BinaryCarpenter

This plugin let you enable face login without using password. Thus, you don’t have to worry about keyloggers stealing your password.
<h3>Why using face authentication for WordPress login?</h3>
WordPress has grown so much since its beginning. People use WordPress for various purposes including building a store, create API and of course blogging. With its popularity comes hackers, attackers, phishers… 
Those bad guys do everything to break into your site and steal your information, including your business.
<h3>How to prevent hackers from break into your site?</h3>
There are various ways to get access to the admin of a website. However, the most common way is to hack the username and password. It may surprise you but many people still weak password nowadays. Passwords that contain only numbers, words are in dictionary … are the easiest to hack. 
The solution would be using a strong password which is impossible to remember.
However, you still have to store that password somewhere. Maybe in a text file.
When you open the text file to copy the password, someone can steal your password by simply peek at your computer or use a recording device.
<h3>Using passwords is prone to hacks, what’s the fix</h3>
If you say that using password is a risk, you are completely right. No matter how strong a password is, it can be stolen. But, what’s the alternative?
<h3>Introducing to password-less login for WordPress</h3>
The answer to the risk we mentioned is to stop using password completely. For real.
But you may wonder, how can you use password-less login on WordPress?
It’s simpler that you think. With today’s technology, there are smarter, more secure ways to verify one’s identity.
You have known fingerprints. Now we have face.
Imagine you can login to your site the same way you open your phone.
<h3>How is this secure? Meet two-factor login</h3>
If you door has only one lock, thieves have good chance to break into your house. 
But if you have two locks, their chances drop drastically. 
That’s the same theory of two factor login. 
The one that requests to access your site (maybe you) have to complete two challenges. 
Currently, many people use password for phase one and a simple token for later. 
But we have discussed the inconvenience of using password, also the risks. 
So, why don’t we treat ourselves a bit kinder by using something easy for us at both phases?
<h3>Using two factor face authentication to login into your WordPress site</h3>
Let’s imagine this, you go to your WordPress login page, instead of typing in the password, you only look at the camera. 
The site recogizes you as its owner. It wouldn’t let you in yet. There is a chance that someone uses a statue to fake your identity. 
Instead, it will send you a token (4 to 8 digits) to your prefered devices (Email, Authenticator app).
You then send the token to the site. If you provide the correct token, you are now login.
As you can see, it is almost impossible for attackers to impersonate anywhere in the whole process.

WP Face Login – Face Authentication For WordPress

great

Enable face authentication login with ease

Ivan

The Google Authenticator plugin for WordPress gives you two-factor authentication using the Google Authenticator app for Android/iPhone/Blackberry.
If you are security aware, you may already have the Google Authenticator app installed on your smartphone, using it for two-factor authentication on Gmail/Dropbox/Lastpass/Amazon etc.
The two-factor authentication requirement can be enabled on a per-user basis. You could enable it for your administrator account, but log in as usual with less privileged accounts.
If You need to maintain your blog using an Android/iPhone app, or any other software using the XMLRPC interface, you can enable the App password feature in this plugin, 
but please note that enabling the App password feature will make your blog less secure.
<h3>Credits</h3>
Thanks to:
<a href="https://profiles.wordpress.org/evinak/" rel="nofollow ugc">Oleksiy</a> for a bugfix in multisite.
<a href="https://github.com/pancek" rel="nofollow ugc">Paweł Nowacki</a> for the Polish translation
<a href="https://github.com/FabioZumbi12" rel="nofollow ugc">Fabio Zumbi</a> for the Portuguese translation
<a href="https://www.guidoschalkx.com/" rel="nofollow ugc">Guido Schalkx</a> for the Dutch translation.
<a href="https://www.paypal.com/cgi-bin/webscr?cmd=_donations&business=henrik%40schack%2edk&lc=US&item_name=Google%20Authenticator&item_number=Google%20Authenticator&no_shipping=0&no_note=1&tax=0&bn=PP%2dDonationsBF&charset=UTF%2d8" rel="nofollow ugc">Henrik.Schack</a> for writing/maintaining versions 0.20 through 0.48
<a href="http://tobias.baethge.com/" rel="nofollow ugc">Tobias Bäthge</a> for his code rewrite and German translation.
<a href="http://blog.pcode.nl/" rel="nofollow ugc">Pascal de Bruijn</a> for his “relaxed mode” idea.
<a href="http://technobabbl.es/" rel="nofollow ugc">Daniel Werl</a> for his usability tips.
<a href="http://dd32.id.au/" rel="nofollow ugc">Dion Hulse</a> for his bugfixes.
<a href="https://profiles.wordpress.org/users/aldolat/" rel="nofollow ugc">Aldo Latino</a> for his Italian translation.
<a href="http://www.kaijia.me/" rel="nofollow ugc">Kaijia Feng</a> for his Simplified Chinese translation.
<a href="http://www.buayacorp.com/" rel="nofollow ugc">Alex Concha</a> for his security tips.
<a href="http://jetienne.com/" rel="nofollow ugc">Jerome Etienne</a> for his jquery-qrcode plugin.
<a href="http://orizhial.com/" rel="nofollow ugc">Sébastien Prunier</a> for his Spanish and French translation.

Google Authenticator

Personally I feel 2FA should be a part of WordPress core. But since it isn't, plugins like this one are a must-have to secure your sites.

The configuration interface is clearly layed out and the login page fits in perfectly with the default WP login page styling.

This plugin is light-weight, unobtrusive, free and adds that extra layer of security. Should your admin credentials ever be compromised, 2FA will keep your site secure.

Must-have security plugin

Awesome plugin, which is almost always in first group of plugin I've install on new website. Thank you for create and maintain it.

One on few my first-to-install plugin

Google Authenticator for your WordPress blog.

WP Face Login – Face Authentication For WordPress vs Google Authenticator