Version 3.0.10 – 20 August 2026

Version 3.0.10

AuthMail - Email OTP Security for WordPress and WooCommerce.
- Fixed public update discovery on websites where an AuthMail license had never been activated.
- Improved compatibility with the Eupor IT update endpoint by always sending the expected public request fields.
- Added additional WordPress update hooks so version information can be detected reliably on the Plugins and Updates screens.
- Reduced the retry delay after temporary public update-check failures.
- Preserved safe, package-free version metadata after license deactivation or temporary network errors.
- Ensured update notifications remain visible without exposing the protected plugin package.
- Added a security-focused icon to the WordPress admin menu.

Version 3.0.9 – 17 August 2026

Version 3.0.9

AuthMail - Email OTP Security for WordPress and WooCommerce.
- Added update-availability notices for websites without an active AuthMail license.
- Added direct links to activate an existing license or purchase a new license.
- Kept version details and the changelog available while withholding the protected update package.
- Separated public update metadata from licensed package authorization.
- Added protection against stale or cached package URLs being reused without a valid license.
- Improved update-check caching to reduce unnecessary requests to the update server.

Version 3.0.8 – 16 August 2026

Version 3.0.8

AuthMail - Email OTP Security for WordPress and WooCommerce.
- Added license-integrity protection against local license-key deletion and partial database manipulation.
- Added a signed integrity record that binds the encrypted key, license state, website, product, and installation together.
- Added fail-closed handling when protected local license records are missing, altered, or copied to another website.
- Added integrity verification for critical AuthMail PHP files.
- Added automatic migration for valid license data created by earlier 3.0.x versions.
- Optimized integrity checks to avoid unnecessary file hashing and remote license-server requests.

Version 3.0.7 – 15 August 2026

Version 3.0.7

AuthMail - Email OTP Security for WordPress and WooCommerce.
- Simplified the License & Updates page for end users.
- Removed development-only SLM diagnostics and last-request information from the customer-facing administration interface.
- Reorganized license information into Registered Website, Product, Expiration, Activations, Last Successful Check, and Automatic Updates cards.
- Added a native WordPress automatic-updates switch for AuthMail.
- Improved the accuracy of Enabled, Disabled, Unavailable, and policy-controlled automatic-update states.
- Reduced repeated license-state processing and duplicate update-manifest requests during the same WordPress request.

Version 3.0.6 – 14 August 2026

Version 3.0.6

AuthMail - Email OTP Security for WordPress and WooCommerce.
- Improved compatibility with the existing Eupor IT Software License Manager environment.
- Aligned license activation requests with the request format already used successfully by other Eupor IT plugins.
- Corrected the registered-domain format sent to the license server.
- Improved support for WooCommerce order-generated licenses and manually created legacy licenses.
- Added safer transport fallback and stricter license-response validation.
- Preserved the existing OTP, WooCommerce, frontend popup, and More Plugins functionality.

Version 3.0.5 – 13 August 2026

Version 3.0.5

AuthMail - Email OTP Security for WordPress and WooCommerce.
- Added compatibility with SLM Plus licenses generated automatically from WooCommerce orders.
- Improved Product Reference and Item Reference validation.
- Added controlled compatibility for manually created and earlier AuthMail license records.
- Prevented license keys belonging to another Eupor IT product from being accepted.
- Improved update-entitlement metadata for order-generated licenses.

Version 3.0.4 – 12 August 2026

Version 3.0.4

AuthMail - Email OTP Security for WordPress and WooCommerce.
- Improved Software License Manager communication across supported GET and POST request formats.
- Preserved the exact pasted license-key value before applying safe copy-and-paste normalization.
- Added compatibility handling for invisible characters, non-breaking spaces, line breaks, and typographic hyphens.
- Improved license-response verification and request diagnostics.
- Added safer fallback behavior for older Eupor IT license-server configurations.

Version 3.0.3 – 10 August 2026

Version 3.0.3

AuthMail - Email OTP Security for WordPress and WooCommerce.
- Separated the Software License Manager verification secret from the license-creation secret.
- Added explicit configuration support for the SLM verification endpoint and verification secret.
- Added non-reversible Configuration ID checks for comparing client and server settings without exposing secrets.
- Improved protection of license credentials during transport, storage, diagnostics, and error handling.
- Added more precise handling for missing-key, invalid-secret, endpoint, and database-instance errors.

Version 3.0.2 – 25 July 2026

Version 3.0.2

AuthMail - Email OTP Security for WordPress and WooCommerce.
- Improved license activation, validation, and deactivation request handling.
- Added reliable success and error notices after license actions.
- Added compatibility parsing for standard SLM responses and common WordPress response wrappers.
- Added safe license-key normalization for copied keys.
- Added post-activation verification for the product, website, status, expiration, and activation limit.
- Improved the More Plugins page layout and responsive card presentation.

Version 3.0.1 – 21 July 2026

Version 3.0.1

AuthMail - Email OTP Security for WordPress and WooCommerce.
- Restored the original responsive More Plugins catalogue layout.
- Fixed plugin-card widths, spacing, image sizing, and footer alignment.
- Added three-column, two-column, and mobile single-column layouts.
- Scoped all catalogue styles to the AuthMail More Plugins page to avoid affecting other WordPress admin screens.
- Improved asset versioning so updated administration styles load without stale browser cache.

Version 3.0.0 – 10 July 2026

Version 3.0.0

AuthMail - Email OTP Security for WordPress and WooCommerce.
- Rebuilt the login flow so WordPress creates the authenticated session only after successful OTP verification.
- Added separate switches for WordPress admin login protection and frontend login protection.
- Added a clean, responsive, and accessible frontend OTP popup with a no-JavaScript fallback.
- Added support for the standard WooCommerce My Account login flow.
- Added role-based protection for both admin and frontend login contexts.
- Added cryptographically secure OTP and challenge-token generation.
- Changed OTP storage to non-readable, challenge-specific HMAC values.
- Added short-lived, single-use challenges, atomic verification, resend invalidation, and parallel-request protection.
- Added configurable OTP length, expiration, retry limits, lockouts, resend delay, and email rate limits.
- Added Software License Manager compatible activation, validation, deactivation, expiration checks, and activation-limit handling.
- Added encrypted license-key storage and a signed local license state bound to the current website and license fingerprint.
- Added license-controlled automatic updates using the modern WordPress Update URI mechanism and a legacy compatibility path.
- Added HTTPS, trusted-host, manifest validation, and optional SHA-256 package verification for updates.
- Redesigned the administration area with Settings, License & Updates, Security Logs, Help, and More Plugins pages.
- Preserved the Eupor IT update integration and More Plugins connection.
- Reworked OTP emails as concise UTF-8 plain-text transactional messages.
- Added a test-email tool and scoped sender settings.
- Added server-side paginated security logs and removed the bundled DataTables dependency.
- Added English default text, translation support, responsive styling, reduced-motion support, and mobile one-time-code autofill.
- Added migration support for existing AuthMail settings and logs.
- Added multisite-aware activation and uninstall handling.
- Added an emergency recovery bypass constant.

Version 2.2.0 – 10 January 2026

Version 2.2.0

AuthMail - Simple One-Time Password Plugin.
- Hardened the OTP flow so the WordPress authentication cookie is created only after OTP verification.
- Replaced weak random generation with cryptographically secure OTP and token generation.
- Changed OTP storage from readable values to HMAC values.
- Removed the challenge token from URLs and moved it to secure HttpOnly cookies.
- Added integrity checks, one-active-challenge enforcement, resend invalidation, and parallel-request locking.
- Rebuilt the standalone OTP screen without theme or third-party asset dependencies.
- Improved security headers, cache prevention, referrer protection, and iframe protection.
- Reworked OTP emails as clean UTF-8 plain-text transactional messages.
- Added configurable sender settings, a test-email tool, mail-failure logging, and email rate limiting.
- Hardened the Eupor IT update checker with HTTPS validation, response validation, safe remote requests, and caching.
- Removed unused DataTables assets and unnecessary JavaScript dependencies.

Version 2.1.0 – 6 February 2025

Version 2.1.0

AuthMail - Simple One-Time Password Plugin.
- Added a Login Logs page for reviewing OTP login activity.
- Added a failed-attempt limit for incorrect OTP submissions.
- Added a configurable temporary ban duration after too many failed attempts.
- Added log-retention controls for automatically deleting old records.
- Moved OTP verification to a dedicated page to improve compatibility with caching plugins.
- Added customizable OTP interface text.
- Added a custom CSS field for styling the OTP page.

Version 2.0.0 – 5 June 2024

Version 2.0.0

AuthMail - Simple One-Time Password Plugin.
- Added compatibility with WooCommerce login pages.
- Added a configurable OTP email-content field.

Version 1.1.2 – 29 March 2024

Version 1.1.2

AuthMail - Simple One-Time Password Plugin.
- Fixed OTP verification being applied to roles that were not selected for protection.

Version 1.1.1 – 23 March 2024

Version 1.1.1

AuthMail - Simple One-Time Password Plugin.
- Improved WordPress compatibility and stability.

Version 1.1.0 – 10 March 2024

Version 1.1.0

AuthMail - Simple One-Time Password Plugin.
- Added role-based controls for enabling or disabling OTP verification.

Version 1.0.0 – 9 March 2024

Version 1.0.0

AuthMail - Simple One-Time Password Plugin.
- Initial release.