https://kavenegar.com): the website does not publish a separate terms of service or privacy policy page. Its [FAQ](https://kavenegar.com/%D8%B3%D9%88%D8%A7%D9%84%D8%A7%D8%AA_%D9%85%D8%AA%D8%AF%D8%A7%D9%88%D9%84.html) describes the service. * Custom gateway: a web address that you enter yourself. The same data is sent to that address, and its terms are those of the service you chose. #### WhatsApp Cloud API (Meta) Used to deliver one-time codes by WhatsApp. When a visitor asks for a code, the recipient phone number and the message text (which contains the code) are sent to graph.facebook.com together with your access token. [Business terms](https://www.whatsapp.com/legal/business-terms), [privacy policy](https://www.facebook.com/privacy/policy/). #### Telegram Gateway and Telegram Bot API Used to deliver one-time codes by Telegram. Telegram Gateway (gatewayapi.telegram. org) receives the phone number and the code when a code is requested. The Telegram Bot API (api.telegram.org) receives the chat ID, the message text and the bot token when a code is requested or when you connect a bot. [Terms](https://telegram.org/tos), [privacy policy](https://telegram.org/privacy). #### Google sign-in (Google Identity Services) Used to let visitors sign in with their Google account. Only when Google sign-in is on, the visitor’s browser loads Google’s script from accounts.google.com, and when the visitor signs in, the server sends the ID token that Google issued to oauth2. googleapis.com to verify it. [Terms](https://policies.google.com/terms), [privacy policy](https://policies.google.com/privacy). #### Captcha providers (optional) Used to block automated sign-in attempts. Only if you enable one, the visitor’s browser loads the provider’s script, and when a form is submitted the server sends the captcha token and the visitor’s IP address to the provider to check it. * Cloudflare Turnstile: [terms](https://www.cloudflare.com/website-terms/), [privacy policy](https://www.cloudflare.com/privacypolicy/) * hCaptcha: [terms](https://www.hcaptcha.com/terms), [privacy policy](https://www.hcaptcha.com/privacy) * Google reCAPTCHA: [terms](https://policies.google.com/terms), [privacy policy](https://policies.google.com/privacy) ### Third-party code The QR code on the 2FA setup screen is drawn in the browser by qrcode-generator 2.0.4 by Kazuhiko Arase (MIT license), bundled as `assets/js/vendor/qrcode.js` inside a small wrapper that exposes it to the plugin. Source: https://github.com/kazuhikoarase/ qrcode-generator ### Privacy The plugin stores phone numbers and email addresses used for sign-in, a security audit log and a message log in which recipients are masked. Codes are never stored in clear text. You can set retention periods, use the WordPress personal data export and erase tools, and enable full data removal on uninstall. The plugin adds suggested text to the privacy policy guide. ## Blocks This plugin provides 1 block. * Aslansheed sign-in form A sign-in and registration form with one-time codes. ## Installation 1. Upload the plugin folder to `/wp-content/plugins/`, or install it from the Plugins screen. 2. Activate the plugin. 3. Open Aslansheed Login in the admin menu. Enable at least one delivery channel on the Channels or SMS providers tab and use “Send test”. 4. Put `[aslansheed_login]` on a page, or turn on the WordPress login page replacement after setting an emergency address. ## FAQ ### Is anything paid or locked? No. The plugin is free and fully functional. SMS, WhatsApp and Telegram messages are billed by the gateway you choose, not by this plugin. ### Will I be locked out if my SMS gateway fails? Set an emergency address on the General tab before replacing the WordPress login page. It always shows the classic username and password form. Channels also fall back to each other, and email is on by default. ### Does it work with the block-based WooCommerce checkout? Not yet. Phone verification at checkout works with the classic checkout. The My Account sign-in form works in both cases. ### Where do I get gateway credentials? From the gateway you choose. Each channel and provider card on the settings screens lists the fields it needs. ### How do I remove all data? Turn on “Delete all data on uninstall” on the General tab, then delete the plugin. ## Reviews There are no reviews for this plugin. ## Contributors & Developers “Aslansheed Login” is open source software. The following people have contributed to this plugin. Contributors * [ aslansheed ](https://profiles.wordpress.org/aslansheed/) [Translate “Aslansheed Login” into your language.](https://translate.wordpress.org/projects/wp-plugins/aslansheed-login) ### Interested in development? [Browse the code](https://plugins.trac.wordpress.org/browser/aslansheed-login/), check out the [SVN repository](https://plugins.svn.wordpress.org/aslansheed-login/), or subscribe to the [development log](https://plugins.trac.wordpress.org/log/aslansheed-login/) by [RSS](https://plugins.trac.wordpress.org/log/aslansheed-login/?limit=100&mode=stop_on_copy&format=rss). ## Changelog #### 1.0.0 * Initial release. ## Meta * Version **1.0.0** * Last updated **23 hours ago** * Active installations **Fewer than 10** * WordPress version ** 6.0 or higher ** * Tested up to **7.1.3** * PHP version ** 7.4 or higher ** * Tags * [2FA](https://wordpress.org/plugins/tags/2fa/)[login](https://wordpress.org/plugins/tags/login/) [otp](https://wordpress.org/plugins/tags/otp/)[sms](https://wordpress.org/plugins/tags/sms/) [woocommerce](https://wordpress.org/plugins/tags/woocommerce/) * [Advanced View](https://wordpress.org/plugins/aslansheed-login/advanced/) ## Ratings No reviews have been submitted yet. [Your review](https://wordpress.org/support/plugin/aslansheed-login/reviews/#new-post) [See all reviews](https://wordpress.org/support/plugin/aslansheed-login/reviews/) ## Contributors * [ aslansheed ](https://profiles.wordpress.org/aslansheed/) ## Support Got something to say? Need help? [View support forum](https://wordpress.org/support/plugin/aslansheed-login/) ## Donate Would you like to support the advancement of this plugin? [ Donate to this plugin ](https://sheedcore.aslansheed.ir/Donate)