Brightery

<p>Brightery Secure 2FA adds a strong second login step for WordPress accounts while staying lightweight in runtime.</p>
<p>Features:</p>
<ul>
<li>Authenticator app (TOTP) support.</li>
<li>Passkeys / WebAuthn support for Touch ID, Face ID, Windows Hello, fingerprint readers, and device PIN.</li>
<li>Role-based enforcement: require selected user groups to enroll.</li>
<li>Forced enrollment page to block protected users until they configure security.</li>
<li>Backup codes.</li>
<li>Encrypted TOTP secret storage using WordPress salts.</li>
<li>Login throttling for repeated primary-login and second-factor failures.</li>
<li>Lightweight audit logs stored inside WordPress options.</li>
<li>Email alerts for enrollment changes and lockouts.</li>
<li>Trusted devices so users can skip 2FA on approved browsers for a limited period.</li>
<li>CSV export for security logs.</li>
<li>Advanced log filters and search.</li>
<li>Custom labels for trusted devices and passkeys.</li>
<li>Optional revocation of other sessions after security changes.</li>
<li>Optional blocking of WordPress application passwords for protected / 2FA-enabled users.</li>
<li>Lightweight runtime: the plugin mostly runs on login, profile, AJAX, settings pages, WooCommerce account pages, and authenticated REST requests.</li>
</ul>
<h3>Important Notes</h3>
<ul>
<li>HTTPS is required for passkeys in production.</li>
<li>This build is optimized for normal interactive WordPress logins and admin access enforcement.</li>
<li>Passkey attestation trust-chain validation is intentionally not enforced in order to remain lightweight and dependency-free.<br />
The plugin still validates challenge, origin, RP ID hash, user presence, optional user verification, signature, and signature counter.</li>
<li>This lightweight build supports ES256 passkeys.</li>
<li>TOTP setup includes a local QR-code renderer so the setup secret stays on your own WordPress site during enrollment.</li>
<li>The plugin stores account-security data such as trusted-device records, passkey metadata, security logs, and a limited recent login-context history.</li>
<li>A privacy-policy suggestion plus WordPress personal-data exporter and eraser integrations are included.</li>
<li>There are no non-GPL third-party runtime libraries bundled with this plugin;<br />
the distributed JavaScript and CSS files are included as human-readable source.</li>
</ul>
<h3>Security Model</h3>
<ul>
<li>TOTP secrets are encrypted before storing in user meta.</li>
<li>Backup codes are stored hashed.</li>
<li>Passkeys verify origin, RP ID hash, challenge, signature, and signature counter.</li>
<li>Rate limiting helps slow repeated login and 2FA guessing attempts.</li>
<li>The plugin can require passkey user verification for biometric/PIN-backed sign-in.</li>
</ul>
<h3>Privacy</h3>
<p>Brightery Secure 2FA stores security-related account data so it can protect logins and help administrators investigate suspicious access.<br />
The plugin adds suggested privacy-policy text to WordPress and registers personal-data exporter/eraser callbacks for the data it stores.</p>
<h3>Source Code and Licensing</h3>
<ul>
<li>All distributed plugin PHP, JS, and CSS files are included as human-readable source.</li>
<li>The local QR renderer is bundled directly in <code>assets/js/bs2fa-qr.js</code> as readable source code.</li>
<li>No non-GPL runtime libraries are required for normal plugin operation.</li>
</ul>


Brightery Secure 2FA

Production-focused two-factor authentication for WordPress with authenticator apps, passkeys, forced enrollment, and advanced session hardening.

intercede01

<p>IMPORTANT: RapID-SL is now deprecated and cannot be used for new installations.<br />
Existing credentials will continue to work until they expire (1 year after issuance) but cannot be renewed.<br />
We would like to thank eveyone who has enjoyed using RapID-SL for the past few years, and will notify our user base should an alternative solution become available.</p>
<p>Enjoy hassle-free and secure user login to WordPress websites and blogs. RapID-SL combines simplicity with a great user experience, removing the need for vulnerable and inconvenient usernames and passwords.</p>
<h3>Benefits</h3>
<ul>
<li>2FA from your phone with unrivalled ease of use.</li>
<li>Up and running in a couple of minutes.</li>
<li>No reliance on an external authentication service.</li>
<li>Doesn’t use vulnerable and clumsy SMS one-time passwords.</li>
<li>Use multiple phones as a backup.</li>
<li>Simple “scan and fingerprint” interface – no need to type anything.</li>
<li>Fast sign-up to blogs and websites.</li>
</ul>
<h3>Features</h3>
<ul>
<li>Easy log-in with your phone: simply scan a QR code using your phone, then provide a fingerprint or PIN – never need personal details or passwords again.</li>
<li>Enterprise-grade cybersecurity technology, using 2048-bit cryptography, trusted by governments and corporations worldwide.</li>
<li>Direct mobile browser login too – just tap the QR code.</li>
<li>Easy install: no coding or special knowledge required.</li>
<li>Customized logon screens supported via simple WordPress “shortcodes”.</li>
<li>Automatic login to multiple accounts on multiple sites from multiple devices with a single app.</li>
</ul>
<p><a href="https://play.google.com/store/apps/details?id=com.intercede.rapidsl&hl=en_GB" rel="nofollow ugc">Download on Google Play</a></p>
<p><a href="https://itunes.apple.com/us/app/rapid-secure-login/id1185934781?mt=8" rel="nofollow ugc">Download on iTunes</a></p>
<h3>Service Platform Requirements</h3>
<ul>
<li>Minimum WordPress version: 4.5</li>
<li>Minimum PHP version: 5.2.4</li>
<li>Minimum OpenSSL version: 1.0.2</li>
</ul>


RapID Secure Login

RapID Secure Login (RapID-SL) is a simple and convenient authentication plugin.

Brightery Secure 2FA vs RapID Secure Login