WP Manifestindependent plugin directory
manifest / security / neat-2fa-handler

Neat2FA Handler

A WordPress plugin for email-based account confirmation and admin two-factor enforcement. It adds verification for registration and checkout, plus integration with the Two Factor plugin for protected admin roles.

by Jv Secate · github.com/jvsecate/neat-2fa-handler

★ 1stars

Install

Download source zip No release zip yet

This is the repository archive. It installs, but the folder name will carry the branch suffix and updates will not flow.

Install straight from GitHub with WP-CLI:

wp plugin install https://github.com/jvsecate/neat-2fa-handler/archive/refs/heads/main.zip
No built-in updater. New versions won't appear under Dashboard → Updates. Install new releases yourself, or let Git Updater track the repository.
Readme github.com/jvsecate/neat-2fa-handler ↗

Email confirmation for WooCommerce registration and checkout, plus admin Two Factor controls.

Features

  • Email-code confirmation before account registration.
  • Password confirmation on the WooCommerce registration form.
  • Email-code confirmation before WooCommerce can create an order.
  • Fresh confirmation for every guest checkout.
  • Optional checkout confirmation window for logged-in customers.
  • Password changes through WooCommerce lost-password recovery.
  • Two Factor provider enforcement for selected admin roles.

Settings

Open WooCommerce -> Neat2FA Handler.

If WooCommerce is inactive, use Settings -> Neat2FA Handler.

Checkout confirmation has no disable option. Guests always confirm. Logged-in customers skip the modal only while inside the configured confirmation window.

Real Blocks

  • Registration creates the account only after the code is accepted.
  • Classic checkout is blocked through WooCommerce checkout validation.
  • WooCommerce Blocks checkout is blocked through the Store API before order creation.
  • Account password changes posted manually from My Account are redirected to lost-password recovery.

The visible fields and modal are helpers only. The server-side checks are the block.

Theme Text

Default front-end strings are intentionally short. A theme can replace them:

add_filter( 'neat_2fa_handler_frontend_texts', function ( $texts ) {
    $texts['checkoutTitle']  = 'Confirmar e-mail';
    $texts['checkoutHelp']   = 'Digite o codigo enviado por e-mail.';
    $texts['checkoutLabel']  = 'Codigo';
    $texts['checkoutVerify'] = 'Continuar';
    $texts['recoveryTitle']  = 'Recuperar senha';
    $texts['recoveryHelp']   = '';
    $texts['recoveryLabel']  = 'Recuperar senha';

    return $texts;
} );

If the theme renders its own password recovery panel, disable the plugin panel:

add_filter( 'neat_2fa_handler_render_password_recovery_panel', '__return_false' );

Theme Styling

Useful selectors:

  • .asw-verification-page
  • .asw-password-confirm-row
  • .asw-password-recovery-panel
  • .asw-modal.asw-modal--checkout
  • .asw-modal__overlay
  • .asw-modal__dialog
  • .asw-modal__notice
  • .asw-checkout-verify
  • #asw-checkout-modal-code

Useful variables:

:root {
    --asw-radius: 0.5rem;
    --asw-surface: #fff;
    --asw-text: #111;
    --asw-notice-color: #b00020;
    --asw-modal-width: 28rem;
    --asw-modal-overlay: rgba(0, 0, 0, 0.55);
    --asw-content-width: 36rem;
}

Email Templates

Email bodies support HTML and these placeholders:

{site_name}
{email}
{user_login}
{code}
{ttl_minutes}
{checkout_valid_hours}

Email templates use inline styles because email clients do not load the active theme CSS.