Secure passwordless login using an email OTP!

The newest update introduces a new Email OTP Login plugin for passwordless client access, expands Mollie with five additional payment methods, adds Immutable Storage support to Ceph S3 and brings new capabilities to SSL automation, payment links, Cloud Signup and Gateway Per Client.

Email OTP Login module

The new Email OTP Login module provides a simple and secure passwordless login experience for HostBill clients. Instead of entering a traditional password, users can access their accounts using a secure login link or a One-Time Password (OTP) sent directly to the email address registered with their account.

The module helps streamline the login process while maintaining security by ensuring that access is granted only through the user’s verified email address. The module offers additional security and configuration options to give administrators control over the authentication process. OTP login can be restricted to the same browser session in which the login request was initiated, helping prevent unauthorized use of intercepted codes or links. Administrators can also configure how long the OTP or login link remains valid and optionally bypass two-factor authentication when a user has successfully authenticated using an email OTP.

With passwordless email authentication, the Email OTP Login module simplifies account access while providing a secure and flexible alternative to traditional password-based login.

Release notes

The Mollie payment gateway integration has been expanded with support for additional payment methods. HostBill users can now offer Pay by Bank, BLIK, Satispay, Swish and MB WAY, making it easier to provide payment options tailored to customers in different European markets.

Easier payment link generation – working with Payment Links is now more convenient for administrators. A new button has been added directly to the admin invoice interface, allowing staff to quickly generate and copy a Pay Now link for a specific invoice. The link can then be easily shared with the customer whenever direct access to the invoice payment page is needed.

The SSL Automation Helper has gained new configuration capabilities. Administrators can now configure notifications related to the automation process, providing greater control over how relevant events are communicated. The module can also be configured to delete old DNS records, helping automate cleanup after DNS-based certificate validation and reducing the need for manual DNS record management.

The Ceph S3 integration now supports Immutable Storage for buckets. Immutable storage can prevent stored objects from being modified or deleted for a defined period, providing an additional layer of protection for data that needs to remain unchanged. This can be particularly useful for backups, archives and workloads with data retention requirements.

The Gateway Per Client module now provides greater control over how gateway rules are applied. Administrators can change the application order and priorities of configured rules, making it easier to manage more complex payment gateway configurations and determine which rules should take precedence.

Cloud Signup has received several new configuration options for controlling the information collected during account registration. Administrators can now force users to register a company account where required. The update also introduces conditional and postponed full-details requirements. This provides greater flexibility in determining when complete customer information needs to be provided, helping businesses adapt the signup process to different account types and onboarding scenarios.

We’ve also made several usability improvements to order drafts in the admin area. The Service Group field has been renamed and repositioned above the Billing Cycle field for a clearer order configuration workflow. Additionally, the PO Number field is now visually marked as required when the administrator does not have permission to place an order without a PO Number. This makes requirements immediately visible and helps avoid unnecessary validation errors during order creation.