Eric Mann

<p>Add support for <a href="https://en.wikipedia.org/wiki/Time-based_One-time_Password_Algorithm" rel="nofollow ugc">time-based one-time-password authentication</a> to WordPress. Once enabled, you can use an application on your phone (<a href="https://play.google.com/store/apps/details?id=com.google.android.apps.authenticator2&hl=en" rel="nofollow ugc">Google Authenticator</a>, <a href="https://www.microsoft.com/en-us/store/apps/authenticator/9wzdncrfj3rj" rel="nofollow ugc">Windows Authenticator</a>, etc) to generate TOTP tokens and protect your account from prying eyes.</p>


Dovedi

Time-based One Time Password authentication for WordPress.

popularsizzle

<p>A two-step verification plugin using the Time-based One-time Password Algorithm (TOTP), which can be used with an app or service like Google Authenticator.</p>
<ul>
<li>Lightweight and fast: no classes are instantiated until required</li>
<li>No reliance or affiliation with any third-party service</li>
<li>No setup or config required: immediately enabled for all uses upon plugin activation</li>
<li>Automatically throttles multiple failed login attempts</li>
<li>Uses filters to allow modifying functionality or output</li>
<li>Requires PHP 7 or later</li>
<li>Built for WordPress 4.8 or later</li>
</ul>


Simple 2FA

A lightweight, zero-config TOTP 2FA plugin with automatic rate limiting. PHP 7 and WP 4.8 or later.

Dovedi vs Simple 2FA