Secure WordPress login with this two factor authentication (TFA) plugin. Users for whom it is enabled will require a one-time code in order to log in. From the authors of UpdraftPlus - WP's #1 backup/restore plugin, with over 500,000 active installs.
Are you completely new to TFA? If so, please see our FAQ.
Features (please see the "Screenshots" for more information):
- Supports standard TOTP + HOTP protocols (and so supports Google Authenticator, Authy, and many others).
- Displays graphical QR codes for easy scanning into apps on your phone/tablet
- TFA can be made available on a per-role basis (e.g. available for admins, but not for subscribers)
- TFA can be turned on or off by each user
- Supports front-end editing of settings, via [twofactor_user_settings] shortcode (i.e. users don't need access to the WP dashboard). (The Premium version allows custom designing of any layout you wish).
- Works together with "Theme My Login" (https://wordpress.org/plugins/theme-my-login/)
- Includes support for the WooCommerce login form
- Does not mention or request second factor until the user has been identified as one with TFA enabled (i.e. nothing is shown to users who do not have it enabled)
- WP Multisite compatible (plugin should be network activated)
- Simplified user interface and code base for ease of use and performance
- Added a number of extra security checks to the original forked code
- Emergency codes for when you lose your phone/tablet (Premium version)
- Administrators can access other users' codes, and turn them on/off when needed (Premium version)
HTTP Digest Authentication
This plugin adds an additional layer of protection for the wp-login.php page using HTTP Digest Authentication with the PHP header() function.
So it doesn't require configuring web server files like .htaccess or .htdigest and works on all web hosting environments.
Important: If you already have a pl.........
Google Authenticator for WooCommerce
This plugin makes WooCommerce's login form compatible with the Google Authenticator plugin.
It adds a field for accepting a Google Authenticator token to WooCommerce's login form....
SecSign
SecSign ID - The mobile way to log into web sites
SecSign ID is a plugin for real two-factor authentication (2FA) for WordPress sites. 2FA adds another layer of security to your website by using a second token. In this case the physical token is your smartphone.
If you seek for more information ab.........
Two-Factor Authentication (Google Authenticator)
A highly secure & easy to setup Two-Factor Authentication for your WordPress site. Rather than relying on a password alone, which can be phished or guessed, miniOrange Two Factor authentication adds a second layer of security to your WordPress accounts. It protects your website from hacks and un.........
UNLOQ.io Passwordless authentication
UNLOQ increases the security of your digital properties through a distributed authentication system that doesn’t require your users to remember any passwords. From now on you can forget about them wherever you see the UNLOQ login box. Just click the UNLOQ button and you’ll receive an authentication .........
Clef Two-Factor Authentication
The Clef mobile app provides password-free, two-factor authentication that is highly secure and enjoyable to use. Just sync your phone with the Clef Wave to log in. Watch the 30-sec. demo.
...
Rublon Account Security: Two-Factor Auth+
The Best Two-Factor Authentication for WordPress
Instantly increase security for you (Personal Edition) and all users (Business Edition)*
1-click download; 1-click activation
No configuration or training needed
...
Sovay Secure Identity/Login
WordPress Logins Aren't Secure
WordPress sends usernames and passwords in plain text over the Internet, where they are intercepted and stolen by hackers. It’s no surprise that 30,000 WordPress sites are compromised daily, most commonly via stolen passwords.
Once hackers break into a WordPress site.........
SuperAuth Passwordless Authentication
Are you looking for passwordless login? SuperAuth helps your user to login without username and password with patent pending view and verify 2 factor authentication. Start passwordless login in your websites or apps within 30 seconds.
SuperAuth is focused on ease of integration, ease of use, and ex.........
LaunchKey
With LaunchKey, you can remove the risk and hassle of passwords in WordPress with a login alternative that’s more secure, more capable, and easier to use than traditional passwords and 2FA tokens....
