by
Delowar Hossen
1 (0 reviews)
Delowar OTP Login and Two-Factor Authentication
Enterprise-grade Passwordless OTP Login, OTP Registration, Multi-Channel Two-Factor Authentication (2FA), and WooCommerce Checkout Phone Verification.
Delowar OTP Login and Two-Factor Authentication ranks #71,513 among WordPress.org plugins with 1+ active installations, a 1/5 rating from 0 reviews, and was last updated Oct 24, 2026. Data from WordPress.org, refreshed twice daily — see methodology.
Compatible with WP 7.1
v1.0.3
Current Version v1.0.3
Updated 2 weeks ago
Last Update on 24 Oct, 2026
Refreshed 1 week ago
Last Refreshed on
Downloads -74.1% this week
Actively maintained
Rank
#71,513
—
No change
Active Installs
1+
—
No change
KW Avg Position
110.5
0.7 worse
Downloads
88
+1 today
Support Resolved
0%
—
No change
Rating
20%
Review 1 out of 5
1
(0 reviews)
Next Milestone 10
0+
10+
58,576
Ranks to Climb
-
Growth Needed
8,000,000
Active Installs
Pro
Unlock Exact Install Count
See the precise estimated active installs for this plugin, calculated from real-time ranking data.
- Exact install estimates within tiers
- Track install growth over time
- Milestone progress predictions
Need 9 more installs to reach 10+
Rank Changes
Current
#71,513
Change
Best
#
Downloads Growth
Downloads
Growth
Peak
Upgrade to Pro
Unlock 30-day, 90-day, and yearly download history charts with a Pro subscription.
Upgrade NowReviews & Ratings
1.0
0 reviews
Overall
20%
5
0
(0%)
4
0
(0%)
3
0
(0%)
2
0
(0%)
1
0
(0%)
Track This Plugin
Get detailed analytics, keyword tracking, and position alerts delivered to your inbox.
Start Tracking FreePlugin Details
- Version
- 1.0.3
- Last Updated
- Oct 24, 2026
- Requires WP
- 5.8+
- Tested Up To
- 7.1
- PHP Version
- 7.4 or higher
- Author
- Delowar Hossen
Support & Rating
- Rating
- ★ ☆ ☆ ☆ ☆ 1
- Reviews
- 0
- Support Threads
- 0
- Resolved
- 0%
Keywords
otp login
passwordless login
phone verification
sms and whatsapp login
two factor authentication or 2fa
Upgrade to Pro
Unlock keyword rankings, search positions, and detailed analytics with a Pro subscription.
Upgrade Now
Frequently Asked Questions
Common questions about Delowar OTP Login and Two-Factor Authentication
Users enter their registered email address or mobile phone number. The plugin generates a secure, one-time passcode and dispatches it via SMS, WhatsApp, or Email. Once the user enters the correct 6-digit code, they are authenticated and logged into WordPress immediately without requiring a password.
No. Security is our highest priority. All passcodes are salted and hashed using SHA-256 before being stored in the database (wp_hash()). Verification is executed in constant-time using hash_equals() to completely eliminate timing attacks.
Users navigate to their account security tab ([delowar_otp_security]) and scan a generated QR code using an authenticator app (such as Google Authenticator, Microsoft Authenticator, or Authy). During login, the user provides the rotating 6-digit code from their app.
Yes. Under OTP & 2FA > 2FA Settings, you can select which specific user roles are required to complete 2FA (e.g., administrator, editor, shop_manager).
Users are provided with 8 emergency single-use backup recovery codes upon setting up 2FA. In the event of a lost device, they can click "Use Emergency Backup Code" on the login challenge screen to regain access.
Navigate to OTP & 2FA > SMS Gateways and choose Custom HTTP / Webhook Gateway. You can enter your gateway provider's API URL, select HTTP GET or POST, configure request headers (such as Authorization: Bearer YOUR_API_KEY), and set the payload using {phone} and {otp} placeholders.
When enabled, an interactive verification card is displayed during checkout. The customer must enter the verification code sent to their billing phone number before the "Place Order" button allows order submission. This guarantees valid customer phone numbers and prevents spam/fake orders.
Yes. Toggle Test Mode under General Settings. When test mode is active, OTP codes are logged in the admin panel under Tools > Test Log without transmitting real SMS or WhatsApp messages.
Yes. The plugin stores only minimal authentication tokens and phone metadata necessary for authentication. Old tokens and expired rate limit records are automatically purged daily via automated WP-Cron routines.
This plugin only connects to external SMS/WhatsApp delivery services when explicitly chosen and configured with API credentials by the site administrator: * Twilio: Dispatches SMS and WhatsApp OTP messages when configured. (Terms: https://www.twilio.com/legal/tos | Privacy: https://www.twilio.com/legal/privacy) * Vonage (Nexmo): Dispatches SMS OTP messages when configured. (Terms: https://www.vonage.com/legal/communications-apis/terms-of-use/ | Privacy: https://www.vonage.com/legal/privacy-policy/) * MSG91: Dispatches SMS OTP messages when configured. (Terms: https://msg91.com/terms-of-use | Privacy: https://msg91.com/privacy-policy) * Meta WhatsApp Cloud API: Dispatches WhatsApp template messages when configured. (Terms: https://www.whatsapp.com/legal/business-terms/ | Privacy: https://www.whatsapp.com/legal/privacy-policy/) * Custom HTTP Gateway: Dispatches OTPs to the URL endpoint designated by the administrator, subject to that provider's terms and privacy policies. * Note on Authenticator App (TOTP) QR Codes: QR codes are generated 100% locally and offline on your own server. No third-party APIs or external servers are ever contacted for QR code generation.