Host Modules Email Verification for WHMCS

HM Email Verification adds a mandatory email verification step to every WHMCS client login. When a client signs in, a time-limited 6-digit code is sent to their email address automatically. They cannot access their account until the code is entered — protecting your platform from unauthorised access and account takeovers with zero friction for legitimate users.

No IonCube Loader required. No bloated fraud modules. Just clean, focused login security that works with any WHMCS theme.

View Details

─────────────────────────────────────

HOW IT WORKS

─────────────────────────────────────

• Client logs in to WHMCS — the login is intercepted automatically
• A cryptographically secure 6-digit code is generated and sent instantly
• The client enters the code on the verification page to access their account
• Verified sessions are remembered for 30 days — repeat logins on the same device do not require re-verification (configurable)
• Expired codes, failed attempts, and sessions are tracked per client

─────────────────────────────────────

VERIFICATION SETTINGS

─────────────────────────────────────

• Enable or disable verification globally with a single toggle
• Configurable code expiry time — set how many minutes codes remain valid (default: 15 minutes)
• Configurable maximum attempts — set how many failed entries are allowed before requiring a new code (default: 3)
• 30-day bypass — verified clients skip re-verification for 30 days after their last successful login (optional, on by default)
• Clients can request a new code themselves via the resend option on the verification page

─────────────────────────────────────

PER-CLIENT EXEMPTION MANAGEMENT

─────────────────────────────────────
Exempt individual clients from verification permanently — useful for internal staff accounts, trusted resellers, or accessibility cases. All exemptions are managed from the Users panel with a full audit trail.

• Exempt a client from the admin Users panel with one click
• Remove exemption to re-enable verification for that client at any time
• Exempt client count shown on the dashboard at a glance

─────────────────────────────────────

ADMIN USERS PANEL

─────────────────────────────────────
A searchable, paginated list of all WHMCS clients with per-row verification controls and a live status summary bar.

• Search clients by name, email, or ID
• Per-client actions: Send Code, Mark Verified, Un-verify, Exempt, Remove Exemption — all without leaving the panel
• Status summary bar: total clients, verified in last 30 days, pending verification, exempt clients
• Pagination — 25 clients per page

─────────────────────────────────────

ADMIN DASHBOARD

─────────────────────────────────────

• Today's verification requests sent
• Today's successful verifications
• Currently pending codes (not yet verified, not yet expired)
• Expired codes count
• Active verified sessions (last 30 days)
• Exempt client count
• Recent verification attempts table — client name, email, IP address, code status, timestamp
• One-click clear expired codes and clear all verified sessions

─────────────────────────────────────

BUILT-IN EMAIL TEMPLATE EDITOR

─────────────────────────────────────
Edit the verification code email directly from the addon admin panel — no need to navigate to WHMCS email templates. Full WYSIWYG editor (TinyMCE) with subject, body, sender name, sender email, CC, BCC, and plain-text mode.

Available merge fields include the verification code, expiry time, all standard client fields (name, email, address, company), and company fields (name, logo, domain, signature).

─────────────────────────────────────

ADMIN CLIENT PROFILE INTEGRATION

─────────────────────────────────────
Verification status is visible directly on the WHMCS admin client profile tab. Admins can send a code, mark a client as verified, un-verify, exempt, or remove an exemption without leaving the client profile.

─────────────────────────────────────

LANGUAGE MANAGER

─────────────────────────────────────
Override any text string on the verification page directly from the admin panel. Customise headings, button labels, error messages, and instructions for your specific audience without editing any template files.

─────────────────────────────────────

SYSTEM DIAGNOSTICS

─────────────────────────────────────

• Live status check for all required database tables
• Verification page file status in WHMCS root
• Email template status in WHMCS
• One-click re-sync for the verification page and template files

─────────────────────────────────────

REQUIREMENTS

─────────────────────────────────────

• WHMCS 8.x or newer
• PHP 7.4 or newer
• No IonCube Loader required
• Works with any WHMCS client theme