TZEmailVerification – Advanced Email OTP Verification for WHMCS
TZEmailVerification introduces a modern Two-Step Verification (2FA via Email OTP) system into WHMCS. It adds verification during:
- Client Registration
- Client Login
- Optional User-Controlled 2-Step Security
This advanced verification module is fully responsive, secure, and performance-optimized.
Core Security Features
1. Registration Email Verification
Users must verify their email address using a One-Time Password (OTP) before account creation.
- Prevents fake, spam, and unreachable email registrations
- Account is created only after successful OTP verification
- Supports expiration timer for OTP codes
- Includes cooldown system to prevent abuse
2. Advanced Login OTP Verification (2-Step Authentication)
Add an extra layer of protection to client accounts:
- After entering correct login credentials, users must enter a secure OTP sent to their email
- OTP is time-limited and single-use
- Prevents unauthorized access even if password is compromised
3. Client-Controlled 2-Step Verification (ON/OFF Option)
Clients can manage their own login security from their dashboard:
- Enable 2-Step Email OTP Verification
- Disable 2-Step Email OTP Verification
- View last verification activity
- See security status indicator
This gives users flexibility while keeping security strong.
4. Master Administrator Control Panel
Admins have complete authority from a unified dashboard:
- Enable/Disable Registration Verification globally
- Enable/Disable Login Verification globally
- Force 2-Step Verification for all clients (optional)
- Allow clients to control their own 2FA setting
- Set OTP expiry time
- Configure resend cooldown timer
- Customize OTP email template
- View verification logs
- Monitor failed attempts
5. Smart OTP Management System
- Secure random OTP generation
- Expiry timer (configurable, e.g., 5 minutes)
- Cooldown timer (configurable, e.g., 60 seconds between resend)
- Maximum resend limit protection
- Auto invalidation after successful use
- Brute-force protection logic
6. Automated Log Maintenance
- Automatically removes expired OTP entries
- Cleans old verification logs
- Maintains optimal database performance
- Runs via WHMCS cron integration
7. Unified Admin Dashboard
A clean and professional interface to manage everything:
- Verification Status Overview
- Success / Failed OTP Statistics
- Configuration Settings
- Logs & Activity Records
- User 2FA Status List
All from a single, organized admin panel.
8. Fully Responsive & Device Compatible
- Desktop Friendly
- Tablet Optimized
- Mobile Responsive
- Modern Modal-Based UI
- Smooth Verification Flow
Works perfectly across all screen sizes.
How It Works
Registration Flow
- User fills registration form
- Clicks “Register”
- OTP verification modal appears
- OTP sent to email
- User enters OTP
- If verified → Account created
- If not → Error message with resend option after cooldown
Login Flow (If Enabled)
- User enters email and password
- Credentials verified
- OTP sent to registered email
- User enters OTP
- Access granted
Advanced Configuration Options
Feature
Admin Control
Client Control
Registration Verification
Yes
No
Login Verification
Yes
No
Personal 2FA Toggle
Optional
Yes
OTP Expiry Time
Yes
No
Resend Cooldown
Yes
No
Force 2FA for All Users
Yes
No
Security Highlights
- Secure OTP generation
- Single-use verification codes
- Expiration-based validation
- Resend protection
- Brute-force attempt blocking
- Auto log cleanup
- No session bypass possible
- Fully integrated with WHMCS hooks
Perfect For
- Hosting Providers
- Domain Registrars
- SaaS Platforms
- Reseller Businesses
- Any WHMCS-based system needing advanced verification
Why Choose TZEmailVerification?
- Stops fake registrations
- Protects against account takeover
- Gives clients flexible security control
- Admin-friendly management
- Clean UI and smooth experience
- Lightweight and performance optimized
Module Information
- Module Type: WHMCS Addon Module
- Integration: Hook-Based
- Core File Modification: Not Required
Conclusion
TZEmailVerification is a complete, advanced Email OTP 2-Step Verification system for WHMCS. It combines strong security, flexible user control, and professional UI into one powerful module.
Secure your platform. Protect your clients. Eliminate fake accounts.
