HMDIA Login & Registration helps you create a sign-in and account experience that fits your site. Design login, registration, password reset and account pages; customize forms and emails; and verify new users with an Email OTP or magic link. Built-in spam protection, optional CAPTCHA, redirects and page access controls give you more control while using WordPress user accounts.

The free plugin works on its own and includes Email OTP two-factor authentication, recovery codes, required roles and an enrollment grace period. Optional Pro adds advanced login and registration fields, authenticator app and passkey or SMS OTP two-factor methods, primary passkey login and session tools. Separate add-ons extend traffic security, content submission and checkout fields and verification.

Free features

Custom login, registration, password reset and account pages.
Combined login and registration forms with tabs.
Centralized form design templates with form selection and live previews.
Customizable email templates, branding, previews and test emails.
Settings import and export using portable JSON files.
Registration email verification using one-time codes or magic links.
Email OTP two-factor authentication with recovery codes, required roles and an enrollment grace period.
Administrator approval for new registrations.
Configurable password requirements.
Terms & Conditions acceptance on registration forms.
Redirect the default WordPress login page.
Custom redirects after login, registration and logout.
Restrict selected pages by login status and user role.
Hide the WordPress admin bar and restrict dashboard access by role.
Frontend profile editing, profile images and password management.
Built-in honeypot protection, Google reCAPTCHA v3 and Cloudflare Turnstile.
Contact forms with configurable fields, saved submissions and email notifications.
Form Submissions dashboard with activity charts, date-range selection and AJAX filtering.

Pro features

Passwordless passkey login and passkey two-factor verification.
Passwordless login using Email OTP, magic links or SMS OTP.
Additional two-factor methods using an authenticator app or SMS OTP.
Google Sign-In for login and registration.
Temporary Login Access.
Advanced session management for administrators and users.
Force user logout.
Monitor users’ online/offline status and last activity.
Role-based redirects.
Advanced login and registration fields.
Multi-step registration and contact forms.
Conditional fields for registration and contact forms.
Additional account and registration options.
Outgoing webhooks with event selection, field mapping, delivery tests and history.

Add-ons included with Pro

All Pro plans include the following add-ons:

HMDIA Traffic & IP Security: visitor analytics, sign-in activity and IP rules.
HMDIA Post Submission: frontend content-submission forms.
HMDIA WooCommerce Verification: customize checkout fields and verify customers using Email OTP, SMS OTP, or both.

Add-ons are installed as separate plugins. The free plugin works independently without them. Explore Pro and add-ons.

Video Tutorials

Explore HMDIA Login & Registration with these step-by-step video guides:

View all video tutorials

External services

Google reCAPTCHA v3

Optional spam protection requiring a Google account and reCAPTCHA keys. When configured, the plugin loads Google’s reCAPTCHA script. Google processes browser information for risk analysis. During verification, the plugin sends the CAPTCHA token, configured secret key and visitor IP address when available. Administrator connection tests also contact Google.

Service
Privacy Policy
Terms

Cloudflare Turnstile

Optional spam protection requiring a Cloudflare account and Turnstile keys. When configured, the plugin loads Cloudflare’s challenge script, which processes browser signals. During verification, the plugin sends the challenge token, configured secret key and visitor IP address when available. Administrator connection tests also contact Cloudflare.

Service
Privacy
Terms

Twilio (Pro)

Optional SMS delivery for SMS OTP features. Requires a Twilio account, Account SID, Auth Token and sender number.

When an SMS code is requested, the plugin sends the recipient’s phone number, configured sender and message containing the verification code to Twilio. Administrator connection tests authenticate with Twilio without sending an SMS.