WebbPlatsen

joho68

<p>This plugin provides uncomplicated 2FA functionality for WordPress. It will<br />
allow you to require a second, one time password or OTP, code to be entered<br />
when certain (or all) users attempt to log in to WordPress.</p>
<p>The plugin supports two factor methods:</p>
<ul>
<li>six-digit codes sent by e-mail</li>
<li>standards-based authenticator apps using TOTP</li>
</ul>
<p>The e-mail code has a limited lifetime (defaults to 15 minutes). Once a code<br />
has been consumed, it is considered invalid.</p>
<p>Authenticator app setup is handled from the user’s own profile page. The plugin<br />
provides a QR code, a manual setup key, and recovery codes for when the<br />
authenticator app is not available.</p>
<p>You may configure that only certain roles are required to use 2FA, and it is<br />
recommended that you enable 2FA for those users with privileged access.</p>
<p>You may also configure the plugin to allow certain roles to enable an OTP code<br />
bypass, which will set a cookie in that user’s web browser. The cookies are<br />
partially based on the username, so several users can share the same browser,<br />
but still be required to always enter the OTP code, or bypass it if the cookie<br />
is present.</p>
<p>You can add custom text to the OTP code entry form, and you can add custom text<br />
to the OTP code e-mail message.</p>
<p>The plugin can be configured to allow it to be handled/managed only by specific<br />
users, thus making it harder for someone to accidentally or intentionally<br />
deactivate it. The implemented solution for this is by no means waterproof. If<br />
someone, for example, has access to your WordPress installation by means of FTP<br />
or similar, the plugin files can be physically removed (or moved out of your<br />
WordPress installation), which basically deactivates the plugin as well.</p>
<h3>Credits</h3>
<p>The Cloudbridge 2FA Plugin was written by Joaquim Homrighausen while converting caffeine into code.</p>
<p>Cloudbridge 2FA is sponsored by <a href="https://webbplatsen.se" rel="nofollow ugc">WebbPlatsen i Sverige AB</a>, Sweden.</p>
<p>Commercial support and customizations for this plugin is available from WebbPlatsen i Sverige AB in Sweden.</p>
<p>If you find this plugin useful, the author is happy to receive a donation, good review, or just a kind word.</p>
<p>If there is something you feel to be missing from this plugin, or if you have found a problem with the code or a feature, please do not hesitate to reach out to support@webbplatsen.se.</p>
<p>This plugin can also be downloaded from <a href="https://code.webbplatsen.net/wordpress/cloudbridge-2fa/" rel="nofollow ugc">code.webbplatsen.net</a> and <a href="https://github.com/joho1968/Cloudbridge-2FA" rel="nofollow ugc">GitHub</a></p>
<p>More detailed documentation is available at <a href="https://code.webbplatsen.net/documentation/cloudbridge-2fa/" rel="nofollow ugc">https://code.webbplatsen.net/documentation/cloudbridge-2fa/</a></p>
<p>Kudos to Kev Quirk for <a href="https://simplecss.org/" rel="nofollow ugc">Simple CSS</a></p>
<p>QR code setup on the authenticated profile page uses QR Code Generator for JavaScript by Kazuhiko Arase (MIT license).</p>


Cloudbridge 2FA

Uncomplicated 2FA plugin for WordPress with e-mail OTP and authenticator app support.

Michael Finkenberger

<p><strong>WP Access Control Center</strong> is a powerful security control center for WordPress administrators who want full control over authentication, sessions, and password policies.</p>
<p>Take control of your site’s access layer with real-time session monitoring, flexible two-factor authentication, and powerful emergency tools — all in one place.</p>
<h3>🛡️ Security Overview Dashboard 📊</h3>
<ul>
<li>General indicator about the current site security status</li>
<li>Status overview about the most important security settings</li>
<li>Live view of main session KPIs (refresh: 5s)</li>
<li>Next step recommendations to get your site more secure</li>
<li>Can be made <em>sticky</em> to stay visible when scrolling down</li>
</ul>
<h3>🔐 Two-Factor Protection</h3>
<ul>
<li>Email-based verification codes</li>
<li>TOTP support (Google Authenticator, Microsoft Authenticator, Authy, etc.)</li>
<li>Role-based enforcement</li>
<li>Grace periods for smooth rollout</li>
<li>Backup codes for account recovery</li>
<li>Trusted devices to reduce login friction</li>
</ul>
<h3>👁️ Live Session Control</h3>
<ul>
<li>Real-time overview of all active sessions (AJAX-powered)</li>
<li>Inspect session details and parameters</li>
<li>Instantly terminate individual or all sessions</li>
<li>Monitor user activity as it happens</li>
</ul>
<h3>🔑 Password Policies</h3>
<ul>
<li>Enforce password strength requirements</li>
<li>Prevent password reuse</li>
<li>Define role-based password expiration</li>
<li>Real-time feedback during password creation</li>
</ul>
<h3>⚡ Bulk Password Reset</h3>
<ul>
<li>Reset passwords for roles or selected users</li>
<li>Optionally terminate related sessions</li>
<li>Automatic email notifications (fully customizable)</li>
</ul>
<h3>🔄 Security Key Rotation</h3>
<ul>
<li>One-click regeneration of WordPress KEYs & SALTs</li>
<li>Immediately invalidates all active sessions</li>
<li>Essential for incident response</li>
</ul>
<h3>⏱️ Advanced Session Control</h3>
<ul>
<li>Configure session lifetime per role</li>
<li>Separate rules for “Remember Me”</li>
<li>Automatic cleanup of expired sessions</li>
</ul>
<h3>🎨 Login Experience Designer</h3>
<ul>
<li>Customize the 2FA login page</li>
<li>Background images (outer & inner)</li>
<li>Flexible CSS customization</li>
<li>Safe defaults – no changes unless configured</li>
</ul>
<p><strong>No external services required.</strong> Everything runs locally within your WordPress installation.</p>


WP Access Control Center

Take full control over authentication, sessions, and password security in WordPress – including real-time session monitoring, 2FA, and emergency tools

Cloudbridge 2FA vs WP Access Control Center