Secure WordPress login with SI 2FA Login Security - supports WP, Woo + other login forms, TOTP (Google Authenticator, Authy, etc.)

WPWhiteSecurity

Melapress

robertabela

WP 2FA – Two-factor authentication for WordPress

Get better WordPress login security; add two-factor authentication (2FA) for all your users with this easy-to-use plugin.

Stroke Infotech

Secure WordPress login with this two factor authentication (MFA / 2FA) plugin. Users for whom it is enabled will require a one-time code in order to log in.
Features
<ul>
<li>Supports standard TOTP protocols (and so supports Google Authenticator, Authy, and many others).</li>
<li>Displays graphical QR codes for easy scanning into apps on your phone/tablet</li>
<li>MFA can be turned on or off by each user</li>
<li>Supports front-end editing of settings, via shortcode (i.e. users don’t need access to the WP dashboard).</li>
<li>
User login history
[si2flose_twofactor_user_settings]
</li>
<li>
Simplified user interface and code base for ease of use and performance
</li>
<li>Alert users if someone appears to have found out their password, as indicated by successfully entering a password but repeatedly entering an incorrect MFA code.</li>
<li>When using the front-end shortcode, require the user to enter the current MFA code correctly to be able to activate MFA</li>
</ul>
<h4>How Does MFA / 2FA Work?</h4>
This plugin uses the industry standard MFA / 2FA algorithm <a href="https://en.wikipedia.org/wiki/Time-based_One-time_Password_Algorithm" rel="nofollow ugc">TOTP</a> for creating One Time Passwords. These are used by Google Authenticator, Authy, and many other OTP applications that you can deploy on your phone etc.
A TOTP code is valid for a certain time. Whatever program you use (i.e. Google Authenticator, etc.) will show a different code every so often.
<h4>Plugin Notes</h4>
This plugin began life in early 2025 as a friendly fork and enhancement of “wp mfa authentication” plugin.
This plugin requires PHP version 5.3 or higher and support for either php-openssl or <a href="http://www.php.net/manual/en/mcrypt.installation.php" rel="nofollow ugc">PHP mcrypt</a>. The vast majority of PHP setups will have one of these. If not, ask your hosting company.
<ol>
<li>Search for ‘SI 2FA Login Security’ in the ‘Plugins’ menu in WordPress.</li>
<li>Click the ‘Install’ button. (Make sure you picks the right one)</li>
<li>Activate the plugin through the ‘Plugins’ menu in WordPress</li>
<li>Find site-wide settings in 2FA User Settings ; find your own user settings in the top-level menu entry “2FA User Settings”.</li>
</ol>
If you want to add a section to the front-end of your site where users can configure their two-factor authentication settings, use this shortcode:
<pre><code>[si2flose_twofactor_user_settings]
</code></pre>

Alternatives to SI 2FA Login Security

Top alternatives