Email Login Token for ClientExec

Add an extra layer of security to your ClientExec logins with a mandatory one-time e-mail verification code. Protect both clients and staff accounts from unauthorized access.

Why This Plugin?

Passwords alone are no longer enough. Phishing, credential leaks, and shared logins can put your business and your clients at risk.
The Email Login Token plugin adds simple but powerful protection by requiring a unique one-time code, sent directly to the user’s e-mail, after every login.

 Key Features

• 🔒 Mandatory Extra Security – Enforces an additional one-time e-mail token after the standard password login.
• 👨‍💼 Protect Staff Logins – Option to require tokens for all admin and staff accounts.
• ⏱ Configurable Code Lifetime – Decide how long a code stays valid (default 10 minutes).
• 🔁 Force New Code on Every Login – Ensure maximum security by requesting a fresh code each time.
• 👥 Flexible Customer Control – Apply globally to all clients, or let individual users opt-in via their profile.
• 📧 Localized E-mails – Codes are automatically sent in the customer’s preferred language, with English fallback.
• 🛑 Emergency Kill Switch – Instantly disable staff token enforcement via a secure kill URL if someone gets locked out.

How It Works

1. The user logs in with their regular ClientExec email and password.
2. They are immediately prompted to enter a 6-digit code.
3. A code is sent to their registered e-mail address.
4. Once verified, they gain full access to their account or the admin area.

Pricing