LoginBerry

LoginBerry gives your WordPress site real account security with simple, automatic email verification.
Instead of letting fake signups, every new user must confirm their identity by entering a unique 6 digit code sent to their email. Until they complete verification, they are blocked from accessing the site.

This protects your site, your users, and your content with zero configuration.

• Stops fake accounts before they ever log in
• Protects your WordPress site from spam, abuse, and bot registrations
• Secures user identities by confirming they own the email they registered with
• Reduces support requests caused by mistyped or invalid email addresses

LoginBerry sends a clean, simple 6 digit activation code to the user’s email. Users enter the code on a dedicated activation page and are instantly verified.

This plugin requires your site to be able to send emails. Please make sure that email delivery is properly configured, for example, via an SMTP plugin.

How It Works

1. Automatic Redirect: Unactivated users are automatically redirected to /account-activate/ page
2. Email Verification: A 6-digit activation code is generated and sent to the user’s email
3. Code Entry: Users enter the code on the activation page to complete activation
4. Security: After 15 failed attempts, the account is locked to prevent brute-force attacks

Setup

1. Create a WordPress page with the URL /account-activate/
2. Add the shortcode [loginberry_account_activate] to the page
3. Users will be automatically redirected to this page if not activated

Admin Features

In Users → All Users, a new “Account Activated” column shows:
– ✓ Activated (green) – User has verified their email
– ✗ Not Activated (X/15 attempts) – Shows failed activation attempts
– 🔒 Locked (15 failed attempts) – Account locked due to too many failed attempts

Admin Actions:
– Activate Account – Manually activate user account without requiring email verification (green link)
– Send Activation Code – Manually send/resend activation code to unactivated users
– Unlock Account – Unlock locked accounts and reset attempt counter (red link)

We Are Actively Growing This Plugin

LoginBerry is a brand new plugin and we are improving it quickly based on real user feedback. If you have ideas, feature requests, or run into a theme-specific styling issue, we would love to hear from you.

Planned Features (Roadmap)

• Custom number of allowed failed attempts (instead of the fixed 15)
• Custom activation page URL
• Custom redirect URL after successful verification
• Optional verification only for new users (existing accounts auto-verified)
• WooCommerce integration: Skip verification for checkout-created accounts with a paid order
• Social login options
• Passwordless login
• Better styling flexibility and theme compatibility

Because every theme handles form styling differently, some layouts may look slightly different depending on your setup. If you notice anything you would like improved, let us know. Your feedback helps us polish the experience for all WordPress themes.

If you have a request, suggestion, or notice a compatibility detail, please contact us – we build this plugin together with you.

1.0.0

• Initial release

This plugin can be installed under Plugins > Add New Plugin, either by searching for the plugin title or by downloading the plugin zip file and uploading it via the Upload Plugin feature.

Why are users not receiving activation emails?

Your site must be able to send emails for activation codes to work. Make sure email delivery is configured correctly on your hosting or set up SMTP for reliable delivery.

Where is the activation email template located?

The plugin uses a responsive HTML email template stored in:
templates/activation-email.php
It includes a large, easy to read 6 digit code, a direct activation link, and mobile friendly formatting.

Can I edit the activation email template?

Yes. You can override the template in your theme or child theme just like other WordPress templates. The file is clean and easy to customize.

Where is the activation status stored?

LoginBerry stores verification data in user meta fields:
– _berrypress_user_activated (1 = activated)
– _berrypress_activation_code (current 6 digit code)
– _berrypress_activation_attempts (failed attempt counter)
– _berrypress_account_locked (1 = locked)

What happens after 15 failed attempts?

The account is locked automatically for security. Admins can unlock it from the Users list. (Custom attempt limits are planned in the roadmap.)

Can admins activate a user manually?

Yes. In Users -> All Users you will see links to activate accounts, resend codes, or unlock accounts.

Does it work with all themes?

The plugin uses clean WordPress markup and classes like wp-block-group and wp-block-input. Layout may vary slightly depending on theme styles, so if you see any styling quirks, feel free to reach out. We welcome compatibility feedback.

Will more features be added?

Yes. We are actively adding features based on user requests. Let us know what you would like to see next.