# Getting Started — Epic OTP Login

This page is customer-facing starter content prepared for owner review.

## Installation flow

1. Download the verified ZIP from the Epic Works customer portal after purchase/owner approval.
2. In WordPress, open **Plugins → Add New → Upload Plugin**.
3. Upload the `epic-otp-login` ZIP package and activate it.
4. Open the plugin admin screen and complete the first-run settings.
5. Open **License & Updates** and activate the license key supplied by the customer portal.

## First configuration checklist

- Review: [epic_otp_login] request and verification flow
- Review: Hashed single-use OTP transient storage with expiry and deletion after successful verification
- Review: Rate limiting per email/IP and non-enumerating request responses
- Review: Auth-cookie login for matching WordPress users after successful code verification
- Review: Configurable success redirect and attempt-log option foundation

## Shortcodes

- `[epic_otp_login]`