Eric Mann

Add support for <a href="https://en.wikipedia.org/wiki/Time-based_One-time_Password_Algorithm" rel="nofollow ugc">time-based one-time-password authentication</a> to WordPress. Once enabled, you can use an application on your phone (<a href="https://play.google.com/store/apps/details?id=com.google.android.apps.authenticator2&hl=en" rel="nofollow ugc">Google Authenticator</a>, <a href="https://www.microsoft.com/en-us/store/apps/authenticator/9wzdncrfj3rj" rel="nofollow ugc">Windows Authenticator</a>, etc) to generate TOTP tokens and protect your account from prying eyes.

Dovedi

Time-based One Time Password authentication for WordPress.

Maurice Hason

Limesnip Simple2FA adds email-based two-factor authentication to your site. After entering their username and password, users receive a 6-digit verification code via email that they must enter to complete login.
Features:
<ul>
<li>Email-based 2FA – no authenticator app required</li>
<li>Clean, Linear-inspired verification UI</li>
<li>Auto-advancing digit inputs with paste support</li>
<li>Auto-submit when all digits are entered</li>
<li>Role-based enforcement – choose which roles require 2FA</li>
<li>Configurable code expiration and max attempts</li>
<li>Optional “Remember this device” feature</li>
<li>HTML and plain text email support</li>
<li>Secure code storage (SHA-256 hashed)</li>
<li>Fully responsive design</li>
</ul>

Limesnip Simple2FA

Simple email-based two-factor authentication for WordPress. Adds a clean, Linear-inspired verification screen to your login flow.

Dovedi vs Limesnip Simple2FA