About this plugin
Naimur Email OTP Verification for WooCommerce confirms that a customer really owns their email address. A one-time code (OTP) is emailed and must be entered before the action completes.
The OTP is used for:
- New customer registration
- Password reset (Forgot Password)
- Checkout (optional, off by default): the order is placed only after the billing email is verified
The plugin does not add OTP to login.
Key features
- 6-digit email OTP for WooCommerce customer registration
- OTP-based Forgot Password flow with a single-use, short-lived reset authorization (no automatic login after a reset)
- Optional checkout email verification for the Checkout block and the classic checkout, for guests and (optionally) logged-in customers. Verification is enforced on the server before the order is created, so no payment is taken from an unverified checkout
- Accessible verification popup at checkout: 6-digit input with paste support, countdown, resend with cooldown, change email, mobile bottom-sheet layout
- Three responsive email templates (registration, password reset, checkout) that use your store logo, name and brand colour
- HTML template editor with syntax highlighting, placeholders, a sandboxed live preview (desktop and mobile) and test emails
- “Naimur OTP” admin area: overview with setup checklist, one Verification page with Registration, Password Reset and Checkout tabs, email templates, security limits, branding, activity and diagnostics, searchable help and a settings finder
- Server-side protection: hashed codes, attempt limits, expiry, single use, per-IP and per-email rate limits, purpose and session binding
- Compatible with WooCommerce High-Performance Order Storage (HPOS) and the Cart and Checkout blocks
- Translation-ready, with developer filters such as ceovw_otp_expiry, ceovw_checkout_auth_ttl, ceovw_rate_limit and ceovw_client_ip
How it works
- Registration: the customer fills in the registration form and receives a 6-digit code by email. The account is created only after the correct code is entered.
- Password reset: the customer requests a code, verifies it and sets a new password, then signs in with it.
- Checkout (when enabled): after clicking Place order, a popup asks for the code sent to the billing email. Once verified, the order is placed automatically. Changing the email requires a new code.
Documentation
Built-in documentation is available under Naimur OTP → Help & Documentation. com/naimur-otp-plugin/
Video tutorial:
Source code
js is a compiled/optimized build used in production.
A human-readable source version of this script is bundled with the plugin under:
- assets/src/js/main.js
js and the stylesheets) are shipped unminified.