ShivWeb Login Verification Wordpress Plugin - Rating, Reviews, Demo & Download
Plugin Description
ShivWeb Login Verification adds a second step after a normal password login: the session is held until the user enters a code emailed to them. It is enforced server side across the front end, wp-admin, REST and AJAX, and it never touches wp-login.php or the WooCommerce login forms, so it works the same on wp-login.php, WooCommerce My Account, and both the classic and the block checkout.
This is “password plus email verification”, a two-step login. Email codes prove ownership of the mailbox; they are not an independent second factor in the strict sense, and the plugin never claims to be bank-grade 2FA.
Highlights
- Email OTP after login. The password is still required.
- Per-role enforcement, defaulting to the Customer role only.
- Enforcement is off until you enable it, and enabling requires a delivered and entered test code, so a broken mailer can never lock everyone out.
- Trusted devices: remember a browser for a number of days you choose.
- WooCommerce block checkout aware: the Store API is blocked for unverified sessions and the shopper is guided to the code screen.
- Optional email verification at registration, with daily cleanup of abandoned unverified accounts.
- Rate limiting on every layer: resend cooldown, per-session limits, lockout, and a per-account hourly send cap.
- No external services, no account, no tracking, no logs. Email goes through wp_mail(), so your SMTP plugin handles delivery.
Recovery
If you ever lock yourself out, add define( 'SWLV_DISABLE_OTP', true ); to wp-config.php, or run wp swlv disable with WP-CLI. Both release every held session immediately. To unstick a single user (send limit reached, mailbox typo), run wp swlv reset-user <id|login|email>.
Screenshots
No screenshots provided
