This Summer season, boost your WHMCS with premium modules and save 15% off.

Use promo code: SUMMER2026

Email Verification Extended for WHMCS Module by WHMPress

Ensure Only Verified Users Access Your WHMCS Client Area

Email Verification Extended stops spam signups and fake orders at the door by making every new client prove they own the email address they registered with. Before an account is created or an order is placed, the client receives a one-time verification code by email and must enter it in a popup that appears directly on your registration or checkout page — no code, no account. The same emailed-code check can be extended to client area logins as a second step, and version 1.7 adds profile change notifications so clients are alerted whenever their own account details are edited.

Everything the module sends is written by you: subject lines and message bodies are editable per language, and each client receives the email in the language their account is set to. Emails can go out through your server's local mail transport or through your own remote SMTP server, configured and test-fired from the admin area.

Key Features

Admin Area Features

• Dedicated addon page with five tabs: Settings, Email Customization, SMTP Configuration, Client Area Theme and Info
• Enable Registration Verification — require an emailed code before an account or order can be created
• Enable Login Verification — require an emailed code as a second step when a client signs in to the client area
• Code Expiry — set, in minutes, how long a verification code stays valid
• Notify Client On Profile Change — email a client a summary of every detail they changed themselves in the client area
• Also Notify The Previous Address — when the email address itself was changed, send the same notification to the old address so the previous mailbox owner is alerted
• Enable Module Logs — record send attempts and responses to Utilities → Logs → Module Log for troubleshooting; off by default
• Email Customization tab with two independent editors — the Verification Code Email and the Profile Change Notification Email — each with its own language selector, editable subject and message body
• Language dropdowns are populated from the languages active in your WHMCS install, with a search box on long lists; any language with no content of its own falls back to English
• SMTP Configuration tab — set Mail From Address and Mail From Name, toggle remote SMTP on or off, and enter host, port, username, password, and encryption (SSL / TLS / None)
• Test Configuration button sends a live test through the saved settings and reports the result without leaving the page
• Client Area Theme tab — light or dark popup mode, separate primary and secondary colours for each mode with colour pickers and one-click reset to defaults
• Support for client area templates that have their own light/dark toggle: choose dark class only, white class only, or classes for both modes, and enter your template's CSS class names so the popup follows the template's current mode
• Info tab showing module name, version, license key, license status, valid domain, next due date, WHMCS version, PHP version and ionCube Loader version — the details to quote on a support ticket
• License key field and a Refresh Database option in the addon's WHMCS configuration screen; when set to Yes, the module's own tables are dropped on deactivation
• Daily automatic update check against the WHMPress update service, applying new versions in place and writing the result to the WHMCS activity log

Client Area Features

• Verification popup injected into the registration page, the shopping cart checkout and the login page — no template file edits required
• Six-digit one-time code emailed to the address the client entered, valid for the expiry window you set
• Codes are stored encrypted in the session using the WHMCS EncryptPassword API rather than in plain text
• Three-attempt limit per code — after three wrong entries the verification session is discarded and the client must request a new code
• Try Again action lets a client request a fresh code without restarting the signup
• On checkout, verification is only enforced for new customers — existing clients logging in to order are not asked again
• Once an address is verified, it is remembered, so a returning client is not re-challenged for the same address
• Profile change notification email lists every changed field as a table of Field / Previous Value / New Value, plus the date and time of the change and the IP address it came from. It fires only for a client editing their own details in the client area — admin-side edits do not trigger it — and is sent after the page response is returned, so the client never waits on the mail server
• Emails are delivered in the client's own account language

Package & Configuration Options

Settings tab

• Enable Registration Verification — on / off
• Enable Login Verification — on / off
• Code Expiry — minutes
• Notify Client On Profile Change — on / off
• Also Notify The Previous Address — on / off
• Enable Module Logs — on / off

Email Customization tab (per language)

• Verification Code Email — subject and message body. Variables: {$username}, {$verification_code}, {$expires_in}, {$company_name}
• Profile Change Notification Email — subject and message body. Variables: {$username}, {$changes_table}, {$changes_list}, {$change_date}, {$ip_address}, {$company_name}

SMTP Configuration tab

• Enable Remote SMTP — on / off
• Mail From Address, Mail From Name
• Mail Host, Mail Port, Mail Username, Mail Password
• Encryption — SSL / TLS / None

Client Area Theme tab

• Theme Mode — Light / Dark
• Primary and Secondary Colour (Light Mode)
• Primary and Secondary Colour (Dark Mode)
• Client area light/dark toggle support — Dark Class Only / White Class Only / Class for Both Modes, with the CSS class names for each

Addon configuration (WHMCS Addon Modules screen)

• License Key
• Refresh Database — drop the module's tables on deactivation

Tracked Profile Fields

When profile change notification is enabled, the module watches these client fields and reports any that changed:

• First Name, Last Name, Company Name
• Email Address
• Address 1, Address 2, City, State/Region, Postcode, Country
• Phone Number, Tax ID

Email Delivery Options

• Local mail transport — the server's built-in PHP mail function (default)
• Remote SMTP — any external SMTP server, with SSL, TLS or unencrypted connection, delivered via bundled PHPMailer

Supported Languages

Admin-editable email content is available for every language installed in your WHMCS. The module's own client-facing popup text ships translated in:

Arabic · Azerbaijani · Catalan · Chinese · Croatian · Czech · Danish · Dutch · English · Estonian · Farsi · French · German · Hebrew · Hungarian · Italian · Macedonian · Norwegian · Portuguese (Brazil) · Portuguese (Portugal) · Romanian · Russian · Spanish · Swedish · Turkish · Ukrainian

Any language without a matching file falls back to English.

Why Choose WHMPRESS?

WHMPRESS builds and maintains WHMCS addons used by hosting providers worldwide. Email Verification Extended is licensed, actively developed, and ships with a built-in daily auto-update check so your installation stays current without manual patching. Full documentation and direct support come with every license.

Take your WHMCS security to the next level with this must-have tool for WHMCS!

General Compatibility

• WHMCS Compatibility: Supports WHMCS Versions 8.7 to 9.X

• PHP Versions: Supports PHP 8.4, 8.3, 8.2, and 8.1

• Themes Supported: Works with WHMCS themes such as Six, Twenty-One, and Lagom WHMCS Client Theme

• System Requirement: Requires ionCube Loader v13 or later

Module Price

Monthly Price: 5$.

Annually Price: 29$.

One-Time Price: 75$.

OPEN-SOURCE VERSION: $99 One-time Price.