Enrico Rossomando

Whenever you try to login into your website, you can use this plugin to trasmit your password encrypted. The encryption process is done by the Chap protocol; this is particularly useful when you can’t use ssl or other kinds of secure protocols. By activating the ChapSecureLogin plugin, the only information transmitted unencrypted is the username; password is hided with a random number (nonce) generated by the session – and opportunely transformed by the SHA-256 algorithm. 
In the first login there will be an error, but don’t worry is only a tecnical error. Indeed in the next login’s operation, if the values are correct, there will not be errors, but you give mind because the password will sended in unencrypted way. 
If you want more details about this algorithm, check <a href="http://www.devarticles.com/c/a/JavaScript/Building-a-CHAP-Login-System-An-ObjectOriented-Approach/" rel="nofollow ugc">“Building a CHAP Login System”</a>. 
This is a zero-configuration plugin.
Enrico Rossomando (redsend) this is my blog about programming, gaming and startup > <a href="https://www.mrred.it/" title="Blog about programming, gaming and startup" rel="nofollow ugc">https://www.mrred.it</a>

Chap Secure Password Login

Do not show password, during login, on an insecure channel (without SSL). Use a SHA-256 hash algorithm.

Duo Security

Duo Security provides two-factor authentication as a service to protect against account takeover and data theft. Using the Duo plugin you can easily add Duo two-factor authentication to your WordPress website in just a few minutes!
Rather than relying on a password alone, which can be phished or guessed, Duo’s authentication service adds a second layer of security to your WordPress accounts. Duo enables your admins or users to verify their identities using something they have—like their mobile phone or a hardware token—which provides strong authentication and dramatically enhances account security.
Duo is easy to setup and use. With Duo there’s no extra hardware or complicated software to install, just sign up for Duo’s service and install the plugin. Then you can set which user roles you want to enable two-factor authentication for—admins, editors, authors, contributors, and/or subscribers—without setting up user accounts, directory synchronization, servers, or hardware.
When they log in, your users have multiple ways they can authenticate, including:
<ul>
<li>One-tap authentication using Duo’s mobile app (our fastest, easiest way to authenticate)</li>
<li>One-time passcodes generated by Duo’s mobile app (works even with no cell coverage)</li>
<li>One-time passcodes delivered to any SMS-enabled phone (works even with no cell coverage)</li>
<li>Phone callback to any phone (mobile or landline!)</li>
<li>One-time passcodes generated by an OATH-compliant hardware token (if you’re feeling all old school)</li>
</ul>
Protect your WordPress website in minutes with Duo.
<h3>End of Support Notice</h3>
Support for the traditional Duo Prompt experience using the Duo WordPress plugin ended on September 30, 2024. Please use the new <a href="https://wordpress.org/plugins/duo-universal/" rel="ugc">Duo Universal plugin for WordPress</a>. Read more about the End of Suppport and migration to the new plugin on our <a href="https://duo.com/docs/wordpress" rel="nofollow ugc">Duo for WordPress – Duo Universal Prompt</a> documentation page

Duo Two-Factor Authentication

Easily add Duo Security two-factor authentication to your WordPress website. Enable two-factor authentication for your admins and/or users.

Chap Secure Password Login vs Duo Two-Factor Authentication