User Registration & Login – Magic Links & Email OTP Verification, Passkeys & 2FA, Cloudflare Turnstile, Google reCAPTCHA & Honeypot – HMDIA
| 开发者 | hmdiateam |
|---|---|
| 更新时间 | 2026年11月1日 08:28 |
| PHP版本: | 7.4 及以上 |
| WordPress版本: | 7.1 |
| 版权: | GPLv2 or later |
| 版权网址: | 版权信息 |
详情介绍:
- Custom login, registration, password reset and account pages.
- Centralized form design templates with form selection and live previews.
- Customizable email templates, branding, previews and test emails.
- Registration email verification using one-time codes or magic links.
- Email OTP two-factor authentication with recovery codes, required roles and an enrollment grace period.
- Administrator approval for new registrations.
- Configurable password requirements.
- Terms & Conditions acceptance on registration forms.
- Redirect the default WordPress login page.
- Custom redirects after login, registration and logout.
- Restrict selected pages by login status and user role.
- Hide the WordPress admin bar and restrict dashboard access by role.
- Frontend profile editing and password management.
- Built-in honeypot protection, Google reCAPTCHA v3 and Cloudflare Turnstile.
- Contact forms with configurable fields, saved submissions and email notifications.
- Contact phone fields with country flags, dialing codes and a configurable default country.
- Passwordless passkey login and passkey two-factor verification.
- Passwordless login using Email OTP, magic links or SMS OTP.
- Additional two-factor methods using an authenticator app or SMS OTP.
- Google Sign-In for login and registration.
- Temporary Login Access.
- Advanced session management for administrators and users.
- Force user logout.
- Role-based redirects.
- Advanced login and registration fields.
- Additional account and registration options.
- Outgoing webhooks with event selection, field mapping, delivery tests and history.
- HMDIA Traffic & IP Security: visitor analytics, sign-in activity and IP rules.
- HMDIA Post Submission: frontend content-submission forms.
- HMDIA WooCommerce Verification: customize checkout fields and verify customers using Email OTP, SMS OTP, or both.
安装:
- Install and activate HMDIA Login & Registration in WordPress.
- Use the optional Setup Wizard or configure pages and forms in the plugin settings.
- If purchased, install and activate the separate Pro add-on after Core.
常见问题:
What does HMDIA Login & Registration replace?
It provides customizable frontend login, registration, password reset and account pages while continuing to use WordPress user accounts and authentication. You can optionally redirect the default WordPress login page to your custom login page.
Can I customize the forms and emails?
Yes. You can customize form fields, labels, buttons, colors, spacing and authentication email content to match your website.
Do I need Pro to use the plugin?
No. The free plugin works independently and includes custom forms, registration verification, Email OTP two-factor authentication, recovery codes, email customization, spam protection and contact forms. Pro adds passkeys, authenticator app and SMS OTP two-factor methods, Google Sign-In and advanced session management.
Can existing WordPress users sign in?
Yes. Existing WordPress users can sign in using their current account credentials. Their accounts remain stored and managed in WordPress.
Do I need CAPTCHA keys?
No. The built-in honeypot works without API keys. Google reCAPTCHA v3 and Cloudflare Turnstile are optional and require their respective site and secret keys when enabled.
Why am I not receiving verification emails?
Email delivery depends on your website’s mail configuration. Check the spam or junk folder, run an email delivery test in the plugin settings, and review your WordPress mail or SMTP configuration.
Can I verify email addresses and phone numbers at WooCommerce checkout?
Yes. The separate HMDIA WooCommerce Verification add-on supports Email OTPs, SMS OTPs, or both at checkout. It requires WooCommerce, a compatible Core version and an active HMDIA Pro entitlement. Customers must complete each enabled verification method before checkout can proceed.
Does uninstall delete my users or data?
Uninstall cleanup is opt-in. Regular WordPress users are preserved. Separately enabling page cleanup can move verified plugin-created pages to Trash; deactivation does not delete them.
Where can I find more answers?
Visit our complete FAQ for more information about features, setup and troubleshooting.
更新日志:
- Improve Google sign-in and registration.
- Add address field visibility controls and a default country option.
- Improve contact form email layout and styling.
- Improve compatibility with caching plugins.
- Improve sign-in activity records and Diagnostics.
- General security and stability improvements.
- Add Multi-select, Radio, Country, Address, Upload and Hidden contact fields.
- Add multiple checkbox options and vertical/horizontal layouts for checkbox and radio fields.
- Improve style isolation from themes and page builders, including Elementor.
- Add outgoing webhooks with field mapping, test deliveries and delivery history (Pro).
- Fix form widths inside centered Elementor containers.
- Improve contact email formatting and text wrapping on mobile.
- Fix phone field borders and remove the default placeholder.
- Add searchable country selectors and fix dropdown clipping and focus styling.
- General improvements and bug fixes.
- Add dedicated Account design templates with styling managed in the Design tab.
- Fix two-column contact form layouts in desktop previews.
- Simplify design settings and improve checkbox and radio styling for custom registration fields.
- Add Passkey as an optional default sign-in method (Pro).
- Add country flags, dialing codes and a Default country setting to contact form phone fields.
- Simplify form design navigation and labels.
- Improve form styling compatibility with themes and other plugins.
- Improve registration approval and rejection handling.
- Improve contact-form success and error messages.
- Improve password-manager recognition with explicit sign-in form metadata and associated login field labels while preserving existing passkey autofill hints.
- Mark offscreen anti-spam inputs as hidden to prevent incorrect password-manager form classification.
- Fix first-attempt CAPTCHA connection tests in settings and the setup wizard when the provider API loads slowly.
- Show active 2FA method counts and a searchable user sidebar when supported by Pro.
- Confirm disabling site-wide 2FA when users have active methods; preserve their saved methods.
- Protect users from losing their only usable individual 2FA method and retain locked values during saves.
- Add support for Google Sign-In on login and registration forms (Pro).
- Add support for passwordless passkey login (Pro).
- Improve sign-in buttons and settings layout.
- Fixed an issue that prevented the Save button from appearing after editing Design Templates.
- Initial WordPress.org release.
- Explain when a security plugin blocks the new session after a password change; discard the rejected session token.