Brightery

<p>Brightery Secure 2FA adds a strong second login step for WordPress accounts while staying lightweight in runtime.</p>
<p>Features:</p>
<ul>
<li>Authenticator app (TOTP) support.</li>
<li>Passkeys / WebAuthn support for Touch ID, Face ID, Windows Hello, fingerprint readers, and device PIN.</li>
<li>Role-based enforcement: require selected user groups to enroll.</li>
<li>Forced enrollment page to block protected users until they configure security.</li>
<li>Backup codes.</li>
<li>Encrypted TOTP secret storage using WordPress salts.</li>
<li>Login throttling for repeated primary-login and second-factor failures.</li>
<li>Lightweight audit logs stored inside WordPress options.</li>
<li>Email alerts for enrollment changes and lockouts.</li>
<li>Trusted devices so users can skip 2FA on approved browsers for a limited period.</li>
<li>CSV export for security logs.</li>
<li>Advanced log filters and search.</li>
<li>Custom labels for trusted devices and passkeys.</li>
<li>Optional revocation of other sessions after security changes.</li>
<li>Optional blocking of WordPress application passwords for protected / 2FA-enabled users.</li>
<li>Lightweight runtime: the plugin mostly runs on login, profile, AJAX, settings pages, WooCommerce account pages, and authenticated REST requests.</li>
</ul>
<h3>Important Notes</h3>
<ul>
<li>HTTPS is required for passkeys in production.</li>
<li>This build is optimized for normal interactive WordPress logins and admin access enforcement.</li>
<li>Passkey attestation trust-chain validation is intentionally not enforced in order to remain lightweight and dependency-free.<br />
The plugin still validates challenge, origin, RP ID hash, user presence, optional user verification, signature, and signature counter.</li>
<li>This lightweight build supports ES256 passkeys.</li>
<li>TOTP setup includes a local QR-code renderer so the setup secret stays on your own WordPress site during enrollment.</li>
<li>The plugin stores account-security data such as trusted-device records, passkey metadata, security logs, and a limited recent login-context history.</li>
<li>A privacy-policy suggestion plus WordPress personal-data exporter and eraser integrations are included.</li>
<li>There are no non-GPL third-party runtime libraries bundled with this plugin;<br />
the distributed JavaScript and CSS files are included as human-readable source.</li>
</ul>
<h3>Security Model</h3>
<ul>
<li>TOTP secrets are encrypted before storing in user meta.</li>
<li>Backup codes are stored hashed.</li>
<li>Passkeys verify origin, RP ID hash, challenge, signature, and signature counter.</li>
<li>Rate limiting helps slow repeated login and 2FA guessing attempts.</li>
<li>The plugin can require passkey user verification for biometric/PIN-backed sign-in.</li>
</ul>
<h3>Privacy</h3>
<p>Brightery Secure 2FA stores security-related account data so it can protect logins and help administrators investigate suspicious access.<br />
The plugin adds suggested privacy-policy text to WordPress and registers personal-data exporter/eraser callbacks for the data it stores.</p>
<h3>Source Code and Licensing</h3>
<ul>
<li>All distributed plugin PHP, JS, and CSS files are included as human-readable source.</li>
<li>The local QR renderer is bundled directly in <code>assets/js/bs2fa-qr.js</code> as readable source code.</li>
<li>No non-GPL runtime libraries are required for normal plugin operation.</li>
</ul>


Brightery Secure 2FA

Production-focused two-factor authentication for WordPress with authenticator apps, passkeys, forced enrollment, and advanced session hardening.

Rublon

<p>Rublon MFA is a multi-factor authentication (MFA) solution that protects your organization’s data and access to networks, servers, and applications. Rublon MFA provides MFA for cloud apps, VPNs, servers, and Microsoft technologies using authentication methods like <a href="https://rublon.com/product/mobile-push/" rel="nofollow ugc">Mobile Push</a>, <a href="https://rublon.com/product/sms-passcodes/" rel="nofollow ugc">SMS Passcode</a>, <a href="https://rublon.com/product/qr-codes/" rel="nofollow ugc">QR Code</a>, <a href="https://rublon.com/product/security-keys/" rel="nofollow ugc">WebAuthn/U2F Security Keys</a>, and more.</p>
<p>Rublon MFA is easy to use, affordable, and scalable. It helps reduce compliance risk, improve user experience, and reduce costs. Rublon MFA is compatible with a variety of technologies, including but not limited to <a href="https://rublon.com/docs/#vpn" rel="nofollow ugc">VPN</a>, <a href="https://rublon.com/doc/rds/" rel="nofollow ugc">Remote Desktop Services (RDS)</a>, <a href="https://rublon.com/doc/owa/" rel="nofollow ugc">Outlook Web App (OWA)</a>, <a href="https://rublon.com/product/ldap-mfa/" rel="nofollow ugc">LDAP</a>, <a href="https://rublon.com/product/radius-mfa/" rel="nofollow ugc">RADIUS</a>, and <a href="https://rublon.com/doc/wordpress/" rel="nofollow ugc">WordPress</a>.</p>
<h3>Start your <a href="https://admin.rublon.net/auth/register" rel="nofollow ugc">Free 30-Day Trial</a> and see how easy it is to get started with Rublon MFA.</h3>
<h3>To learn more, visit <a href="https://rublon.com/" rel="nofollow ugc">www.rublon.com</a>.</h3>
<blockquote>
<h4>Recommended by Security Experts and Industry Professionals</h4>
<p><em>“The fact that I could speak instantly with tech support while evaluating was super important. Connecting with Rublon technicians via remote sessions was SUPER handy to assist with setting things up.” — <strong>Chris D., Manager of GIS/IT</strong></em> </p>
<p>  <em>“We were able to get Rublon MFA installed, tested, and in use in under a day across all offices.” — <strong>Ethan M. Hospital & Health Care</strong></em> </p>
<p>  <em>“Product was absolutely superb for integrating MFA into our RDS solution very easy to use and the moblie app was brilliant for our end users.” — <strong>Scott L., IT Network Manager</strong></em> </p>
<p>  <em>“we tested a trial version, it was very easy to set up. we got the pricing immediately. other suppliers did not even replied to my email yet and i already implemented Rublon” — <strong>Mihail B., Logistics Manager</strong></em> </p>
<p>  <em>“I searched for a tool for a very specific security need and Rublon filled that need perfectly. Not only does it work every single time as expected, the support and setup are amazing! Highly recommended.” — <strong>Charles D., Financial Services</strong></em> </p>
<p>  <a href="https://rublon.com/customers/" rel="nofollow ugc">Read More</a></p>
</blockquote>
<h4>In What Languages Is Rublon For WordPress Available?</h4>
<ul>
<li>English</li>
<li>German</li>
<li>Japanese (translated by <a href="https://en.digitalcube.jp" rel="nofollow ugc">Digital Cube</a>)</li>
<li>Turkish (translated by Mehmet Emre Baş, proofread by Tarık Çayır)</li>
<li>Polish</li>
</ul>
<blockquote>
<h4>Follow Us</h4>
<p><a href="https://www.facebook.com/RublonApp" rel="nofollow ugc">Facebook</a> | <a href="https://www.linkedin.com/company/2772205" rel="nofollow ugc">LinkedIn</a> | <a href="https://twitter.com/rublon" rel="nofollow ugc">Twitter</a></p>
</blockquote>
<h3>Legal notice</h3>
<p>I have read and agree to the <a href="https://legal.rublon.com/tos" rel="nofollow ugc">Terms of Service</a> and <a href="https://legal.rublon.com/privacy" rel="nofollow ugc">Privacy Policy</a> before installing the Rublon WordPress Plugin.</p>


Rublon Multi-Factor Authentication (MFA)

Instant account security with effortless multi-factor authentication via Mobile Push, Mobile Passcode (TOTP), WebAuthn/U2F Security Keys, and more.

Brightery Secure 2FA vs Rublon Multi-Factor Authentication (MFA)