This plugin activates easy self-service two-factor (or multi-factor) authentication logins for you and all your users.
CryptoPhoto is the world’s easiest-to-use, fastest, and most secure two-factor (and optionally multi-factor) authentication. Logins are usually as fast and easy as “one tap”, and no training is needed.
After installation, users will see a new “CryptoPhoto” dashboard menu item, which they can use themselves to activate and download printable tokens, or install the CryptoPhoto app to connect their smartphones or tablets (iOS, Android, WindowsPhone, and Blackberry).
Our user-experience testing was conducted using year-1 schoolchildren. They all successfully logged in without us giving them any instructions. CryptoPhoto is way easier to use, than it is to describe – but here’s how it works anyway:
After users activate CryptoPhoto, they will see a photo during their logins, and at the same time, their phone (or tablet) will beep and show them a collection of photos too. (if they don’t have any smart devices, or have lost their phone, they use their downloaded paper token instead). To complete their login, they simply tap the one on their phone that matches the login one (or type the codes if they don’t have a phone, or don’t have mobile coverage). This is why CryptoPhoto is currently the worlds most secure two-factor-authentication – the photos create “mutual authentication” (which blocks phishing and Man-in-the-middle MitM attacks) – nobody else does this.
CryptoPhoto also combats malware, viruses, advanced-persistent-threats (APT’s), trojans, keyloggers, phishing and spoof/impostor/fake websites, vishing (telephone phishing), shoulder-surfing attacks, careless password choices by end users, password re-use problems (eg: passwords stolen from other web sites won’t compromise CryptoPhoto users), confidence tricks, and more: we simultaneously protect our users against more threats than any competing solution (and, in fact, against more threats than all competing solutions combined).
CryptoPhoto works with or without smartphones/tablets, works home and abroad, online and offline, and keeps working (securely) even when users loose their phones/tablets. CryptoPhoto is the industries lowest-support-required two-factor-authentication solution: you do not need to hire a support team to mange users enrollments and issues (like bypasses and re-enrollment when users loose their phones/tokens).
To securely install the CryptoPhoto plugin, you will have to follow some steps to generate unique keys for your installation etc. The steps are on in our <a href="https://cryptophoto.com/info/admin" rel="nofollow ugc">Cryptophoto Installation guide</a> if you need help, or have comments/suggestions/criticism, please email us or visit <a href="https://cryptophoto.com/help" rel="nofollow ugc">CryptoPhoto Support page</a>, or feel free to call any time on skype:chrisdrake if you want one-to-one help with anything.
For more information, please visit the <a href="http://cryptophoto.com" rel="nofollow ugc">CryptoPhoto site</a>

CryptoPhoto

This plugin activates easy self-service two-factor (or multi-factor) authentication logins for you and all your users.

ziogaschr

authentiq

stannie

The <a href="https://www.authentiq.com/" rel="nofollow ugc">Authentiq</a> plugin allows users to simply use their phone to authenticate to your WordPress site, share their identity details safely, and sign out again remotely.
This plugin is for admins that are interested in moving beyond username and password, and do not want to burden their users with typing one time codes from SMS or authenticators or other methods that harm the user experience.
The <a href="https://www.authentiq.com/" rel="nofollow ugc">Authentiq</a> service is free (for most use cases) and does not store any user data centrally, but in the Authentiq ID app on the user’s phone instead.
Features:
<ul>
<li>Use Authentiq as a convenience sign in (and sign up) method, or as a secure sign in method.</li>
<li>In the latter case, replacing one time passwords (TOTP) or hardware tokens, option to still accept accounts with classic username & password.</li>
<li>On every sign in, the profile information is explicitly shared by the Authentiq ID app and updated in the WordPress profile, thus keeping it up to date on every sign in.</li>
<li>Visitors to your site that already have the Authentiq ID app installed can simply sign up by scanning a QR code or typing their email address and confirm on their phone.</li>
<li>Block users by (verified) email domain, or limit to specific domains.</li>
<li>Optionally request social accounts, address, and (verified) phone numbers too.</li>
<li>Remote sign out: your users can sign out with their Authentiq ID app, even when they left their session signed in on another computer.</li>
<li>Existing users can activate Authentiq in their profile page for convenience or additional security.</li>
</ul>
You can check our <a href="https://wordpress.demos.authentiq.io/" rel="nofollow ugc">demo site</a>.
<h4>Widget</h4>
You can have an Authentiq sign in button in any widgetized area / sidebar:
<ol>
<li>Go to ‘WordPress Dashboard > Appearance > Widgets’.</li>
<li>Drag and drop the “Authentiq” widget into any widgetized area / sidebar.</li>
<li>Configure settings on the widget and click save.</li>
</ol>
Place and configure as many Authentiq widgets as you want.
<h4>Shortcodes</h4>
The plugin can be placed anywhere in your site using WordPress shortcodes.
The shortcode is <code>[authentiq_login_button]</code>.
Additionally you can set some extra parameters, which are:
<ul>
<li>sign_in_text: Text shown in Authentiq button, when user is not signed in, in order to sign in.</li>
<li>linking_text: Text shown in Authentiq button, when user is signed in, but is not linked with Authentiq yet, in order to link the user account.</li>
<li>sign_out_text: Text shown in Authentiq button, when user is signed in and linked with Authentiq, in order to sign out.</li>
<li>color_scheme: Authentiq button color scheme. Use a number from 0: default, 1: purple, 2: orange, 3: grey, 4: white.</li>
</ul>
Example use: <code>[authentiq_login_button sign_in_text="Login" linking_text="Link your account" sign_out_text="Logout" color_scheme=1]</code>.
You can even place the <a href="http://docs.getshortcodes.com/article/52-using-of-shortcodes-in-template-files" rel="nofollow ugc">shortcode in your template files</a>.

Authentiq

Sign in (and sign up) to WordPress sites using the Authentiq ID app. Strong authentication, without the passwords.

CryptoPhoto vs Authentiq