Duo Security

<p>Duo Security provides two-factor authentication as a service to protect against account takeover and data theft. Using the Duo plugin you can easily add Duo two-factor authentication to your WordPress website in just a few minutes!</p>
<p>Rather than relying on a password alone, which can be phished or guessed, Duo’s authentication service adds a second layer of security to your WordPress accounts. Duo enables your admins or users to verify their identities using something they have—like their mobile phone or a hardware token—which provides strong authentication and dramatically enhances account security.</p>
<p>Duo is easy to setup and use. With Duo there’s no extra hardware or complicated software to install, just sign up for Duo’s service and install the plugin. Then you can set which user roles you want to enable two-factor authentication for—admins, editors, authors, contributors, and/or subscribers—without setting up user accounts, directory synchronization, servers, or hardware.</p>
<p>When they log in, your users have multiple ways they can authenticate, including:</p>
<ul>
<li>One-tap authentication using Duo’s mobile app (our fastest, easiest way to authenticate)</li>
<li>One-time passcodes generated by Duo’s mobile app (works even with no cell coverage)</li>
<li>One-time passcodes delivered to any SMS-enabled phone (works even with no cell coverage)</li>
<li>Phone callback to any phone (mobile or landline!)</li>
<li>One-time passcodes generated by an OATH-compliant hardware token (if you’re feeling all old school)</li>
</ul>
<p>Protect your WordPress website in minutes with Duo.</p>
<h3>End of Support Notice</h3>
<p>Support for the traditional Duo Prompt experience using the Duo WordPress plugin ended on September 30, 2024. Please use the new <a href="https://wordpress.org/plugins/duo-universal/" rel="ugc">Duo Universal plugin for WordPress</a>. Read more about the End of Suppport and migration to the new plugin on our <a href="https://duo.com/docs/wordpress" rel="nofollow ugc">Duo for WordPress – Duo Universal Prompt</a> documentation page</p>


Duo Two-Factor Authentication

Easily add Duo Security two-factor authentication to your WordPress website. Enable two-factor authentication for your admins and/or users.

Yordan Soares

dueclic

<p><strong>AuthPress</strong> is a comprehensive two-factor authentication plugin for WordPress that evolved from Telegram-only support into a flexible multi-provider 2FA solution. Secure your WordPress site with multiple authentication methods and an extensible provider system.</p>
<h4>🚀 Key Features</h4>
<ul>
<li><strong>Multiple Authentication Providers</strong>: Telegram, Email, Authenticator Apps (TOTP), Recovery Codes</li>
<li><strong>Extensible System</strong>: Developers can create custom providers (SMS, Passkey, etc.)</li>
<li><strong>Easy Configuration</strong>: Setup multiple 2FA methods in minutes</li>
<li><strong>Enhanced Security</strong>: Advanced logging, rate limiting, and secure code storage</li>
<li><strong>User Flexibility</strong>: Users can enable multiple providers for redundancy</li>
<li><strong>Admin Control</strong>: Centralized provider management and monitoring</li>
<li><strong>Professional Logging</strong>: WP_List_Table implementation with pagination and filtering</li>
</ul>
<h4>📱 Telegram Provider (Original)</h4>
<ul>
<li>Instant authentication code delivery via Telegram bot</li>
<li>Failed login attempt notifications for administrators</li>
<li>Works on any device with Telegram installed</li>
<li>Simple setup with Bot Token from @BotFather</li>
<li>Admin security alerts and monitoring</li>
</ul>
<h4>📧 Email Provider</h4>
<ul>
<li>Send verification codes via email</li>
<li>Configurable token duration (default: 20 minutes)</li>
<li>HTML formatted emails with security information</li>
<li>Works with all email providers</li>
<li>Perfect fallback when other methods unavailable</li>
</ul>
<h4>🔐 Authenticator Apps (TOTP)</h4>
<ul>
<li>Standard TOTP (Time-based One-Time Password) support</li>
<li>Compatible with Google Authenticator, Authy, Microsoft Authenticator, 1Password, Bitwarden</li>
<li>Works completely offline – no internet connection required</li>
<li>Easy setup with QR codes or manual secret entry</li>
<li>6-digit codes that refresh every 30 seconds</li>
</ul>
<h4>🔧 Extensible & Developer-Friendly</h4>
<ul>
<li><strong>Custom Providers</strong>: Simple API for creating custom 2FA methods</li>
<li><strong>SMS Support</strong>: Ready-to-use SMS providers available as extensions</li>
<li><strong>Passkey Support</strong>: Modern WebAuthn implementation available</li>
<li><strong>Plugin Architecture</strong>: Each provider can be a separate plugin</li>
<li><strong>Seamless Integration</strong>: All providers work together in unified interface</li>
</ul>


AuthPress

If you use Telegram and want to increase the security of your WordPress site, this plugin is essential to do it. 

It's lightweight, easy to setup and well done documented to avoid stuck in the process.

If you use Telegram, this plugin is essential for your site

Advanced WordPress 2FA plugin with multiple authentication providers: Telegram, Email, Authenticator Apps, and extensible custom providers.

Duo Two-Factor Authentication vs AuthPress