Avrasys

<p>AV 2FA adds a crucial layer of security to your WordPress login process. After a user successfully enters their password, this plugin sends a unique, time-sensitive verification code to their registered email address. The user must then enter this code to complete the login, effectively protecting their account even if their password is compromised.</p>
<p>The plugin is designed to be lightweight, easy to use, and seamlessly integrated into the WordPress experience.</p>
<p><strong>Key Features:</strong></p>
<ul>
<li><strong>Email-Based 2FA:</strong> Sends a 6-digit verification code to the user’s email.</li>
<li><strong>Custom Login URL:</strong> Hide your login page by setting a custom login slug. The default wp-login.php becomes inaccessible, protecting against brute force attacks and bots.</li>
<li><strong>Rate Limiting & Account Lockout:</strong> Protects against brute force attacks on 2FA codes with configurable thresholds and temporary lockouts.</li>
<li><strong>Progressive Lockout:</strong> Automatically increases lockout duration for repeat offenders (2x, 4x, 8x multiplier).</li>
<li><strong>IP-Based Protection:</strong> Tracks failed attempts by IP address to prevent distributed attacks.</li>
<li><strong>Email Notifications:</strong> Alerts users when their account is locked due to suspicious activity.</li>
<li><strong>Admin Controls:</strong> View and manually unlock locked accounts from the settings page.</li>
<li><strong>Customizable Code Validity:</strong> Admin can set how long the code is valid for (default is 60 seconds).</li>
<li><strong>User Exclusion List:</strong> Easily bypass 2FA for specific users (e.g., admin or integration accounts) by adding their User ID to an exclusion list.</li>
<li><strong>Countdown Timer:</strong> The verification screen displays a countdown timer to show the user how much time is left.</li>
<li><strong>Secure & Reliable:</strong> Uses WordPress’s built-in mailer and secure practices for code generation and verification.</li>
</ul>


AV 2FA


No Ads, no toplevel menu entry, no unnecessary database tables. This plugin is just how i like it to be, minimalistic and well implemented.


Minimalistic. Just how it should be!

A simple and secure Two-Factor Authentication plugin that sends a verification code to your email.

Denis Alemán

<p>Login Links allows you to create temporary, password-less access links for existing users or guest accounts. The links can be configured to expire either after a certain period of time or after a set number of successful logins.</p>
<h3>How Login Link Works</h3>
<p>A login link is a special link that, when clicked, automatically logs the user in. They don’t need an account. The login occurs either under an existing account or under a temporary account created specifically for this link. The link has an expiration date, after which it is automatically deleted.</p>
<h3>Provide Temporary Access</h3>
<p>Create a login link with a specific role for support teams, clients, developers, or guest users who need temporary access to the site, and email it directly to them. They don’t need to create an account or come up with a password, and you won’t have to worry about deleting their account later.</p>
<h3>Passwordless Access for Users</h3>
<p>Allow already registered users to log in without a password. Users request a one-time login link by entering the email they used during registration, and the link is sent to that email.</p>
<h3>Features</h3>
<h3>Temporary Login Links</h3>
<ul>
<li>Create an unlimited number of temporary login links.</li>
<li>Choose to log in as an existing user or as a temporary user, which will automatically create a temporary account attached to the link.</li>
<li>Delete and manage created links through a table interface, allowing you to view and remove links as needed.</li>
<li>Set expiration limits for each login link based on time or number of logins.</li>
<li>Expiration can be based on the number of logins, time, or a combination of both, whichever occurs first.</li>
<li>Send an email invitation with a login link.</li>
<li>Customize the email’s body and subject text.</li>
</ul>
<h3>Password-less Access</h3>
<ul>
<li>Allow password-less access for your users.</li>
<li>Custom login form via shortcode for password-less access.</li>
<li>Automatic deletion of expired links.</li>
<li>Automatic generation of a temporary account with a designated role upon link creation.</li>
<li>Optional password-less access through the standard WordPress login form.</li>
<li>Ability to disallow password-based access.</li>
</ul>


Login Links – Passwordless Login, Temporary Access Links & Custom Login Form


i tried two other plugins and they were limited to creating links for new users only. This worked great for my use case of sending creds to a client I had already created an account for. 



i think the popup modal with the new link might need some style adjustments on mobile devices. It was tricky to copy the entire link. A copy button would be a help... It might have been there just couldn't see the full width of the modal on my phone.


creates links for existing users

Create secure self-expiring login links for temporary access and guest users, and enable passwordless login for registered ones.

AV 2FA vs Login Links – Passwordless Login, Temporary Access Links & Custom Login Form