VWEB Admin Email Login Verify

Description

VWEB Admin Email Login Verify is a VWEB India plugin that adds an extra login step only for administrator (and other selected) roles.

After the username and password are accepted, WordPress emails a 6-digit code to that user’s account email. The dashboard opens only after the correct code is entered. Subscribers, customers, and other roles you do not select log in as usual.

This is not a generic two-factor suite. It is a focused admin-only email code for wp-login.php, built by VWEB India.

What it does

• Checks the password first, then starts email verification for selected roles
• Sends a 6-digit code to the user’s WordPress profile email
• Lets regular users sign in with no extra step
• Expires unused codes (default 10 minutes)
• Limits failed code attempts (default 5)
• Allows resending a code after a short cooldown
• Skips REST API, XML-RPC, WP-CLI, cron, and AJAX authentication

Settings

Go to Settings → VWEB Login Verify to:

• Enable or disable verification
• Choose which roles need a code (Administrator is selected by default)
• Set how long a code stays valid
• Set how many wrong codes are allowed

Email delivery

The plugin uses WordPress wp_mail(). If codes do not arrive, configure SMTP on the site and check the spam folder.

Emergency disable

If you cannot receive mail and are locked out of admin, add this line to wp-config.php, log in, fix email, then remove the line:

define( 'AELV_DISABLE', true );

Technical details