joho68

WebbPlatsen

This plugin provides uncomplicated 2FA plugin for WordPress. It will allow you 
to require a second, one time password or OTP, code to be entered when certain 
(or all) users attempt to log in to WordPress.
It will send a six-digit code via e-mail to the user attempting to log in. The 
code has a limited lifetime (defaults to 15 minutes). Once a code has been 
consumed, it is considered invalid.
You may configure that only certain roles are required to use 2FA, and it is 
recommended that you enable 2FA for those users with privileged access.
You may also configure the plugin to allow certain roles to enable an OTP code 
bypass, which will set a cookie in that user’s web browser. The cookies are 
partially based on the username, so several users can share the same browser, 
but still be required to always enter the OTP code, or bypass it if the cookie 
is present.
You can add custom text to the OTP code entry form, and you can add custom text 
to the OTP code e-mail message.
The plugin can be configured to allow it to be handled/managed only by specific 
users, thus making it harder for someone to accidentally or intentionally 
deactivate it. The implemented solution for this is by no means waterproof. If 
someone, for example, has access to your WordPress installation by means of FTP 
or similar, the plugin files can be physically removed (or moved out of your 
WordPress installation), which basically deactivates the plugin as well.
<h3>Credits</h3>
The Cloudbridge 2FA Plugin was written by Joaquim Homrighausen while converting caffeine into code.
Cloudbridge 2FA is sponsored by <a href="https://webbplatsen.se" rel="nofollow ugc">WebbPlatsen i Sverige AB</a>, Sweden.
Commercial support and customizations for this plugin is available from WebbPlatsen i Sverige AB in Sweden.
If you find this plugin useful, the author is happy to receive a donation, good review, or just a kind word.
If there is something you feel to be missing from this plugin, or if you have found a problem with the code or a feature, please do not hesitate to reach out to support@webbplatsen.se.
This plugin can also be downloaded from <a href="https://code.webbplatsen.net/wordpress/cloudbridge-2fa/" rel="nofollow ugc">code.webbplatsen.net</a> and <a href="https://github.com/joho1968/Cloudbridge-2FA" rel="nofollow ugc">GitHub</a>
More detailed documentation is available at <a href="https://code.webbplatsen.net/documentation/cloudbridge-2fa/" rel="nofollow ugc">https://code.webbplatsen.net/documentation/cloudbridge-2fa/</a>
Kudos to Kev Quirk for <a href="https://simplecss.org/" rel="nofollow ugc">Simple CSS</a>

Cloudbridge 2FA

Uncomplicated 2FA plugin for WordPress. Tested with WordPress 5.5+ and PHP 7.4+.

edward_plainview

Prevent password resets or changes to specific users or user roles. User-specific exceptions to the sweeping user roles can be set. The user’s password is then protected from modification:
<ul>
<li>In the user’s profile editor</li>
<li>Using the password reset link in the login window</li>
</ul>
The settings are available to either the super admin on the network, or normal admins on a single installation. If you wish to hide the settings completely, put the following in your wp-config.php:
<pre><code>define( 'PLAINVIEW_PROTECT_PASSWORDS_HIDE', true );
</code></pre>
Requires PHP 5.4.

Plainview Protect Passwords

I love that is works well with network sites so I don't have to replicate my settings across each of my sites. 

The only issue I ran into is that only network roles are added to the network settings. Maybe it's by design, but it would be awesome if it picked up the roles from the sites because that is where plugins like User Role Editor and WooCommerce have registered them. In order to protect these I would have to modify the settings for each of my network sites separately. Annoying but totally doable. 

Thanks for the quick and easy solution today!

Gets the job done

Selectively protect passwords from being reset or modified.

Cloudbridge 2FA vs Plainview Protect Passwords