Email OTP

2 min read

This page lets you set up email verification. When turned on, users will get a one-time code in their email every time they log in.

Enable Email Verification

There is a toggle switch.

Enable for Roles

This setting allows you to choose which user groups are required to use email 2FA.
You may choose to disable this for regular subscribers to avoid friction during simple logins, unless your site deals with sensitive user data.

NB: “Save Changes” or “Discard Changes” button will apply the settings

Next Steps for Users

Once you have enabled this feature on this page:

Go to WordPress Dashboard → Users → Profile
Scroll down and find the Ultimate Security section
Select Email as the 2FA method
Click the Send OTP button to receive a verification code in your email
Enter the code in the box
Click Save Settings, then click Update Profile

Please keep the following in mind:
To be able to receive emails, the site owner must set up an email SMTP service on the given WordPress site. Read more about SMTP

Email delivery is not always instant. Network issues or server load can cause delays, making the verification code expire before the user finds it.
If a hacker has already compromised a user’s email password, they can access the 2FA code, rendering this layer of security ineffective.
Occasionally, verification codes can be flagged as spam and end up in the user’s junk folder.