Email OTP Login

Email OTP Login allows users to securely sign in to their WordPress site using a temporary One-Time Password (OTP) sent to their registered email address. Instead of relying on traditional passwords, users simply verify their identity through a short-lived code delivered directly to their inbox.

Why Use Email OTP Login?

Traditional passwords are often reused, weak, or vulnerable to phishing and brute-force attacks. Email OTP Login introduces a passwordless authentication experience by verifying users through a dynamic verification code that expires automatically after a short period. This approach improves both security and user convenience.

Setting Up Email OTP Login on Your WordPress Site

Follow the steps below to configure Email OTP Login:

Navigate to the Passwordless Authentication Settings

• Go to WordPress Dashboard → AIO Login → Passwordless Authentication
• Open the OTP Login sub-tab.

• Locate the Email OTP Login card.
• Toggle Email OTP Login to Enabled.

Configuration Options

Within the expanded Email OTP Login section, configure the following settings:

OTP Length

Select the length of the verification code:

• 4 digits
• 6 digits
• 8 digits

Default: 4 digits

OTP Expiration (Minutes)

Specify how long the verification code remains valid before it expires.

Allowed Range: 1–60 minutes

Resend Timer (Seconds)

Define the cooldown period before users can request another verification code.

Allowed Range: 30–600 seconds

Maximum Retry Attempts

Specify the number of incorrect OTP submissions allowed before a temporary lockout is triggered.

Allowed Range: 1–20 attempts

Block Duration (Minutes)

Define how long the requesting IP address remains blocked after exceeding the maximum retry attempts.

Allowed Range: 1–1440 minutes

Note: The user’s IP has exceeded the maximum allowed OTP verification attempts and is temporarily blocked until the configured lockout period expires or the lock is manually removed from AIO Login → Activity Log → Lockouts.

Skip 2FA for Email Login

Enable this option if users authenticated via Email OTP should bypass any additional Two-Factor Authentication steps.

• Click Save Changes to apply the configuration.

Note: If the OTP email is not received, check the spam or junk folder and ensure WordPress email delivery is properly configured, preferably using Post SMTP, and verify that outgoing emails are functioning correctly.

Frontend Login Experience

When Email OTP Login is enabled, users will see an additional login option on the default WordPress login page.

Step 1: Launch Email OTP Login

• A Login with Email OTP button (.aio-login-otp-launcher) appears below the standard username and password fields.
• Clicking the button opens the Email OTP authentication panel.

Step 2: Enter Email Address

The panel initially displays the Contact Stage .

Users can:

• Enter their email address in the field.
• Complete CAPTCHA verification if Google reCAPTCHA, hCaptcha, or Cloudflare Turnstile is enabled.
• Click Send OTP to request a verification code.

Step 3: Verify OTP

After successfully requesting an OTP, the panel switches to the Verification Stage.

Users can:

• Enter the verification code in the field.
• View the resend countdown timer.
• Click Verify to complete authentication.

The code input automatically matches the configured OTP length (4, 6, or 8 digits).

Back Navigation

Users can select Back to Login at any time to exit the Email OTP panel and return to the standard WordPress login form.

Your are successfully logged in to your site by using the Email OTP login Feature in AIO Login

Need Help?

If you face any issues or have questions, feel free to contact our support team. We’re here to help you get the most out of AIO Login.