This is an info Alert.
xpay
  • Product
    • Become Agent-Ready
      • Merchants
        Agentic Commerce — list your store across ChatGPT, Gemini, Claude & Perplexity
      • Publishers
        Monetize your content when AI agents read, cite, or train on it
      • SaaS Companies
        Treat AI agents as first-class customers with agent-priced checkout
    • Monetize
      • Monetize MCP Server
        Charge per call on any MCP server in 2 minutes
      • Monetize AI Agents
        Turn n8n, Zapier, Activepieces workflows into revenue
  • Resources
    • xpay Ecosystem
      • xpay✦ Tools
        1,000+ pay-per-use tools for your AI agents
      • Agent-Ready SaaS Index
        25,481 SaaS scored on agent-buyability
      • SaaS Pricing Database
        Pricing pages indexed across 1,000+ categories
      • Shopify Apps Directory
        Every Shopify app, with its full review history
      • WooCommerce Plugins Directory
        Every WooCommerce plugin, scored on how well it is maintained
      • GitHub
        Open source repositories
    • Agent Building
      • Agent Frameworks
        AI frameworks for building multi-agent systems
      • x402 Integration
        AI frameworks with x402 payment integration
      • Networks
        Blockchain networks supporting x402
    • Company
      • About xpay✦
        Our mission, products, and protocols
      • Blog
        Latest insights and updates
      • Docs
        Complete xpay documentation
  • Pricing
  • Blog
  • Docs
Get Started
  1. xpay✦ Commerce

  2. Directory

  3. WooCommerce plugins

  4. Advanced Email Domain Restriction

Advanced Email Domain Restriction

Restrict WordPress user registration to allowed email domains, block spam signups, and secure WooCommerce, LearnDash, and form registrations.

100+ active installs
5.0
(1 ratings)
Free on WordPress.org
View on WordPress.orgSupport forum
Will this break my store?

What the WordPress.org registry says about keeping Advanced Email Domain Restriction running.

WordPress compatibility
Tested to 7.0.4 — 1 branch behind 7.1
Tested against the WordPress branch in use today.
Last updated
1 month ago
At least 3.7 releases a year since launch. WordPress.org only lists versions still available for download, so the real number may be higher.
Requires PHP
7.4
Your host must be running at least this version.
Requires WordPress
6.3
Contributors
1
A single maintainer. Worth knowing if the plugin is load-bearing for your store.

100+ active installsWordPress.org reports installs in bands, not exact counts.
Maintenance & trust

Scored on how Advanced Email Domain Restriction is looked after — not on how many stores run it.

Well maintained
Not enough public feedback to put a confident number on this one. Little public feedback — score rests mostly on release activity. What we can see is below.

Maintenance
35 / 35
Updated 3 days ago.
WordPress compatibility
20 / 20
Tested to WP 7.0.4 (current).
Support responsiveness
Not enough data
Only 1 support thread(s) — not enough to judge.
Merchant satisfaction
10 / 15
5.0/5 across 1 rating(s).
Listing transparency
10 / 10
Provides: screenshots, description, homepage
1 of 5 measures had too little evidence to score. They are left out of the total rather than counted as zero — otherwise a plugin would be marked down for being small rather than for being poorly kept.Measured 2026-08-18 from the WordPress.org plugin registry.
Ratings

5.0

1 rating
5★1
4★0
3★0
2★0
1★0
Every rating WordPress.org holds for this plugin, not a sample. Written reviews live in the plugin's WordPress.org reviews forum.

Advanced Email Domain Restriction (AEDR) gives you full control over who is allowed to create an account on your WordPress site. Instead of letting anyone register with any email address, restrict registration to a trusted allow-list of company domains, specific email addresses, top-level domains (TLDs), or wildcard subdomains — and stop spam registrations, fake accounts, and unauthorized signups before they happen.

Whether you run a company intranet that should only accept @yourcompany.com addresses, a course platform that should only enroll students with a .edu email, or a membership site that wants to block free webmail providers, AEDR gives you a simple allow-list-based way to enforce it — with no regex or code required.

Common Use Cases

  • Restrict registration to your company domain — only allow @yourcompany.com emails to sign up for an internal site, intranet, or extranet.
  • Block spam and fake account registrations — stop bots and throwaway/disposable email signups by only accepting domains you trust.
  • Gate course or membership access by email domain — for example, only allow .edu addresses to register for a student-only LearnDash course, or restrict a corporate LMS to employee emails.
  • Control WooCommerce customer registration — prevent unauthorized signups on your WooCommerce store at checkout or account creation.
  • Enforce domain rules across every registration form on your site — WooCommerce, LearnDash, BuddyPress, MemberPress, Paid Memberships Pro, Contact Form 7, WPForms, Elementor Pro, Gravity Forms, and Fluent Forms all respect the same allow-list.

Key Features

  • Allow-list Only: Restrict registrations to a specific list of trusted domains, exact email addresses, TLDs, or wildcard subdomains.
  • Bulk Upload: Import large lists of domains via CSV.
  • Domain Export: Download your allowed domains list for backup or analysis.
  • WooCommerce Support: Fully compatible with WooCommerce customer registration.
  • Form & Field Plugin Support: Automatically validate email fields in Contact Form 7, WPForms, Elementor Pro, Gravity Forms, Fluent Forms, and Advanced Custom Fields (ACF).
  • LMS & Membership Support: Works with LearnDash, Tutor LMS, BuddyPress / BuddyBoss, MemberPress, and Paid Memberships Pro registration flows.
  • TLD & Full Email Support: Restrict registrations to specific TLDs (e.g., .com) or specific email addresses (e.g., user@example.com).
  • Wildcard Subdomain Support: A rule like *.example.com matches both example.com and any subdomain, such as sales.example.com.
  • Case-Insensitive: Matches gmail.com regardless of how the user types it.
  • Custom Messages: Define your own error messages for restricted domains.
  • Live Test Checker: Instantly test any email address in the admin panel to confirm whether it would be allowed or blocked.
  • No Regex, No Code: Every rule type is entered as plain text — no technical knowledge required.

How do I restrict WordPress registration to a specific domain?

Go to Settings → Domain Restriction and add the domain (e.g. yourcompany.com) to the Allowed Domains list. Once saved, only email addresses ending in @yourcompany.com will be able to register — every other domain is blocked automatically.

Can I block specific email providers like Gmail, Yahoo, or Outlook?

Yes. Since AEDR works as an allow-list, simply don’t include gmail.com, yahoo.com, outlook.com, or any other webmail domain in your allowed list, and registrations from those domains will be blocked. This is a common way to reduce spam and fake account signups.

Can I allow an entire top-level domain (TLD), like all .edu or .gov addresses?

Yes. Add a rule starting with a dot, such as .edu or .gov, and any email address ending in that TLD will be allowed, regardless of the domain in front of it.

Can I allow only one specific email address instead of a whole domain?

Yes. Add the full address (e.g. john@example.com) as a rule, and only that exact email will be allowed to register — useful for granting a single exception.

Does wildcard subdomain matching work?

Yes. A rule like *.example.com allows both example.com itself and any subdomain such as team.example.com or sales.example.com.

Does this plugin support WooCommerce customer registration?

Yes. AEDR hooks directly into WooCommerce’s registration process, so the same domain rules apply whether a customer registers through the standard WordPress form or through WooCommerce’s My Account / checkout registration.

Does this work with LearnDash?

Yes. AEDR validates the email domain on LearnDash’s Login & Registration modal as well as the default WordPress registration form, so students can only register with an approved email domain — useful for restricting course access to .edu or company email addresses.

Is BuddyPress or BuddyBoss registration supported?

Yes. AEDR validates the email domain during BuddyPress and BuddyBoss community signup, in addition to standard WordPress registration.

Does this work with MemberPress or Paid Memberships Pro?

Yes. Both MemberPress signup and Paid Memberships Pro registration/checkout are validated against your allowed domains list.

Which contact and form plugins are supported?

AEDR automatically validates email fields in Contact Form 7, WPForms, Elementor Pro forms, Gravity Forms, and Fluent Forms, using the same allow-list you configure once in Settings → Domain Restriction.

Does this work on WordPress Multisite?

Yes. AEDR validates email domains during multisite user signup as well as single-site registration.

How do I customize the error message shown to blocked users?

You can customize the error message shown for restricted domains in the plugin settings under the “Custom Messages” section.

Can I bulk import or export my list of allowed domains?

Yes. Use the CSV Bulk Upload feature to import a large list of rules at once, and the Export to CSV feature to download your current list for backup or review.

Will this affect users who already have an account?

No. AEDR only validates email domains at the point of new registration. Existing user accounts are never affected, logged out, or deleted, even if their email domain is later removed from the allowed list.

Does this plugin help stop spam or fake registrations?

Yes. Because only email domains you explicitly trust can complete registration, AEDR is commonly used to block spam bots, disposable/throwaway email signups, and fake accounts that target open registration forms.

What happens if I don’t add any rules?

If no domains are configured, AEDR does not restrict registration — all email addresses are allowed, exactly as with a default WordPress install.

Does this plugin collect or share any personal data?

No. AEDR does not collect, store, or transmit any personal data to third parties. It only reads the email address submitted during registration to check it against the domain rules you configure yourself.

Will this plugin slow down my website?

No. AEDR is lightweight, performs a single fast comparison against your configured rules at the moment of registration, and adds no measurable overhead to page load or checkout speed.

Categories
Email & SMSAccounts & CRMSecurity & spam
Plugin details
Version1.5.0
Last updated2026-08-15 11:01am GMT
Added2024-07-11
Requires WordPress6.3
Tested up to7.0.4
Requires PHP7.4

Tags on WordPress.org
domain
email
registration
spam
woocommerce
Alternatives
Other plugins in the same categories.
YayMail – WooCommerce Email Customizer
50K+ installs
4.8(291)
Email Subscribers & Newsletters – Email Marketing, Post Notifications & Newsletter Plugin for WordPress
50K+ installs
4.6(1,168)
MailPoet – Newsletters, Email Marketing, and Automation
500K+ installs
4.4(1,431)
FunnelKit Automations – Email Marketing Automation and CRM for WordPress & WooCommerce
20K+ installs
5.0(346)
Email Marketing for WooCommerce by Omnisend
40K+ installs
4.9(168)
Email Marketing for WordPress and WooCommerce – Retainful
500+ installs
5.0(35)
xpay

The agent-readiness stack for the AI shopping era — helping merchants, publishers and SaaS companies get discovered, cited and transacted with by ChatGPT, Perplexity, Claude, Gemini and the custom shopping agents underneath them.

CompanyAgentically Inc. (d/b/a xpay✦)1875 Mission St, Ste 103San Francisco, CA 94103, United Stateslegal@xpay.sh · privacy@xpay.sh
or ask your AI app
Company
About xpayAgency PartnersGitHubDiscordllms.txt
DevelopersDocumentationAPI ReferenceSDKs & LibrariesQuickstart GuideOpenAPI Spec
Stay Updated
Occasional product updates and agent-readiness playbooks from xpay (Agentically Inc.) — typically a couple of emails a month. Double opt-in: we email you a link to confirm before sending anything, and every email has one-click unsubscribe.
Social
  • For Publishers
    • News
    • Finance
    • Dev / Tech
    • Travel
    • View all verticals
  • Agent-Ready Index
    • SaaS Pricing Database
    • Agent-Ready SaaS Index
    • Verified band
    • AI & ML
    • Sales & CRM
  • Products
    • Pricing Widget
    • Monetize MCP Server
    • Paywall
    • Smart Proxy
    • Monetize AI Agents
    • xpay x402 Facilitator
  • Agentic Economy
    • Timeline
    • Resources
    • Manifesto
    • Stack
  • Agentic Commerce
    • Get listed
    • ChatGPT Ads
    • How ChatGPT Ads work
    • ChatGPT Ads · Apparel
    • ChatGPT Ads · Health & Beauty
    • xpay Listings · Amazon + Google
    • Pricing
    • Free audit
    • Shopify
    • WooCommerce
    • Apparel & Accessories
    • Health & Beauty
    • Overview
  • Commerce Index
    • Shopify apps directory
    • Agentic Commerce Ready Index
    • Methodology
    • Pet brands · WooCommerce
    • Pet brands · Shopify
  • Marketplace
    • 🛍️ xpay.deals — agentic storefront for deals
  • Protocols
    • Overview
    • x402
    • MPP
    • UCP
    • ACP
    • AP2
    • TAP
    • A2A
  • Agent Frameworks
    • Overview
    • LangChain
    • CrewAI
    • Claude MCP
    • AutoGPT
    • LangChain vs Mastra
    • LangGraph vs Pydantic AI
  • Company
    • About xpay
    • Blog
    • Docs
    • GitHub
  • Free prompts
    • Ecommerce prompts
    • Email marketing prompts
    • Product description prompts
    • Facebook ad prompts
    • Skincare prompts
    • Supplement prompts
    • Wine prompts
    • Electronics prompts

© 2025 Agentically Inc. All rights reserved.
Privacy PolicyTerms of UseAcceptable Use Policy