EDH Restricted Site gates access to your entire WordPress site behind a simple email-domain verification flow.

Visitors enter their email address via a shortcode or Gutenberg block. If their email’s domain is on your configured allow-list, they receive a verification link by email that is valid for one hour. Opening it grants them a cookie-based access pass for a period you control. Anyone without that pass is redirected to the verification form. Users who can manage options always have full access, regardless of settings.

Features

Email-domain allow-list, managed from an admin settings page (one domain per line)
Choose which pages are exempt from the access check (e.g. the verification page itself, a privacy policy page)
Verification form available as a shortcode ([edhrs_verification_form]) or as a block (“Email Verification Form”)
Configurable “From” address for verification emails
Configurable access-cookie duration
Configurable rate limiting on verification emails, per address and per IP address
Configurable button colour via WordPress’s native colour picker
A verification-request log (linked from the Settings page and the Plugins screen) showing each email requested and whether its link has been used, with automatic retention-based cleanup
No build tooling required