Avrasys

AV 2FA adds a crucial layer of security to your WordPress login process. After a user successfully enters their password, this plugin sends a unique, time-sensitive verification code to their registered email address. The user must then enter this code to complete the login, effectively protecting their account even if their password is compromised.
The plugin is designed to be lightweight, easy to use, and seamlessly integrated into the WordPress experience.
Key Features:
<ul>
<li>Email-Based 2FA: Sends a 6-digit verification code to the user’s email.</li>
<li>Custom Login URL: Hide your login page by setting a custom login slug. The default wp-login.php becomes inaccessible, protecting against brute force attacks and bots.</li>
<li>Rate Limiting & Account Lockout: Protects against brute force attacks on 2FA codes with configurable thresholds and temporary lockouts.</li>
<li>Progressive Lockout: Automatically increases lockout duration for repeat offenders (2x, 4x, 8x multiplier).</li>
<li>IP-Based Protection: Tracks failed attempts by IP address to prevent distributed attacks.</li>
<li>Email Notifications: Alerts users when their account is locked due to suspicious activity.</li>
<li>Admin Controls: View and manually unlock locked accounts from the settings page.</li>
<li>Customizable Code Validity: Admin can set how long the code is valid for (default is 60 seconds).</li>
<li>User Exclusion List: Easily bypass 2FA for specific users (e.g., admin or integration accounts) by adding their User ID to an exclusion list.</li>
<li>Countdown Timer: The verification screen displays a countdown timer to show the user how much time is left.</li>
<li>Secure & Reliable: Uses WordPress’s built-in mailer and secure practices for code generation and verification.</li>
</ul>

AV 2FA


No Ads, no toplevel menu entry, no unnecessary database tables. This plugin is just how i like it to be, minimalistic and well implemented.


Minimalistic. Just how it should be!

A simple and secure Two-Factor Authentication plugin that sends a verification code to your email.

Sadekur Rahman

Password Less Login is a passwordless and OTP-based login system for WordPress. 
Every user — both existing and new — must verify their identity using a One-Time Password (OTP) sent to their email before being logged in.
This ensures that no one can access an account without confirming ownership of the email address, providing a secure, passwordless authentication process.
<h3>How It Works</h3>
<ol>
<li>The user enters their email address.</li>
<li>The plugin sends a 6-digit OTP to that email.</li>
<li>The user enters the OTP:
<ul>
<li>If the email exists → the user is securely logged in.</li>
<li>If the email is new → the user provides a username, verifies the OTP, and a new account is created automatically.</li>
</ul>
</li>
<li>The OTP is valid for 10 minutes and expires after use.</li>
</ol>
<blockquote>
Note: The plugin never logs in users without OTP verification.
</blockquote>
<h3>Key Features</h3>
<ul>
<li>OTP-Based Authentication for All Users – Both existing and new users must verify the OTP before login.</li>
<li>Passwordless Login – Securely log in using only your email and OTP.</li>
<li>Auto User Registration – New users can register instantly after OTP verification.</li>
<li>Temporary OTP (10 Minutes) – Each OTP expires after 10 minutes and can only be used once.</li>
<li>Rate Limiting – Prevents brute-force or spam OTP requests (maximum 5 per 15 minutes per email).</li>
<li>Nonce Verification – Protects REST API endpoints from unauthorized access.</li>
<li>Secure Email Handling – Emails are hashed when stored in transients to protect user data.</li>
<li>Streamlined User Experience – Clean, minimal login flow with conditional fields for existing vs. new users.</li>
</ul>
<h3>Why Choose Password Less Login?</h3>
<ul>
<li>No passwords to remember or reset.</li>
<li>OTP verification ensures true ownership of email.</li>
<li>Protects against brute-force attacks.</li>
<li>Simple setup – works with the native WordPress login page.</li>
<li>Modern and user-friendly design.</li>
<li>Reduces “Forgot Password” support requests.</li>
</ul>
<h3>Usage</h3>
<ol>
<li>Go to your WordPress login page.</li>
<li>Enter your email address and click “Send OTP”.</li>
<li>Check your email for the OTP.</li>
<li>Enter the OTP in the login form:
<ul>
<li>If your account exists, you’ll be logged in.</li>
<li>If not, you’ll be prompted to provide a username before registration and login.</li>
</ul>
</li>
<li>You’ll be redirected to your dashboard after successful verification.</li>
</ol>
<h3>License</h3>
This plugin is released under the GPL license. You are free to use and modify it.
For support, contact: <a href="mailto:sadekur0rahman@gmail.com" rel="nofollow ugc">sadekur0rahman@gmail.com</a>

Password Less Login

A powerful and easy-to-use WordPress plugin for passwordless and OTP-based login.

AV 2FA vs Password Less Login