About this plugin
CekEmail Email Validation checks every email address submitted to your site against the CekEmail API before WordPress stores it. Each address is checked for a valid format, a reachable mail server, a real mailbox, and whether it belongs to a disposable provider.
You decide what happens for every outcome:
- Invalid addresses are always blocked.
- Disposable addresses are blocked, or allowed, as you prefer.
- Catch-all domains, unverifiable mailboxes and API errors each get their own allow or block policy, so a hiccup at the API never has to lock visitors out.
Supported forms:
- WordPress user registration.
- WordPress comments.
- WooCommerce checkout, both the classic shortcode checkout and the block checkout.
- WooCommerce account registration.
- Contact Form 7 email fields, required and optional.
Features:
- An optional front-end widget, bundled with the plugin and never loaded from a CDN, that checks every email field on the page when visitors leave the email field and shows the result before the form is submitted. It uses a public widget key, never your API key. The bundled widget is open source: https://github.com/cekemail/widget
- Typo suggestions (“did you mean …”) in the error message.
- Result caching, so the same address is not billed twice within the cache lifetime.
- A “Test connection” button that validates your API key without spending credits.
- A log of the 50 most recent checks, with addresses masked.
- Admin notices when your key is rejected or your credits run out.
- Filters and actions so developers can extend or override every decision.
External services
com (or the self-hosted URL you configure on the settings screen). The service is needed to tell whether an address is valid, deliverable or disposable.
- Form submissions: when an API key is configured, the plugin sends the email address entered in each covered form (WordPress registration, WordPress comments, WooCommerce checkout and account registration, Contact Form 7 email fields), together with your API key, from your server to the CekEmail API at https://api.cekemail.com. Nothing is sent while no API key is configured.
- Front-end widget: when the optional front-end widget is switched on, the bundled widget script sends the address a visitor enters, when they leave the email field, from the visitor’s browser to the same CekEmail API at https://api.cekemail.com, using your public widget key.
No other personal data leaves your site. Addresses are stored locally only in masked form, in the recent checks log, and results are cached under a hash of the address. The service is provided under the CekEmail terms of service and privacy policy.
Read both before enabling the plugin, and mention the service in your own privacy policy.