Diagnose common Email OTP problems including missing emails, invalid or expired codes, blocked registration, redirects, and integration-specific issues.
Most Email OTP problems fall into a few categories: the email was not delivered, the code is invalid or expired, too many attempts were made, a newer code replaced an older one, account creation is being blocked intentionally, or the integration/redirect flow is not behaving as expected.
This guide covers:
- OTP emails not arriving
- Invalid, expired, or reused codes
- Resend throttling
- Maximum attempts reached
- Older codes after a resend
- Existing users not being matched
- New users being blocked by Guardrails
- Unexpected account creation
- Redirect issues
- WooCommerce, membership, LMS, and comments troubleshooting
Start by Identifying the Type of Failure
The OTP Email Does Not Arrive
First separate OTP generation from email delivery.
VentraConnect is not a hosted email-delivery service. OTP emails rely on your WordPress site's mail configuration and sending provider.
Check:
- Your WordPress site can send normal test emails
- Your SMTP plugin or transactional email provider is connected correctly
- The sender name/address is valid
- SPF/DKIM are configured correctly where applicable
- The message is not in spam or junk
- The resend throttle is not blocking another immediate request
The OTP Is Invalid
An OTP can fail verification for several reasons even when the user copied the digits from an email.
The OTP Has Expired
OTP codes are time-limited. Once the configured expiry period has passed, the user must request a new code.
If codes are expiring before users can use them, check whether your email delivery is slow before increasing the expiry period.
Check:
- The configured OTP expiry time
- How long the email takes to arrive
- Whether the user is opening an older OTP email
- Whether a newer OTP request has already replaced the previous code
Resend Throttle Is Blocking Another OTP
The resend throttle controls how quickly another OTP can be requested for the same email address.
Repeated clicking can make troubleshooting harder. If a user keeps requesting another code immediately, the resend throttle may prevent the next request.
Wait for the configured throttle period before requesting another OTP, then test again.
Maximum Attempts Have Been Reached
The Max attempts setting limits how many times the same OTP can be submitted for verification.
After the allowed attempts are exhausted, request a new OTP instead of continuing to retry the same code.
The Older OTP Stopped Working After a Resend
This is expected behaviour.
Use the newest code. When another OTP is issued, the previous active code should no longer be accepted for that request flow.
If the user has several OTP emails in their inbox, ask them to open the most recent message and enter that code.
An Existing User Cannot Log In
Email OTP authenticates the user based on the submitted email address.
Check:
- The submitted email exactly matches the email on the existing WordPress user account
- The user is testing the correct website/environment
- The account still exists
- The OTP is the newest code issued
- The code has not expired
- The maximum attempt limit has not already been reached
If the user already has a WordPress account, do not create a second account as a workaround. Fix the email/account match or OTP verification issue instead.
A New User Cannot Create an Account
This may be expected. VentraConnect can intentionally block account creation from login surfaces.
A Login Form Is Creating Users Unexpectedly
If Email OTP is creating users from a surface that should be existing-user-only, check the controls in priority order.
Check:
- The master Allow new accounts from default login forms setting
- Whether Email OTP is set to Login Only or Login & Register
- The Guardrail/account-creation rule for the supported integration login form
- The underlying plugin's own registration settings
- Whether you are testing a login surface or an intentional registration/checkout/enrollment flow
Placement does not decide registration. Showing Email OTP on a form and allowing that form to create users are separate concerns.
OTP Login Works but Redirects to the Wrong Page
Email OTP can use an OTP-specific redirect override or fall back to the applicable global/integration-aware redirect behaviour.
Check:
- Whether an OTP-specific redirect override is configured
- Your global VentraConnect redirect settings
- The expected return-to-previous-page behaviour
- The integration-specific redirect behaviour for WooCommerce or another supported Pro integration
- Whether the custom URL is valid and points to the intended destination
Email OTP Works in WordPress but Not in an Integration
Core Email OTP is available in Free. Third-party WooCommerce, membership, LMS, community, comments, and inline placements require VentraConnect Pro where supported.
Check:
- VentraConnect Pro is active
- The integration is supported
- The relevant OTP placement is enabled
- The exact integration surface is supported
- Account creation is allowed or blocked as intended for that flow
- You are testing the actual login, registration, checkout, comment, or enrollment journey separately
Use the individual integration documentation as the source of truth for exact placement and account-creation behaviour.
OTP Is Not Showing on a Form
Check:
- Email OTP is marked Active
- The relevant VentraConnect placement is enabled
- VentraConnect Pro is active if this is a Pro integration placement
- The page is not serving stale cached markup
- The expected integration form is actually the supported form/surface
Clear caches after placement changes. Page cache, optimization plugins, CDN cache, and browser cache can all make an old login layout appear to remain active.
What to Send Support
Include:
- VentraConnect Free and Pro version numbers
- WordPress and PHP versions
- The exact page or integration where Email OTP fails
- Whether the issue is email delivery, invalid code, expiry, attempts, account matching, account creation, redirect, or placement
- The current OTP Login Only / Login & Register setting
- The state of Allow new accounts from default login forms when relevant
- The configured code length, expiry, resend throttle, and max attempts
- Whether a newer OTP was requested after the failing code
- VentraConnect diagnostics/support information
- Any visible error message
