kuckovic

Flavor 2FA adds powerful two-factor authentication to your WordPress site without the complexity. No bloat, no confusing settings – just solid security that protects your site from unauthorized access.
<h4>Why Flavor 2FA?</h4>
<ul>
<li>Zero configuration needed – Works out of the box</li>
<li>Native WordPress styling – Feels like part of WordPress</li>
<li>Two verification methods – Authenticator apps (Google Authenticator, Authy, 1Password) or email codes</li>
<li>User-friendly setup – Guided 3-step process with QR code scanning</li>
<li>Complete admin control – Force 2FA, reset users, manage lockouts</li>
</ul>
<h4>Features</h4>
For Users: 
* Choose between authenticator app or email verification 
* 10 recovery codes for emergency access 
* “Trust this device” option to skip 2FA on personal devices 
* Simple, clean verification screens
For Admins: 
* Require 2FA for specific user roles 
* Grace period for new users 
* Force immediate 2FA setup on next login 
* Lockout protection against brute force attacks 
* Reset 2FA or unlock accounts with one click 
* See 2FA status for all users at a glance
<h4>Perfect For</h4>
<ul>
<li>Agencies managing client sites</li>
<li>WooCommerce stores handling sensitive data</li>
<li>Membership sites with user accounts</li>
<li>Any WordPress site that needs extra security</li>
</ul>
<h3>External services</h3>
This plugin uses a third-party service to generate QR codes during the TOTP authenticator app setup process.
<h4>QR Server API</h4>
When a user chooses the “Authenticator App” method during 2FA setup, the plugin generates a QR code image via the QR Server API. This QR code contains the TOTP secret URI (which includes the site name, user email, and secret key) so the user can scan it with their authenticator app.
<ul>
<li>What data is sent: A TOTP provisioning URI containing the site name, user email address, and a generated secret key.</li>
<li>When it is sent: Only once, when a user sets up TOTP-based two-factor authentication. No data is sent during normal login verification.</li>
<li>Service provider: goQR.me / QR Server</li>
<li>Service URL: <a href="https://goqr.me/api/" rel="nofollow ugc">https://goqr.me/api/</a></li>
<li>Terms of service: <a href="https://goqr.me/api/doc/" rel="nofollow ugc">https://goqr.me/api/doc/</a></li>
<li>Privacy policy: <a href="https://goqr.me/privacy-policy/" rel="nofollow ugc">https://goqr.me/privacy-policy/</a></li>
</ul>

Flavor 2FA

Lightweight two-factor authentication that just works. Protect your WordPress site with authenticator apps or email codes in under 2 minutes.

BAAR Technologies

BAAR MFA is a powerful and easy-to-use WordPress plugin to enforce multi-factor authentication for users. Whether you are securing a blog, e-commerce site, or client portal — BAAR MFA makes it effortless to protect your users and data. 
Key Features:
– 🔐 TOTP via BAAR Authenticator App (Free) 
– ❓ Security Questions (Knowledge-Based Authentication)(Free) 
– 🛟 Recovery Codes (For fallback access)(Free) 
– ⚙️ Fully customizable settings and email templates(Free) 
– 📊 Built-in Reports for user activity and MFA status (Free) 
– ✨ Passwordless login via Magic link (Premium) 
– ✨ Passwordless login via Push and TOTP (Premium) 
– 📩 OTP via Email (Requires SMTP) (Premium) 
– 🔔 Push Notifications via BAAR App (Premium) 
– 🎨 White Label Branding (Premium) 
– 🧑‍💼 Role-based and user-specific enforcement(Premium) 
– 🧑‍💼 Role-based and user-specific enforcement(Premium)
The plugin supports TOTP registration with BAAR IGA Authenticator App available in Google Play Store and Apple App Store
In this version, users can configure up to 5 users through the BAAR IGA app.
<h3>External Services</h3>
This plugin connects to the following external services: 
https://pushnotifications.baariga.com — Used for:
<ul>
<li>
QR code generation for TOTP setup.
</li>
<li>
TOTP verification during login.
</li>
<li>
Tenant creation and management for handling MFA data. 
Upon installation, the plugin sends the site name and user email address to pushnotifications.baariga.com for registration with BAAR Cloud. This is required to generate the QR Code for MFA setup. 
Additionally, the plugin includes a support form accessible via the Support tab. This form connects to https://stage-store.baarconnect.com/contact-form-external to facilitate assistance and respond to user queries related to the plugin.
</li>
</ul>
All API communication is performed securely over HTTPS. No sensitive user data beyond the required authentication-related data. These external services are essential for providing the MFA functionalities and licensing validation.
<h3>Privacy Policy</h3>
This plugin communicates with the BAAR Cloud service to generate MFA QR codes. As part of the registration process, it transmits the WordPress site name (used as tenant name) and the administrator’s email address to BAAR Cloud servers. This happens only if the users gives consent to register.
No other personal data is collected or stored by this plugin.
For more details, please review our full privacy policy: 
https://store.baartechnologies.com/privacy-policy
<h3>Terms and Conditions</h3>
By using this plugin and its associated cloud services, you agree to the following:
<ul>
<li>Terms of Use: https://store.baartechnologies.com/terms-and-condition 
Plugin Store – The Best Plugin Management SaaS</li>
</ul>

BAAR MFA

Secure your WordPress site with BAAR MFA — a complete Multi-Factor Authentication plugin offering TOTP, Email OTP, Push Notifications, Security Questi …

Flavor 2FA vs BAAR MFA