Avrasys

AV 2FA adds a crucial layer of security to your WordPress login process. After a user successfully enters their password, this plugin sends a unique, time-sensitive verification code to their registered email address. The user must then enter this code to complete the login, effectively protecting their account even if their password is compromised.
The plugin is designed to be lightweight, easy to use, and seamlessly integrated into the WordPress experience.
Key Features:
<ul>
<li>Email-Based 2FA: Sends a 6-digit verification code to the user’s email.</li>
<li>Custom Login URL: Hide your login page by setting a custom login slug. The default wp-login.php becomes inaccessible, protecting against brute force attacks and bots.</li>
<li>Rate Limiting & Account Lockout: Protects against brute force attacks on 2FA codes with configurable thresholds and temporary lockouts.</li>
<li>Progressive Lockout: Automatically increases lockout duration for repeat offenders (2x, 4x, 8x multiplier).</li>
<li>IP-Based Protection: Tracks failed attempts by IP address to prevent distributed attacks.</li>
<li>Email Notifications: Alerts users when their account is locked due to suspicious activity.</li>
<li>Admin Controls: View and manually unlock locked accounts from the settings page.</li>
<li>Customizable Code Validity: Admin can set how long the code is valid for (default is 60 seconds).</li>
<li>User Exclusion List: Easily bypass 2FA for specific users (e.g., admin or integration accounts) by adding their User ID to an exclusion list.</li>
<li>Countdown Timer: The verification screen displays a countdown timer to show the user how much time is left.</li>
<li>Secure & Reliable: Uses WordPress’s built-in mailer and secure practices for code generation and verification.</li>
</ul>

AV 2FA


No Ads, no toplevel menu entry, no unnecessary database tables. This plugin is just how i like it to be, minimalistic and well implemented.


Minimalistic. Just how it should be!

A simple and secure Two-Factor Authentication plugin that sends a verification code to your email.

wp-comblock

Comblock Login is a professional and secure frontend authentication system designed to provide a seamless user experience outside the WordPress admin area. Unlike standard login plugins, Comblock allows you to transform your site into a multi-level portal through dynamic Custom Dashboards assigned to specific user roles.
The standout feature of this plugin is the Global Logout (Logout from all devices): an advanced security mechanism that enables users to terminate all active sessions across all devices with a single click, ensuring total protection if credentials are compromised. Every aspect of the login process is fortified with Nonce verification (anti-CSRF) and rigorous data sanitization, utilizing native WordPress core functions for maximum reliability.
With Comblock Login, you can: 
* Create multiple private areas by assigning each dashboard to specific user roles (RBAC). 
* Manage the entire user journey through dynamic shortcodes (Login, Logout, User Info). 
* Protect data privacy by filtering which metadata to display via developer-friendly hooks. 
* Monitor site security through integrated logging of access errors and permission violations.
This plugin doesn’t just hide the backend; it creates a secure, tailored ecosystem for your members, ensuring a smooth transition between public content and private dashboards.
<h3>Features</h3>
<ol>
<li>Global Session Control: A high-end security feature allowing users to perform a simultaneous logout from all devices, instantly terminating every active session.</li>
<li>Multi-Dashboard Management: Create unlimited and dynamic restricted areas (based on Custom Post Types) by assigning granular permissions based on user roles.</li>
<li>Secure Frontend Login: A complete authentication system integrated directly into your site’s layout via shortcodes, removing the need for users to access <code>/wp-login.php</code>.</li>
<li>Smart Redirect & Access Control: Intelligent management of post-login redirects and automatic content protection, with immediate redirection for unauthorized users.</li>
<li>Bulletproof Security: Advanced protection featuring Nonce (CSRF) verification, input sanitization, and authentication through the secure <code>wp_signon()</code> native function.</li>
<li>Extensible User Info: A dedicated shortcode to display profile data, featuring developer hooks (PHP filters) to customize which meta fields are shown or hidden.</li>
<li>Security Error Logging: Integrated monitoring system that records login errors and permission breaches for total security oversight.</li>
</ol>
<h3>Usage</h3>
<ul>
<li>
Use the shortcode <code>[comblock_login]</code> to display the login form. You can insert this shortcode into any page or post. 
Simple example (only required attribute): 
<code>[comblock_login dashboard-post-id="8"]</code> 
Complete example (with all optional attributes): 
<code>[comblock_login id="subscriber-login" class="subscriber-form-login" dashboard-post-id="8" privacy-page-id="2"]</code> 
Where:
<ul>
<li><code>dashboard-post-id</code> is mandatory and represents the ID of a Dashboard post type created in the back office. </li>
<li><code>id</code>, <code>class</code>, and <code>privacy-page-id</code> are optional, where <code>privacy-page-id</code> refers to the privacy policy page ID.</li>
</ul>
</li>
<li>
Use the shortcode <code>[comblock_logout]</code> only within the <code>dashboard</code> post type to display the logout link. 
Simple example (without optional attributes): 
<code>[comblock_logout]</code> 
Complete example (with optional attributes): 
<code>[comblock_logout id="logout-link" class="btn-logout"]</code>
</li>
<li>
Use the shortcode <code>[comblock_disconnection]</code> within the <code>dashboard</code> post type to display the disconnection link. 
Simple example: 
<code>[comblock_disconnection]</code> 
Complete example: 
<code>[comblock_disconnection id="disconn-link" class="btn-disconnect"]</code>
</li>
<li>
Use the shortcode <code>[comblock_user_info]</code> within the dashboard post type to display user information. 
Complete example: 
<code>[comblock_user_info title="Profile Details" fields="display_name,user_email,billing_phone"]</code>
The <code>fields</code> attribute accepts comma-separated user meta keys. For security, you can control which fields are accessible using the following PHP filters:
<ul>
<li><code>comblock_login_user_ban_fields</code>: Add keys to this blacklist to prevent them from being displayed, even if requested in the shortcode.</li>
<li><code>comblock_login_user_info_allowed_fields</code>: Use this whitelist to explicitly permit custom meta keys (like WooCommerce or ACF fields).</li>
</ul>
Example: How to allow a custom field 
Add this to your <code>functions.php</code>: 
add_filter(‘comblock_login_user_info_allowed_fields’, function($allowed) { 
 $allowed[] = ‘billing_phone’; 
 return $allowed; 
});
These hooks enable developers to customize which user data can be displayed via the shortcode while maintaining control over security and privacy.
</li>
</ul>
<h3>Security</h3>
The plugin implements the following security mechanisms:
<ul>
<li>Nonce verification for all critical login and logout actions to protect against CSRF.</li>
<li>Sanitization of input from login forms to prevent injection.</li>
<li>Authentication via WordPress’ secure <code>wp_signon()</code> function.</li>
<li>Strict session cookie management with SSL support.</li>
<li>Granular control of access permissions based on user roles defined for each dashboard.</li>
<li>Complete destruction of user sessions upon logout from all devices.</li>
</ul>

Comblock Login

Secure frontend login/logout with user dashboards, session management, and role-based access control for WordPress sites.

AV 2FA vs Comblock Login