Eric Mann

<p>Add support for <a href="https://en.wikipedia.org/wiki/Time-based_One-time_Password_Algorithm" rel="nofollow ugc">time-based one-time-password authentication</a> to WordPress. Once enabled, you can use an application on your phone (<a href="https://play.google.com/store/apps/details?id=com.google.android.apps.authenticator2&hl=en" rel="nofollow ugc">Google Authenticator</a>, <a href="https://www.microsoft.com/en-us/store/apps/authenticator/9wzdncrfj3rj" rel="nofollow ugc">Windows Authenticator</a>, etc) to generate TOTP tokens and protect your account from prying eyes.</p>


Dovedi

Time-based One Time Password authentication for WordPress.

Yordan Soares

dueclic

<p><strong>AuthPress</strong> is a comprehensive two-factor authentication plugin for WordPress that evolved from Telegram-only support into a flexible multi-provider 2FA solution. Secure your WordPress site with multiple authentication methods and an extensible provider system.</p>
<h4>🚀 Key Features</h4>
<ul>
<li><strong>Multiple Authentication Providers</strong>: Telegram, Email, Authenticator Apps (TOTP), Recovery Codes</li>
<li><strong>Extensible System</strong>: Developers can create custom providers (SMS, Passkey, etc.)</li>
<li><strong>Easy Configuration</strong>: Setup multiple 2FA methods in minutes</li>
<li><strong>Enhanced Security</strong>: Advanced logging, rate limiting, and secure code storage</li>
<li><strong>User Flexibility</strong>: Users can enable multiple providers for redundancy</li>
<li><strong>Admin Control</strong>: Centralized provider management and monitoring</li>
<li><strong>Professional Logging</strong>: WP_List_Table implementation with pagination and filtering</li>
</ul>
<h4>📱 Telegram Provider (Original)</h4>
<ul>
<li>Instant authentication code delivery via Telegram bot</li>
<li>Failed login attempt notifications for administrators</li>
<li>Works on any device with Telegram installed</li>
<li>Simple setup with Bot Token from @BotFather</li>
<li>Admin security alerts and monitoring</li>
</ul>
<h4>📧 Email Provider</h4>
<ul>
<li>Send verification codes via email</li>
<li>Configurable token duration (default: 20 minutes)</li>
<li>HTML formatted emails with security information</li>
<li>Works with all email providers</li>
<li>Perfect fallback when other methods unavailable</li>
</ul>
<h4>🔐 Authenticator Apps (TOTP)</h4>
<ul>
<li>Standard TOTP (Time-based One-Time Password) support</li>
<li>Compatible with Google Authenticator, Authy, Microsoft Authenticator, 1Password, Bitwarden</li>
<li>Works completely offline – no internet connection required</li>
<li>Easy setup with QR codes or manual secret entry</li>
<li>6-digit codes that refresh every 30 seconds</li>
</ul>
<h4>🔧 Extensible & Developer-Friendly</h4>
<ul>
<li><strong>Custom Providers</strong>: Simple API for creating custom 2FA methods</li>
<li><strong>SMS Support</strong>: Ready-to-use SMS providers available as extensions</li>
<li><strong>Passkey Support</strong>: Modern WebAuthn implementation available</li>
<li><strong>Plugin Architecture</strong>: Each provider can be a separate plugin</li>
<li><strong>Seamless Integration</strong>: All providers work together in unified interface</li>
</ul>


AuthPress

If you use Telegram and want to increase the security of your WordPress site, this plugin is essential to do it. 

It's lightweight, easy to setup and well done documented to avoid stuck in the process.

If you use Telegram, this plugin is essential for your site

Advanced WordPress 2FA plugin with multiple authentication providers: Telegram, Email, Authenticator Apps, and extensible custom providers.

Dovedi vs AuthPress