Title: softenggmanoj Email OTP Login for User Manager Author: softenggmanoj Published: September 10, 2026 Last modified: September 10, 2026 --- Search plugins ![](https://s.w.org/plugins/geopattern-icon/softenggmanoj-email-otp-user-manager. svg) # softenggmanoj Email OTP Login for User Manager By [softenggmanoj](https://profiles.wordpress.org/softenggmanoj/) [Download](https://downloads.wordpress.org/plugin/softenggmanoj-email-otp-user-manager.1.0.0.zip) * [Details](https://wordpress.org/plugins/softenggmanoj-email-otp-user-manager/#description) * [Reviews](https://wordpress.org/plugins/softenggmanoj-email-otp-user-manager/#reviews) * [Installation](https://wordpress.org/plugins/softenggmanoj-email-otp-user-manager/#installation) * [Development](https://wordpress.org/plugins/softenggmanoj-email-otp-user-manager/#developers) [Support](https://wordpress.org/support/plugin/softenggmanoj-email-otp-user-manager/) ## Description Email OTP Login for User Manager adds an additional email verification step to the frontend login form provided by WP User Manager. After a user enters valid username and password credentials, the plugin generates a one-time verification code and sends it to the user’s registered email address. The user must enter the verification code before the WordPress login is completed. The plugin is designed for websites using WP User Manager where additional verification is required for frontend user logins. ### Features * Email-based one-time password (OTP) verification. * Works with the WP User Manager frontend login form. * Six-digit OTP codes. * OTP codes are stored securely as hashes. * Configurable OTP expiration period. * Limits the number of incorrect OTP attempts. * Invalidates the OTP after the maximum number of failed attempts. * Prevents the WordPress login from being completed until OTP verification succeeds. * Uses WordPress nonces for OTP form security. * Supports WordPress email delivery through wp_mail(). * Administrators and other users logging in through the WP User Manager frontend login can use the OTP verification flow. * Does not modify the standard WordPress wp-login.php authentication flow. ### Requirements * WordPress 6.0 or later. * PHP 7.4 or later. * WP User Manager. The website must have working WordPress email delivery configured. For reliable email delivery, an SMTP plugin or another transactional email service may be used. ### Usage After installation, add the following shortcode to the page that will be used for OTP verification: [softemot_email_otp_login] When a user successfully submits their username and password through the WP User Manager frontend login form: 1. The credentials are validated. 2. A one-time verification code is generated. 3. The verification code is sent to the user’s registered email address. 4. The user is redirected to the OTP verification page. 5. The user enters the verification code. 6. The WordPress login is completed only after successful OTP verification. ### Security OTP codes are not stored in plain text. The plugin stores a hash of the generated OTP. OTP verification attempts are limited. When the maximum number of incorrect attempts is reached, the current OTP is invalidated and the user must start the login process again. The OTP verification form uses a WordPress nonce to help protect the verification request. ### Email Delivery This plugin uses WordPress’s `wp_mail()` function to send verification codes. The plugin does not provide an SMTP mail server. If your website does not reliably send WordPress emails, configure an SMTP plugin or transactional email service separately. ## Installation 1. Install and activate WP User Manager. 2. Upload the Email OTP Login for User Manager plugin to the `/wp-content/plugins/` directory. 3. Activate the plugin from the WordPress Plugins screen. 4. Create a WordPress page with a slug “verify-login-otp” for OTP verification. 5. Add the `[softemot_email_otp_login]` shortcode to the OTP verification page. 6. Update the OTP page URL in the plugin configuration if required. 7. Make sure WordPress can successfully send emails. 8. Test the WP User Manager frontend login form. ## FAQ ### Does this plugin replace WP User Manager? No. WP User Manager is required for the frontend login functionality. This plugin adds email OTP verification to that login process. ### Does it work with the standard WordPress login page? The plugin is designed for the WP User Manager frontend login form. The standard`/ wp-login.php` login process is not modified. ### Can administrators use OTP verification? Yes. If an administrator logs in through the WP User Manager frontend login form, the same OTP verification process is applied. ### What happens when the OTP expires? The expired OTP can no longer be used. The user must start the login process again to receive a new verification code. ### What happens after too many incorrect attempts? The current OTP is invalidated and the user must log in again to generate a new verification code. ### Does the plugin send emails directly through an external service? No. The plugin uses WordPress `wp_mail()`. Your website’s configured mail delivery system determines how the email is delivered. ## Reviews There are no reviews for this plugin. ## Contributors & Developers “softenggmanoj Email OTP Login for User Manager” is open source software. The following people have contributed to this plugin. Contributors * [ softenggmanoj ](https://profiles.wordpress.org/softenggmanoj/) [Translate “softenggmanoj Email OTP Login for User Manager” into your language.](https://translate.wordpress.org/projects/wp-plugins/softenggmanoj-email-otp-user-manager) ### Interested in development? [Browse the code](https://plugins.trac.wordpress.org/browser/softenggmanoj-email-otp-user-manager/), check out the [SVN repository](https://plugins.svn.wordpress.org/softenggmanoj-email-otp-user-manager/), or subscribe to the [development log](https://plugins.trac.wordpress.org/log/softenggmanoj-email-otp-user-manager/) by [RSS](https://plugins.trac.wordpress.org/log/softenggmanoj-email-otp-user-manager/?limit=100&mode=stop_on_copy&format=rss). ## Changelog #### 1.0.0 * Initial release. * Added email OTP verification for WP User Manager frontend login. * Added OTP expiration. * Added failed-attempt protection. * Added secure OTP storage. * Added OTP verification form. * Added login protection until OTP verification succeeds. ## Meta * Version **1.0.0** * Last updated **1 day ago** * Active installations **Fewer than 10** * WordPress version ** 6.0 or higher ** * Tested up to **7.1** * PHP version ** 7.4 or higher ** * Tags * [Email OTP](https://wordpress.org/plugins/tags/email-otp/)[login security](https://wordpress.org/plugins/tags/login-security/) [otp login](https://wordpress.org/plugins/tags/otp-login/)[user manager](https://wordpress.org/plugins/tags/user-manager/) * [Advanced View](https://wordpress.org/plugins/softenggmanoj-email-otp-user-manager/advanced/) ## Ratings No reviews have been submitted yet. [Your review](https://wordpress.org/support/plugin/softenggmanoj-email-otp-user-manager/reviews/#new-post) [See all reviews](https://wordpress.org/support/plugin/softenggmanoj-email-otp-user-manager/reviews/) ## Contributors * [ softenggmanoj ](https://profiles.wordpress.org/softenggmanoj/) ## Support Got something to say? Need help? [View support forum](https://wordpress.org/support/plugin/softenggmanoj-email-otp-user-manager/)