User Registration & Login – Magic Links & Email OTP Verification, Passkeys & 2FA, Cloudflare Turnstile, Google reCAPTCHA & Honeypot – HMDIA
User Registration & Login – Magic Links & Email OTP Verification, Passkeys & 2FA, Cloudflare Turnstile, Google reCAPTCHA & Honeypot – HMDIA
Description
HMDIA Login & Registration helps you create a sign-in and account experience that fits your site. Design login, registration, password reset and account pages; customize forms and emails; and verify new users with an email code or magic link. Built-in spam protection, optional CAPTCHA, redirects and page access controls give you more control while using WordPress user accounts.
The free plugin works on its own. Optional Pro adds advanced login and registration fields, two-factor authentication, passkeys and session tools. Separate add-ons extend traffic security, content submission and support.
Free features
- Custom login, registration, password reset and account pages.
- Centralized form design templates with form selection and live previews.
- Customizable email templates, branding, previews and test emails.
- Registration email verification using one-time codes or magic links.
- Administrator approval for new registrations.
- Configurable password requirements.
- Terms & Conditions acceptance on registration forms.
- Redirect the default WordPress login page.
- Custom redirects after login, registration and logout.
- Restrict selected pages by login status and user role.
- Hide the WordPress admin bar and restrict dashboard access by role.
- Frontend profile editing and password management.
- Built-in honeypot protection, Google reCAPTCHA v3 and Cloudflare Turnstile.
- Contact forms with configurable fields, saved submissions and email notifications.
- Contact phone fields with country flags, dialing codes and a configurable default country.
Pro features
- Passwordless passkey login, passkey two-factor verification and recovery codes.
- Two-factor authentication using an authenticator app, email, or SMS.
- Google Sign-In for login and registration.
- Temporary Login Access.
- Advanced session management for Admin & Users.
- Force User Logout
- Role-based redirects.
- Advanced login and registration fields.
- Additional account and registration options.
Optional add-ons
- HMDIA Traffic & IP Security: visitor analytics, sign-in activity and IP rules.
- HMDIA Post Submission: frontend content-submission forms.
- HMDIA WooCommerce Verification: checkout verification using email codes, SMS codes, or both.
These are separate plugins. The free plugin works without them. Explore Pro and add-ons.
External services
- Google reCAPTCHA v3: Optional spam checks send visitor IP and browser data to Google; verification also sends the challenge token and secret key. Service · Terms · Privacy
- Cloudflare Turnstile: Optional spam checks send visitor IP and browser data to Cloudflare; verification also sends the challenge token and secret key. Service · Terms · Privacy
- Twilio SMS (optional Pro add-on): When enabled, SMS delivery sends phone numbers, security-code messages and credentials to Twilio. Connection tests send credentials; SMS may incur charges. Service · Terms · Privacy
CAPTCHA may also run for suspicious sign-ins when the optional Traffic & IP Security add-on is configured.
Installation
- Install and activate HMDIA Login & Registration in WordPress.
- Use the optional Setup Wizard or configure pages and forms in the plugin settings.
- If purchased, install and activate the separate Pro add-on after Core.
Documentation.
Watch the Setup Wizard tutorial on YouTube.
Screenshots
Faq
It provides customizable frontend login, registration, password reset and account pages while continuing to use WordPress user accounts and authentication. You can optionally redirect the default WordPress login page to your custom login page.
Yes. You can customize form fields, labels, buttons, colors, spacing and authentication email content to match your website.
No. The free plugin works independently and includes custom forms, registration verification, email customization, spam protection and contact forms. Pro adds features such as passkeys, two-factor authentication, Google Sign-In and advanced session management.
Yes. Existing WordPress users can sign in using their current account credentials. Their accounts remain stored and managed in WordPress.
No. The built-in honeypot works without API keys. Google reCAPTCHA v3 and Cloudflare Turnstile are optional and require their respective site and secret keys when enabled.
Email delivery depends on your website’s mail configuration. Check the spam or junk folder, run an email delivery test in the plugin settings, and review your WordPress mail or SMTP configuration.
Yes. The separate HMDIA WooCommerce Verification add-on supports email codes, SMS codes, or both at checkout. It requires WooCommerce, a compatible Core version and an active HMDIA Pro entitlement. Customers must complete each enabled verification method before checkout can proceed.
Uninstall cleanup is opt-in. Regular WordPress users are preserved. Separately enabling page cleanup can move verified plugin-created pages to Trash; deactivation does not delete them.
Reviews
Fácil de Configurar, Design Moderno e Excelente Suporte!
By 
Fiquei realmente impressionado com a facilidade de configuração deste plugin. Os formulários de login e cadastro têm um design moderno e profissional, com ótimas opções de personalização. Tudo é intuitivo e funciona muito bem. Além disso, a equipe de suporte é rápida, atenciosa e sempre disposta a ajudar. Excelente experiência até agora! Recomendo!
Works Great!
By 
Nice plugin with lots of useful features. Setting it up was pretty straightforward, and I really like how much control it gives over the login and registration pages. The interface is clean and easy to navigate. Would recommend it!
Really Happy With This Plugin!
By 
I've tried a few registration plugins before, but this one is much easier to work with. I like how I can customize the login and registration forms without much effort. Everything has been working well so far, and I'm glad I gave it a try!
Great Plugin with Excellent Support!
By 
Easy to use and set up. The plugin offers great features for user registration and login, with plenty of customization options. The support team is friendly, responsive, and very helpful. Highly recommended!
It would be great to see more ready-made form templates in future updates.
Clean Login Experience
By 
I really like how simple and clean the login and registration pages look. The email design is also really nice and feels much more professional than the usual WordPress emails. Easy to set up and everything looks great right out of the box.
Great All-in-One Plugin
By 
Really happy with this plugin. It has magic links, email OTP, passkeys, 2FA, and sign-in session timeout all in one place. The design is simple and modern, it’s easy to set up, and it saves me from using multiple plugins. Definitely recommended.
Exactly what I was looking for
By 
I was looking for something like this and it’s been a great experience so far. It’s easy to use, the design looks really impressive, and the passkey feature is definitely my favorite part. Everything feels very modern. I also really like the email design; it makes the whole experience feel more complete.
Changelog
2.1.4
- Add Passkey as an optional default sign-in method (Pro).
- Add country flags, dialing codes and a Default country setting to contact form phone fields.
- Simplify form design navigation and labels.
2.1.3
- Improve form styling compatibility with themes and other plugins.
- Improve registration approval and rejection handling.
- Improve contact-form success and error messages.
2.1.2
- Improve password-manager recognition with explicit sign-in form metadata and associated login field labels while preserving existing passkey autofill hints.
- Mark offscreen anti-spam inputs as hidden to prevent incorrect password-manager form classification.
- Fix first-attempt CAPTCHA connection tests in settings and the setup wizard when the provider API loads slowly.
2.1.1
- Show active 2FA method counts and a searchable user sidebar when supported by Pro.
- Confirm disabling site-wide 2FA when users have active methods; preserve their saved methods.
- Protect users from losing their only usable individual 2FA method and retain locked values during saves.
2.1.0
- Add support for Google Sign-In on login and registration forms (Pro).
- Add support for passwordless passkey login (Pro).
- Improve sign-in buttons and settings layout.
2.0.90
- Fixed an issue that prevented the Save button from appearing after editing Design Templates.
2.0.89
- Initial WordPress.org release.
- Explain when a security plugin blocks the new session after a password change; discard the rejected session token.