Lucas Catão Moraes

Este plugin substitui o formulário de login padrão do WordPress por um sistema de autenticação sem senha mais seguro.
Recursos principais: 
* Login sem senha via link seguro enviado por e-mail 
* Autenticação de dois fatores (2FA) via TOTP (Google Authenticator, Authy, etc.) 
* Códigos de backup para recuperação de acesso 
* Verificação de IP para segurança adicional 
* Rate limiting para prevenir ataques de força bruta 
* Painel de configurações completo no wp-admin 
* Opção de tornar 2FA obrigatório para perfis específicos
O link de login expira imediatamente após o primeiro uso ou após o tempo configurado (padrão 15 minutos). A autenticação só é permitida pelo mesmo IP que solicitou o login.

Dolutech Passwordless Login

Permite login seguro sem senha com tecnologia passwordless e autenticação de dois fatores (2FA) via TOTP.

Ateeq

Easy Secure Login enhances your site’s security by integrating two powerful Google authentication methods: Google Sign-In and Google One Tap. It can optionally replace the standard WordPress password system entirely, offering a modern, passwordless login experience.
Born out of necessity after a real-world brute-force attack, this plugin was designed with the option to enforce a Google-only login policy, ensuring that only verified Google accounts can access your site. It combines robust, Google-powered security with a beautiful user interface, automatic user management, and a step-by-step setup wizard.
<h3>Key Features</h3>
<ul>
<li>Optional Passwordless Security: Ability to completely disable standard password logins, forcing all users to authenticate via Google’s secure OAuth 2.0.</li>
<li>Role-Based Redirects: Define custom landing pages for different user roles. Redirect subscribers to your homepage or a custom dashboard while keeping admins in wp-admin.</li>
<li>Google Sign-In Button: A clean, modern “Continue with Google” button on your login page.</li>
<li>Google One Tap: Allows logged-in Google users to sign in instantly with a single click via a non-intrusive pop-up.</li>
<li>Complete User Management: Whitelist specific Google accounts and assign roles, or allow open registration for any Google user.</li>
<li>Google Profile Picture Sync: Automatically syncs and displays Google profile pictures as user avatars in WordPress.</li>
<li>Built-in Security Hardening:
<ul>
<li>Disable XML-RPC to prevent common attacks.</li>
<li>Disable the plugin and theme file editor.</li>
<li>Hide your WordPress version number.</li>
<li>Restrict REST API access to logged-in users.</li>
<li>Block direct access to sensitive core files.</li>
</ul>
</li>
<li>User-Friendly Setup Wizard: A clean, multi-step guide to get your Google Cloud credentials configured in minutes.</li>
<li>Actively Maintained for the latest WordPress versions.</li>
</ul>
This plugin provides maximum login security while dramatically improving the user experience.
<h3>External services</h3>
This plugin uses Google’s Identity Services to provide a secure authentication method (Google Sign-In and Google One Tap). To function, it connects to several Google APIs.
<ul>
<li>Service: Google Identity Services (accounts.google.com)</li>
<li>Purpose: This service is used to display the “Sign in with Google” button and the Google One Tap prompt. It handles the user authentication process directly in the user’s browser.</li>
<li>Data Sent: This plugin initiates the authentication flow, but user data (like email and password) is entered directly on Google’s domain, not through this plugin. The plugin only receives a secure authentication token from Google after a successful login.</li>
<li>
Terms and Policies:
<ul>
<li>Google Terms of Service: https://policies.google.com/terms</li>
<li>Google Privacy Policy: https://policies.google.com/privacy</li>
</ul>
</li>
<li>
Service: Google OAuth & People APIs (oauth2.googleapis.com, www.googleapis.com)
</li>
<li>Purpose: After a user authenticates, the plugin’s server sends the received authentication token/code to these Google APIs to verify its authenticity and retrieve basic user profile information (email, name, profile picture).</li>
<li>Data Sent: An authentication token/code provided by Google is sent from your server to Google’s servers for validation.</li>
<li>Terms and Policies:
<ul>
<li>Google APIs Terms of Service: https://developers.google.com/terms</li>
</ul>
</li>
</ul>

Easy Secure Login – Google One Tap & Sign-In

Eliminate passwords and secure your site with Google. This plugin replaces WordPress login with a secure Google Sign-In button and frictionless Google …

Dolutech Passwordless Login vs Easy Secure Login – Google One Tap & Sign-In