User Verification by PickPlugins
View on WordPress.orgScores higher than 61% of indexed plugins
About
Email verification for user registration to protect spam.
Security History
What It Does
User Verification by PickPlugins adds an email confirmation step to the WordPress registration flow, requiring new users to click a verification link before they can log in or interact with the site. It also bundles passwordless login and login hiding features, letting site owners reduce spam signups and gate content behind a confirmed email address. In short, it turns open registration into a verified, two-step process.
Who It's For
This plugin fits small to mid-sized WordPress sites that allow public registration and need a lightweight way to block bots, fake accounts, and throwaway email signups, such as forums, membership sites, classifieds, or community platforms. It is also a reasonable pick for site owners who want passwordless email login without investing in a full identity or SSO stack. Compliance-driven sites in healthcare or finance may find the basic verification useful, though it is not a substitute for formal identity verification.
Who Should Skip It
If you run a single-author blog, a small business brochure site, or any site where registration is disabled or tightly moderated, this plugin adds friction without solving a real problem. Sites needing deep WooCommerce checkout verification, SMS or OTP-based flows, or formal KYC compliance should look at more specialised alternatives.
The Bottom Line
User Verification by PickPlugins delivers solid core email verification with excellent maintenance and compatibility, making it a sensible, low-risk pick for small to mid-sized sites fighting registration spam. However, its small install base, limited rating volume, and zero public support threads mean you are betting on a relatively quiet project, so larger or compliance-critical sites should test thoroughly or consider more proven alternatives. Overall Quality Score: 77.57/100.
Related Plugins
Pick this instead if your real need is generating secure, expiring magic links for clients or support agents rather than verifying new user registrations.
Choose this if you only want to obscure the wp-login URL as a basic deterrent and do not need email verification at all.
Pick this alternative instead if your site runs WooCommerce and you specifically need to block unverified customers from completing checkout or placing orders.
Choose this if you need multi-factor or OTP via SMS, email, or authenticator apps rather than a simple email link verification.
Pick Magic Login if passwordless email login is your primary requirement and you want a focused, lightweight solution without broader verification settings.