Eric Mann

<p>Add support for <a href="https://en.wikipedia.org/wiki/Time-based_One-time_Password_Algorithm" rel="nofollow ugc">time-based one-time-password authentication</a> to WordPress. Once enabled, you can use an application on your phone (<a href="https://play.google.com/store/apps/details?id=com.google.android.apps.authenticator2&hl=en" rel="nofollow ugc">Google Authenticator</a>, <a href="https://www.microsoft.com/en-us/store/apps/authenticator/9wzdncrfj3rj" rel="nofollow ugc">Windows Authenticator</a>, etc) to generate TOTP tokens and protect your account from prying eyes.</p>


Dovedi

Time-based One Time Password authentication for WordPress.

Davide Baraldi

<p>DB Solution – 2FA is a practical login security module for WordPress sites that need stronger access control without forcing every protection on by default.</p>
<p>It helps site owners add email OTP verification, protect the standard login path, monitor successful logins, review failed attempts, and block unwanted IP addresses from one focused DB Solution panel.</p>
<h4>Key Features</h4>
<ul>
<li>🔐 Email 2FA – Sends a one-time code after the password step, using the WordPress email system already configured on the site.</li>
<li>🧭 Custom Login URL – Replaces the standard login path with a private slug chosen by the site owner.</li>
<li>👀 Login Monitoring – Sends an email notification after successful access, so unusual logins are easier to notice.</li>
<li>🧱 IP Blocking – Blocks single IP addresses and CIDR ranges from the plugin settings panel.</li>
<li>🧾 Access Attempt Log – Shows login attempts with credential, IP address, browser, date, and result, without storing passwords.</li>
<li>⏱️ OTP Countdown – Shows how long the verification code remains valid on the 2FA screen.</li>
<li>🛡️ Strict Mode – Can bind the OTP check to the same IP address and browser that requested it.</li>
<li>🎛️ Modular Controls – Every protection stays disabled after activation until the site owner chooses what to enable.</li>
</ul>
<h4>Why It Helps</h4>
<p>Most login security tools enable too much at once or hide the important choices. DB Solution – 2FA keeps the workflow simple: activate the plugin, confirm that email delivery works, then enable only the protections the site actually needs.</p>
<p>This makes it useful for client sites, staging sites, and small business WordPress installs where login security must be stronger without making daily access confusing.</p>
<h4>Email Requirement</h4>
<p>Email-based 2FA requires a working WordPress email system. Before enabling it, send a test email from the site and confirm that users can receive the OTP code.</p>
<h3>Compatibility</h3>
<ul>
<li>WordPress: 6.0 through 7.0.</li>
<li>PHP: 8.2 or later. Tested on PHP 8.4.18 in the local WordPress 7 test site.</li>
</ul>


DB Solution – 2FA

Email 2FA, custom login URL, access monitoring, manual IP blocking, and login attempt logging for DB Solution.

Dovedi vs DB Solution – 2FA