WebbPlatsen

joho68

This plugin provides uncomplicated 2FA functionality for WordPress. It will 
allow you to require a second, one time password or OTP, code to be entered 
when certain (or all) users attempt to log in to WordPress.
The plugin supports two factor methods:
<ul>
<li>six-digit codes sent by e-mail</li>
<li>standards-based authenticator apps using TOTP</li>
</ul>
The e-mail code has a limited lifetime (defaults to 15 minutes). Once a code 
has been consumed, it is considered invalid.
Authenticator app setup is handled from the user’s own profile page. The plugin 
provides a QR code, a manual setup key, and recovery codes for when the 
authenticator app is not available.
You may configure that only certain roles are required to use 2FA, and it is 
recommended that you enable 2FA for those users with privileged access.
You may also configure the plugin to allow certain roles to enable an OTP code 
bypass, which will set a cookie in that user’s web browser. The cookies are 
partially based on the username, so several users can share the same browser, 
but still be required to always enter the OTP code, or bypass it if the cookie 
is present.
You can add custom text to the OTP code entry form, and you can add custom text 
to the OTP code e-mail message.
The plugin can be configured to allow it to be handled/managed only by specific 
users, thus making it harder for someone to accidentally or intentionally 
deactivate it. The implemented solution for this is by no means waterproof. If 
someone, for example, has access to your WordPress installation by means of FTP 
or similar, the plugin files can be physically removed (or moved out of your 
WordPress installation), which basically deactivates the plugin as well.
<h3>Credits</h3>
The Cloudbridge 2FA Plugin was written by Joaquim Homrighausen while converting caffeine into code.
Cloudbridge 2FA is sponsored by <a href="https://webbplatsen.se" rel="nofollow ugc">WebbPlatsen i Sverige AB</a>, Sweden.
Commercial support and customizations for this plugin is available from WebbPlatsen i Sverige AB in Sweden.
If you find this plugin useful, the author is happy to receive a donation, good review, or just a kind word.
If there is something you feel to be missing from this plugin, or if you have found a problem with the code or a feature, please do not hesitate to reach out to support@webbplatsen.se.
This plugin can also be downloaded from <a href="https://code.webbplatsen.net/wordpress/cloudbridge-2fa/" rel="nofollow ugc">code.webbplatsen.net</a> and <a href="https://github.com/joho1968/Cloudbridge-2FA" rel="nofollow ugc">GitHub</a>
More detailed documentation is available at <a href="https://code.webbplatsen.net/documentation/cloudbridge-2fa/" rel="nofollow ugc">https://code.webbplatsen.net/documentation/cloudbridge-2fa/</a>
Kudos to Kev Quirk for <a href="https://simplecss.org/" rel="nofollow ugc">Simple CSS</a>
QR code setup on the authenticated profile page uses QR Code Generator for JavaScript by Kazuhiko Arase (MIT license).

Cloudbridge 2FA

Uncomplicated 2FA plugin for WordPress with e-mail OTP and authenticator app support.

Kona Macphee

Fidgety Lizard

PLEASE NOTE: AS OF WP 5.7, THIS PLUGIN IS NO LONGER SUPPORTED.
Since WordPress 4.3, new users are no longer sent their passwords directly by email. Instead, they are sent a message containing a link to the Reset Password page, where they can choose their own password. Additionally, the Reset Password page now appears with a strong password already suggested in the “New password” field.
This plugin removes the suggested password from the Reset Password page, leaving the “New password” field empty. Below this field it adds a “Suggest a password” button whose action is to fetch a new suggested password via Ajax.
Also since 4.3, Firefox and Chrome users may notice problems saving their new password in their browser from the Password Reset page. (Firefox saves the password with an empty username; Chrome sets the username and password to the password value.) This plugin tweaks the password reset form so that these browsers can successfully save the username and newly-reset password if the user wishes.
Note that Internet Explorer, Edge and Safari will not offer to save the password from the Password Reset page, and this plugin does not change that behaviour. Therefore, the plugin adds a configurable warning message to the Password Reset screen, advising users to make a note of their new password.
The form tweaking for Firefox/Chrome and the configurable warning message are enabled by default, but they can be disabled in the administration settings.

Clarify Password Reset

When working with sites with lots of members unfortunately you realise most people are complete idiots.. 
Thanks to this plugin these idiots doesn't assume their password has been reset already to a "sooooo hard" string. I've never experienced the saving issues with chrome and FF so I disabled that but the suggest button is a good softer alternative to prefilled password field. 
Keep up the good work!



Does the trick!

As I had a new member who did not understand how to get his password, I thing the plugin is a very good idea and should inspired WP official team.



very good idea

AS OF WP 5.7, THIS PLUGIN IS NO LONGER NEEDED OR SUPPORTED.
Clears initial suggested password on WP 4.3+ password reset page, and adds a Generate Pass …

Cloudbridge 2FA vs Clarify Password Reset