Documents / Sentinel Security / Troubleshooting

I'm not receiving OTP (one-time password) emails

Q. I'm not receiving OTP (one-time password) emails

A. The most common cause is an issue with your WordPress email sending configuration.

Identifying the Cause

1. Test WordPress Email Delivery

First, confirm that WordPress itself is able to send emails:

  • Go to WordPress admin → ToolsSite Health
  • Check whether any warnings related to email delivery are displayed
  • Verify whether other plugin email notifications (e.g., comment notifications) are being delivered

2. Check Spam Folders

OTP emails may be routed to your spam folder. Check the spam or junk folders in Gmail, Yahoo Mail, or your email provider.

3. Server Email Sending Limits

On shared hosting, there may be limits on the number of emails that can be sent per hour.

Recommended Solution

We strongly recommend installing an SMTP plugin.

WordPress's default wp_mail() uses PHP's mail() function, but email delivery via this method is unreliable on many shared hosting environments.

WP Mail SMTP Setup Example

  1. Install and activate the WP Mail SMTP plugin
  2. Configure an SMTP service such as Gmail, SendGrid, or Mailgun
  3. Send a test email to verify it works
Installing an SMTP plugin improves the reliability of not only OTP emails but all WordPress email notifications (password resets, comment notifications, etc.).

SPF/DKIM/DMARC Configuration

To further improve email deliverability, we recommend configuring the following DNS records:

  • SPF: Authenticates the mail-sending server
  • DKIM: Detects email tampering
  • DMARC: Defines the verification policy for SPF/DKIM
For detailed settings, see Email Authentication (OTP).