BaseCloud

BaseCloud Shield is a lightweight yet powerful security plugin that enforces Two-Factor Authentication (2FA) on your WordPress login page. Unlike other bloat-heavy plugins, BaseCloud Shield focuses on reliability and flexibility in OTP delivery.
Key Features:
<ul>
<li>Plug & Play: Works immediately using standard WordPress email delivery.</li>
<li>Multi-Recipient System: Send OTPs to the logging-in user, a manager email, or selected users.</li>
<li>Multi-Channel Delivery: Choose multiple delivery methods simultaneously (Email, SendGrid, WhatsApp, SMS, Webhook).</li>
<li>WhatsApp Integration: Send OTPs directly via WhatsApp using Twilio API.</li>
<li>SMS Integration: Deliver OTPs via SMS using Twilio API.</li>
<li>SendGrid API V3: Native integration for high-deliverability emails.</li>
<li>Webhook Support: Connect to custom webhooks for advanced automation flows.</li>
<li>Secure OTPs: 6-digit one-time passwords that expire automatically.</li>
<li>Browser Trust: “Remember this device” functionality to reduce friction for authorized users.</li>
<li>Advanced Attack Protection (v1.4.2): Credential stuffing detection, progressive delays, username enumeration protection.</li>
</ul>
<h3>External Services</h3>
This plugin may connect to external third-party services depending on your configuration. Below is a detailed explanation of what services are used, what data is sent, and when:
SendGrid Email API (Optional)
If you select “SendGrid API” as your delivery method in the plugin settings, this plugin will send data to SendGrid’s email service to deliver one-time password (OTP) codes.
<ul>
<li>Service: SendGrid by Twilio</li>
<li>What it’s used for: Sending two-factor authentication codes via email with improved deliverability</li>
<li>When data is sent: Every time a user attempts to log in and 2FA is enabled</li>
<li>Data sent:
<ul>
<li>Recipient email address (user’s email or manager email if configured)</li>
<li>Sender email address (configured in plugin settings)</li>
<li>Site name</li>
<li>Username attempting to log in</li>
<li>6-digit one-time password code</li>
<li>Email subject and HTML body</li>
</ul>
</li>
<li>API Endpoint: https://api.sendgrid.com/v3/mail/send</li>
<li>Terms of Service: https://www.twilio.com/legal/tos</li>
<li>Privacy Policy: https://www.twilio.com/legal/privacy</li>
</ul>
Important: You must have a SendGrid account and API key to use this feature. You are responsible for complying with SendGrid’s terms of service and ensuring proper data handling practices.
Twilio API for WhatsApp & SMS (Optional)
If you select “WhatsApp” or “SMS” as delivery methods, the plugin will send data to Twilio’s API to deliver one-time password codes.
<ul>
<li>Service: Twilio</li>
<li>What it’s used for: Sending two-factor authentication codes via WhatsApp and/or SMS</li>
<li>When data is sent: Every time a user attempts to log in and 2FA is enabled with WhatsApp/SMS selected</li>
<li>Data sent:
<ul>
<li>Recipient phone number (from user meta field ‘billing_phone’)</li>
<li>Sender phone number (WhatsApp number or SMS number configured in settings)</li>
<li>Site name</li>
<li>Username attempting to log in</li>
<li>6-digit one-time password code</li>
<li>Message body</li>
</ul>
</li>
<li>API Endpoint: https://api.twilio.com/2010-04-01/Accounts/{AccountSid}/Messages.json</li>
<li>Terms of Service: https://www.twilio.com/legal/tos</li>
<li>Privacy Policy: https://www.twilio.com/legal/privacy</li>
</ul>
Important: You must have a Twilio account with WhatsApp and/or SMS capabilities enabled. Phone numbers must be stored in user meta (field: ‘billing_phone’). You are responsible for complying with Twilio’s terms of service.
Custom Webhook (Optional)
If you select “Webhook” as a delivery method, the plugin will send login notification data to a webhook URL you configure.
<ul>
<li>Service: Custom webhook endpoint (configured by you)</li>
<li>What it’s used for: Sending login notifications to external systems for custom processing</li>
<li>When data is sent: Every time a user attempts to log in and 2FA is enabled</li>
<li>Data sent:
<ul>
<li>Site name</li>
<li>Username attempting to log in</li>
<li>User email address</li>
<li>6-digit one-time password code</li>
<li>Recipient information array</li>
<li>Timestamp of login attempt</li>
</ul>
</li>
<li>Endpoint: User-configured webhook URL</li>
</ul>
Important: When using the webhook option, you are responsible for the security and privacy compliance of the endpoint you configure. Ensure your webhook endpoint uses HTTPS and follows proper data protection practices.
Standard WordPress Email (Default)
By default, this plugin uses WordPress’s built-in <code>wp_mail()</code> function, which does not involve any external services unless your WordPress installation is configured to use a third-party SMTP service.

BaseCloud Shield

Enterprise-grade Two-Factor Authentication (2FA) with support for Email, SendGrid API, Webhooks, WhatsApp, and SMS delivery.

Rublon

Rublon MFA is a multi-factor authentication (MFA) solution that protects your organization’s data and access to networks, servers, and applications. Rublon MFA provides MFA for cloud apps, VPNs, servers, and Microsoft technologies using authentication methods like <a href="https://rublon.com/product/mobile-push/" rel="nofollow ugc">Mobile Push</a>, <a href="https://rublon.com/product/sms-passcodes/" rel="nofollow ugc">SMS Passcode</a>, <a href="https://rublon.com/product/qr-codes/" rel="nofollow ugc">QR Code</a>, <a href="https://rublon.com/product/security-keys/" rel="nofollow ugc">WebAuthn/U2F Security Keys</a>, and more.
Rublon MFA is easy to use, affordable, and scalable. It helps reduce compliance risk, improve user experience, and reduce costs. Rublon MFA is compatible with a variety of technologies, including but not limited to <a href="https://rublon.com/docs/#vpn" rel="nofollow ugc">VPN</a>, <a href="https://rublon.com/doc/rds/" rel="nofollow ugc">Remote Desktop Services (RDS)</a>, <a href="https://rublon.com/doc/owa/" rel="nofollow ugc">Outlook Web App (OWA)</a>, <a href="https://rublon.com/product/ldap-mfa/" rel="nofollow ugc">LDAP</a>, <a href="https://rublon.com/product/radius-mfa/" rel="nofollow ugc">RADIUS</a>, and <a href="https://rublon.com/doc/wordpress/" rel="nofollow ugc">WordPress</a>.
<h3>Start your <a href="https://admin.rublon.net/auth/register" rel="nofollow ugc">Free 30-Day Trial</a> and see how easy it is to get started with Rublon MFA.</h3>
<h3>To learn more, visit <a href="https://rublon.com/" rel="nofollow ugc">www.rublon.com</a>.</h3>
<blockquote>
<h4>Recommended by Security Experts and Industry Professionals</h4>
“The fact that I could speak instantly with tech support while evaluating was super important. Connecting with Rublon technicians via remote sessions was SUPER handy to assist with setting things up.” — Chris D., Manager of GIS/IT 
 “We were able to get Rublon MFA installed, tested, and in use in under a day across all offices.” — Ethan M. Hospital & Health Care 
 “Product was absolutely superb for integrating MFA into our RDS solution very easy to use and the moblie app was brilliant for our end users.” — Scott L., IT Network Manager 
 “we tested a trial version, it was very easy to set up. we got the pricing immediately. other suppliers did not even replied to my email yet and i already implemented Rublon” — Mihail B., Logistics Manager 
 “I searched for a tool for a very specific security need and Rublon filled that need perfectly. Not only does it work every single time as expected, the support and setup are amazing! Highly recommended.” — Charles D., Financial Services 
 <a href="https://rublon.com/customers/" rel="nofollow ugc">Read More</a>
</blockquote>
<h4>In What Languages Is Rublon For WordPress Available?</h4>
<ul>
<li>English</li>
<li>German</li>
<li>Japanese (translated by <a href="https://en.digitalcube.jp" rel="nofollow ugc">Digital Cube</a>)</li>
<li>Turkish (translated by Mehmet Emre Baş, proofread by Tarık Çayır)</li>
<li>Polish</li>
</ul>
<blockquote>
<h4>Follow Us</h4>
<a href="https://www.facebook.com/RublonApp" rel="nofollow ugc">Facebook</a> | <a href="https://www.linkedin.com/company/2772205" rel="nofollow ugc">LinkedIn</a> | <a href="https://twitter.com/rublon" rel="nofollow ugc">Twitter</a>
</blockquote>
<h3>Legal notice</h3>
I have read and agree to the <a href="https://legal.rublon.com/tos" rel="nofollow ugc">Terms of Service</a> and <a href="https://legal.rublon.com/privacy" rel="nofollow ugc">Privacy Policy</a> before installing the Rublon WordPress Plugin.

Rublon Multi-Factor Authentication (MFA)

Instant account security with effortless multi-factor authentication via Mobile Push, Mobile Passcode (TOTP), WebAuthn/U2F Security Keys, and more.

BaseCloud Shield vs Rublon Multi-Factor Authentication (MFA)