Brightery

Brightery Secure 2FA adds a strong second login step for WordPress accounts while staying lightweight in runtime.
Features:
<ul>
<li>Authenticator app (TOTP) support.</li>
<li>Passkeys / WebAuthn support for Touch ID, Face ID, Windows Hello, fingerprint readers, and device PIN.</li>
<li>Role-based enforcement: require selected user groups to enroll.</li>
<li>Forced enrollment page to block protected users until they configure security.</li>
<li>Backup codes.</li>
<li>Encrypted TOTP secret storage using WordPress salts.</li>
<li>Login throttling for repeated primary-login and second-factor failures.</li>
<li>Lightweight audit logs stored inside WordPress options.</li>
<li>Email alerts for enrollment changes and lockouts.</li>
<li>Trusted devices so users can skip 2FA on approved browsers for a limited period.</li>
<li>CSV export for security logs.</li>
<li>Advanced log filters and search.</li>
<li>Custom labels for trusted devices and passkeys.</li>
<li>Optional revocation of other sessions after security changes.</li>
<li>Optional blocking of WordPress application passwords for protected / 2FA-enabled users.</li>
<li>Lightweight runtime: the plugin mostly runs on login, profile, AJAX, settings pages, WooCommerce account pages, and authenticated REST requests.</li>
</ul>
<h3>Important Notes</h3>
<ul>
<li>HTTPS is required for passkeys in production.</li>
<li>This build is optimized for normal interactive WordPress logins and admin access enforcement.</li>
<li>Passkey attestation trust-chain validation is intentionally not enforced in order to remain lightweight and dependency-free. 
The plugin still validates challenge, origin, RP ID hash, user presence, optional user verification, signature, and signature counter.</li>
<li>This lightweight build supports ES256 passkeys.</li>
<li>TOTP setup includes a local QR-code renderer so the setup secret stays on your own WordPress site during enrollment.</li>
<li>The plugin stores account-security data such as trusted-device records, passkey metadata, security logs, and a limited recent login-context history.</li>
<li>A privacy-policy suggestion plus WordPress personal-data exporter and eraser integrations are included.</li>
<li>There are no non-GPL third-party runtime libraries bundled with this plugin; 
the distributed JavaScript and CSS files are included as human-readable source.</li>
</ul>
<h3>Security Model</h3>
<ul>
<li>TOTP secrets are encrypted before storing in user meta.</li>
<li>Backup codes are stored hashed.</li>
<li>Passkeys verify origin, RP ID hash, challenge, signature, and signature counter.</li>
<li>Rate limiting helps slow repeated login and 2FA guessing attempts.</li>
<li>The plugin can require passkey user verification for biometric/PIN-backed sign-in.</li>
</ul>
<h3>Privacy</h3>
Brightery Secure 2FA stores security-related account data so it can protect logins and help administrators investigate suspicious access. 
The plugin adds suggested privacy-policy text to WordPress and registers personal-data exporter/eraser callbacks for the data it stores.
<h3>Source Code and Licensing</h3>
<ul>
<li>All distributed plugin PHP, JS, and CSS files are included as human-readable source.</li>
<li>The local QR renderer is bundled directly in <code>assets/js/bs2fa-qr.js</code> as readable source code.</li>
<li>No non-GPL runtime libraries are required for normal plugin operation.</li>
</ul>

Brightery Secure 2FA

Production-focused two-factor authentication for WordPress with authenticator apps, passkeys, forced enrollment, and advanced session hardening.

swoopbrandon

The 1-Click Login WordPress plugin is a simple and secure passwordless authentication service. Imagine a world where your users are free to securely come and go from anywhere on your website without a password. We are passionate about the freedom that comes with eliminating passwords—and we believe you will be, too, once you download and install 1-Click Login: Passwordless Authentication.
What is 1-Click Login?
1-Click Login is the easiest way for your users to access your content. 
We’ve eliminated the hassle of the password so more people will use your app.
Who Is 1-Click Login For?
1-Click Login is for anyone who wants to simply and securely eliminate passwords from their website. If you’re reading this description, you should install the 1-Click Login plugin to secure the administration of your WordPress website.
But why stop there? 1-Click Login is perfect for eliminating passwords from your user registration and login process entirely. Here are a few of the ways we’ve seen others find success with 1-Click Login.
<ul>
<li>
WordPress Website Developers: Make your life easier by installing 1-Click Login on each of your websites so you can securely access each web property with one click.
</li>
<li>
Digital Marketers: Sales is going to love you after installing 1-Click Login. Provide verified emails that you know work with every registration.
</li>
<li>
Conversion Rate Optimizers: Reduce registration form abandonment rates by eliminating a “required” password field.
</li>
<li>
Product Designers: Incorporate 1-Click Login into your registration and login process for a friction-free experience. Less steps. More secure. More access.
</li>
<li>
Bloggers: Register your visitors with ease and provide a frictionless paywall for your gated content.
</li>
<li>
CISO: Passwords are insecure. That’s why our technology is being used by some of the most well-known technology companies.
</li>
<li>
Customer Success & Support Managers: Never reset a password again. Eliminate low-value/high-cost call center calls, emails and chats, and enable the resources you have to focus on high-value activities that can really help your customers succeed.
</li>
</ul>
Why 1-Click Login?
Passwords are antiquated and insecure. At this point, we’ve all had our passwords hijacked by hackers. So what are we left with? Continue to recycle a series of passwords we can easily remember? Use a password vault to store unique passwords for each website? Or, we can eliminate the password problem entirely with 1-Click Login.
1-Click Login also helps you:
Convert.
<ul>
<li>Increasing customer acquisition can be challenging. With 1-Click Login, you’ll increase visitor conversion by eliminating passwords from your registration process.</li>
</ul>
Verify.
<ul>
<li>No more bots. 1-Click Login only accepts verified user email accounts, producing higher-quality signups and submissions to help you to know who your users are.</li>
</ul>
Secure.
<ul>
<li>Patented authentication protocol leverages a combination of DKIM, SPF and our own special sauce to ensure the integrity of each authentication request.</li>
<li>1-Click Login replaces the centralized storage of passwords with digital signatures and tokenized authentication.</li>
<li>With no passwords to get hacked or compromised, organizations dramatically reduce their liability caused by data breaches and phishing scams.</li>
</ul>
Access.
<ul>
<li>1-Click Connect makes secure authorization a breeze for returning users.</li>
<li>With 1-Click Login configured on your site, you’ll never reset a password again.</li>
</ul>
How It Works:
<ol>
<li>Download, install and configure the plugin in about 5 minutes.</li>
<li>We automatically add the “Log in with 1-Click” button to your WP admin login page. This is great for internal/external access to administer your WordPress site.</li>
<li>Add the “Log in with 1-Click” button anywhere you want with a short code <code>[swoop_login]</code>.</li>
<li>You can also add the 1-Click Login service to any call to action by following the instructions in our <a href="https://docs.swoopnow.com/" rel="nofollow ugc">developer documentation</a>.</li>
<li>The “Log in with 1-Click” button calls out to the 1-Click Login authentication service to enable passwordless access to your WordPress account and website.</li>
</ol>
After initial authorization, 1-Click Login will securely cookie your end users if you’ve enabled 1-Click Connect authorization on your website. The next time your end users return to your website, they’ll be able to authenticate by selecting the email address that’s registered with your site—in just one click.
Privacy Policy 
1-Click Login does not store any of your user’s data, we simply authenticate user’s email addresses and WordPress directs the user to your content. 1-Click Login does not use the user’s email addresses for marketing purposes. For more information on 1-Click Logins terms of service and privacy policy please visit our <a href="https://swoopnow.com/legal/" rel="nofollow ugc">legal page</a>.
Protected Pages for Gated Content: 
With 1-Click Login, you can also protect any page in your WordPress site without passwords. The 1-Click Login Protected Page feature allows you to control who can view or access content on a specific page within your site, such as a private blog post or resource download page. 1-Click Login’s email-based authentication lets you grant select access to your content without making your site visitors create (and forget) yet another password.
<h3>Analytics</h3>
Enjoy cool analytics for free!
Support:
For plugin and product support, please email us at: <a href="mailto:support@swoopnow.com" rel="nofollow ugc">support@swoopnow.com</a> 
Additional documentation can also be found on our <a href="https://docs.swoopnow.com/" rel="nofollow ugc">developer documentation website</a>.
We look forward to securing your website without passwords!

1-Click Login: Passwordless Authentication

This plugin was quick to install/configure. Ill be using it across all of my client sites for sure. 

I think the setup process could be improved a la OAuth, but otherwise pretty solid.

Pretty Slick


The documentation doesn't match the UI in WordPress at all, and I couldn't figure out how to set it up.


Needs lots of documentation updating

The 1-Click Login WordPress plugin is a simple and secure passwordless authentication service.

Brightery Secure 2FA vs 1-Click Login: Passwordless Authentication