ShivWeb Login Verification
by shivweb 1 (0 reviews)

ShivWeb Login Verification

Two-factor authentication by email code. Users log in with their password, then enter a login code from their inbox. WooCommerce ready.

ShivWeb Login Verification ranks #64,228 among WordPress.org plugins with 1+ active installations, is #7,243 of 14,124 in the E-commerce category, a 1/5 rating from 0 reviews, and was last updated Aug 24, 2026. Data from WordPress.org, refreshed twice daily — see methodology.

Compatible with WP 7.1
v1.0.0 Current Version v1.0.0
Updated 2 months ago Last Update on 24 Aug, 2026
Refreshed 1 week ago Last Refreshed on
#7,243 of 14,124 in E-commerce
View on WordPress.org
Rank
#64,228
— No change
Active Installs
1+
— No change
KW Avg Position
N/A
— No change
Downloads
208
+1 today
Support Resolved
0%
— No change
Rating
20%
Review 1 out of 5
1 (0 reviews)

Next Milestone 10

Total Progress 20%
0+ 10+
51,291
Ranks to Climb
-
Growth Needed
8,000,000
Active Installs
Pro

Unlock Exact Install Count

See the precise estimated active installs for this plugin, calculated from real-time ranking data.

  • Exact install estimates within tiers
  • Track install growth over time
  • Milestone progress predictions
Upgrade to Pro
Need 8 more installs to reach 10+

Rank Changes

61,017 62,622 64,228 65,834 67,439 31-10-2026 01-11-2026 02-11-2026 03-11-2026 04-11-2026 05-11-2026 06-11-2026 07-11-2026
50,571 56,426 62,281 68,136 73,991 23-10-2026 24-10-2026 25-10-2026 26-10-2026 27-10-2026 28-10-2026 29-10-2026 30-10-2026 31-10-2026 01-11-2026 02-11-2026 03-11-2026 04-11-2026 05-11-2026 06-11-2026 07-11-2026
Current #64,228
Change
Best #

Upgrade to Pro

Unlock 30-day and 90-day rank history charts with a Pro subscription.

Upgrade Now

Active Installs Growth

Active Installs 0,000,000+
Growth +0.0%
Peak 0,000,000

Downloads Growth

0 10 31-10-2026 01-11-2026 02-11-2026 03-11-2026 04-11-2026 05-11-2026 06-11-2026 07-11-2026
0 10 23-10-2026 24-10-2026 25-10-2026 26-10-2026 27-10-2026 28-10-2026 29-10-2026 30-10-2026 31-10-2026 01-11-2026 02-11-2026 03-11-2026 04-11-2026 05-11-2026 06-11-2026 07-11-2026
Downloads
Growth
Peak

Upgrade to Pro

Unlock 30-day, 90-day, and yearly download history charts with a Pro subscription.

Upgrade Now

Reviews & Ratings

1.0
0 reviews
Overall 20%
5
0 (0%)
4
0 (0%)
3
0 (0%)
2
0 (0%)
1
0 (0%)

Frequently Asked Questions

Common questions about ShivWeb Login Verification

Yes, the email variant: the password is something the user knows, and the code proves control of their mailbox. It is the same email method WordPress's own Two-Factor plugin offers. An authenticator app is stronger in the strict sense, but an email code still stops anyone who only has the password, which is how most accounts are broken into.
Yes. The block checkout logs customers in over the Store API, which the plugin refuses for unverified sessions, and a small script guides the shopper to the verification screen.
No. All email goes through wp_mail(). Use any SMTP plugin you like for reliable delivery.
Affected users cannot verify, but you can always recover with the wp-config.php constant or WP-CLI, both documented above. Administrators are not gated by default.
Check the spam folder first. The screen lets you request a new code after a short cooldown. If nothing arrives at all, the site's email delivery is the usual cause: the site owner can go to Settings, then Email Verification, and send themselves a test code. If that fails too, install an SMTP plugin and test again. A single stuck user can always be released with wp swlv reset-user. I enabled it, but nobody is asked for a code Three things are expected behavior here. Sessions that were already logged in before you enabled enforcement are never challenged, only new logins are. A browser remembered through "Trust this device" skips the code until the trust expires. And only the roles you ticked are gated, so check the role of the account you are testing with, and note that administrators are not gated by default.
Codes are never stored, not even hashed alone: only keyed hashes live inside the WordPress session record, and they disappear when the session ends. Beyond that the plugin keeps one settings option, per-user send counters and trusted-device hashes in user meta, short-lived self-expiring transients for registration challenges and rate limits, and one cookie for "Trust this device". There are no external services and nothing leaves your site. Uninstalling removes all of it. On shared computers, leave "Trust this device" unticked.

Sign In / Register

You need to sign in or register to use this feature.