User Registration & Login – Magic Links & Email OTP Verification, Passkeys & 2FA, Cloudflare Turnstile, Google reCAPTCHA & Honeypot – HMDIA

HMDIA Registration & Login helps you create a sign-in and account experience that fits your site. Design login, registration, password reset and account pages; customize forms and emails; and verify new users with an Email OTP or magic link. Built-in spam protection, optional CAPTCHA, redirects and page access controls give you more control while using WordPress user accounts.

The free plugin works on its own and includes Email OTP two-factor authentication, recovery codes, required roles and an enrollment grace period. Optional Pro adds advanced login and registration fields, authenticator app and passkey or SMS OTP two-factor methods, primary passkey login and session tools. Separate add-ons extend traffic security, content submission and checkout fields and verification.

Free features

• Custom login, registration, password reset and account pages.
• Centralized form design templates with form selection and live previews.
• Customizable email templates, branding, previews and test emails.
• Registration email verification using one-time codes or magic links.
• Email OTP two-factor authentication with recovery codes, required roles and an enrollment grace period.
• Administrator approval for new registrations.
• Configurable password requirements.
• Terms & Conditions acceptance on registration forms.
• Redirect the default WordPress login page.
• Custom redirects after login, registration and logout.
• Restrict selected pages by login status and user role.
• Hide the WordPress admin bar and restrict dashboard access by role.
• Frontend profile editing and password management.
• Built-in honeypot protection, Google reCAPTCHA v3 and Cloudflare Turnstile.
• Contact forms with configurable fields, saved submissions and email notifications.
• Contact phone fields with country flags, dialing codes and a configurable default country.

Pro features

• Passwordless passkey login and passkey two-factor verification.
• Passwordless login using Email OTP, magic links or SMS OTP.
• Additional two-factor methods using an authenticator app or SMS OTP.
• Google Sign-In for login and registration.
• Temporary Login Access.
• Advanced session management for administrators and users.
• Force user logout.
• Role-based redirects.
• Advanced login and registration fields.
• Additional account and registration options.
• Outgoing webhooks with event selection, field mapping, delivery tests and history.

Add-ons included with Pro

All Pro plans include the following add-ons:

• HMDIA Traffic & IP Security: visitor analytics, sign-in activity and IP rules.
• HMDIA Post Submission: frontend content-submission forms.
• HMDIA WooCommerce Verification: customize checkout fields and verify customers using Email OTP, SMS OTP, or both.

Add-ons are installed as separate plugins. The free plugin works independently without them. Explore Pro and add-ons.

External services

• Google reCAPTCHA v3: Optional spam checks send visitor IP and browser data to Google; verification also sends the challenge token and secret key.
• Cloudflare Turnstile: Optional spam checks send visitor IP and browser data to Cloudflare; verification also sends the challenge token and secret key.
• Twilio SMS (optional Pro add-on): When enabled, SMS delivery sends phone numbers, security-code messages and credentials to Twilio. Connection tests send credentials; SMS may incur charges.
• Google Sign-In (optional Pro add-on): When enabled, sign-in and registration interfaces load Google Identity Services. Google processes the visitor’s sign-in interaction, and the site receives a signed identity token containing Google identity and profile fields. Pro verifies the token locally using public certificates retrieved from Google.

CAPTCHA may also run for suspicious sign-ins when the optional Traffic & IP Security add-on is configured.