G Online Sites

G Online SMS connects your WordPress site to the <a href="https://sms.gonlinesites.com/app" rel="nofollow ugc">G Online SMS gateway</a> so you can send SMS messages automatically based on events in WordPress, or manually to any phone number.
<h4>Features</h4>
<ul>
<li>OTP / Two-Factor Authentication:
<ul>
<li>SMS verification code on WordPress login (2FA after password check).</li>
<li>Phone number verification at WooCommerce checkout before order placement.</li>
<li>Phone number confirmation on user registration.</li>
<li>Verify new phone number when changed in WooCommerce My Account.</li>
<li>Configurable code length (4–8 digits) and expiry (1–30 minutes).</li>
<li>Maximum 3 failed attempts before code is invalidated.</li>
</ul>
</li>
<li>Send single or bulk SMS directly from the WordPress admin.</li>
<li>Bulk SMS by user role — target all subscribers, customers, or any custom role.</li>
<li>User lifecycle notifications:
<ul>
<li>Notify admin when a new user registers.</li>
<li>Send a welcome SMS to every new user.</li>
<li>Send a farewell SMS when an account is deleted.</li>
<li>Optional login-alert SMS to admin.</li>
</ul>
</li>
<li>WooCommerce integration:
<ul>
<li>Customise SMS messages per order status (pending, processing, completed, refunded, etc.).</li>
<li>Notify admin when a new order is placed.</li>
<li>Supports rich order placeholders: <code>{order_id}</code>, <code>{order_total}</code>, <code>{customer_name}</code>, <code>{order_items}</code>, and many more.</li>
</ul>
</li>
<li>Contact Form 7 integration:
<ul>
<li>Send SMS to admin AND the form submitter simultaneously on submission.</li>
<li>Per-form overrides via the Additional Settings tab.</li>
</ul>
</li>
<li>Gravity Forms integration:
<ul>
<li>Send SMS to admin AND the submitter when an entry is submitted.</li>
<li>Use <code>{field_id:N}</code> or <code>{Field Label}</code> placeholders.</li>
</ul>
</li>
<li>SMS Log — every sent and failed message is recorded with status, recipient and trigger source.</li>
<li>Test SMS button — verify your API key right from the settings page.</li>
<li>Fully translatable (<code>.pot</code> file included).</li>
<li>No Bootstrap or external CSS loaded site-wide — lightweight admin-only assets.</li>
</ul>
<h4>Supported Placeholders (WooCommerce)</h4>
<pre><code>{order_id} `{order_number}` `{order_total}` `{order_status}` `{order_date}` `{customer_name}` `{customer_first_name}` `{customer_last_name}` `{customer_email}` `{customer_phone}` `{billing_address}` `{shipping_address}` `{payment_method}` `{shipping_method}` `{order_items}` `{subtotal}` `{tax_amount}` `{currency}` `{coupon_code}` `{site_name}` `{site_url}`
</code></pre>
<h4>Supported Placeholders (User notifications)</h4>
<pre><code>{first_name} `{last_name}` `{display_name}` `{user_email}` `{user_login}` `{site_name}` `{site_url}`
</code></pre>
<h3>External Services</h3>
This plugin connects to the G Online SMS gateway to send SMS messages and check account balance. This is a third-party service operated by G Online Sites.
<h4>What data is sent and when</h4>
<ul>
<li>When sending an SMS — the recipient’s phone number, the message text, your Sender ID, and your API key are transmitted to the gateway. This happens every time an SMS is triggered (user registration, WooCommerce order status change, form submission, manual send, etc.).</li>
<li>When checking balance — only your API key is sent. This happens each time the plugin dashboard page is loaded.</li>
</ul>
<h4>No data is sent without your action</h4>
No data is ever transmitted unless you have entered a valid API key in the plugin settings. The plugin makes no external calls on the front end of your website.
<h4>Service provider details</h4>
<ul>
<li>Service: G Online SMS — bulk SMS messaging gateway for Ghana and beyond.</li>
<li>Provider: G Online Sites</li>
<li>Gateway URL: https://sms.gonlinesites.com/app</li>
<li>Terms of Service: https://sms.gonlinesites.com/app/terms</li>
<li>Privacy Policy: https://sms.gonlinesites.com/app/privacy</li>
</ul>
By using this plugin you agree to the terms of service and privacy policy of the G Online SMS gateway listed above.

G Online SMS

Send automated SMS notifications from WordPress — OTP/2FA, WooCommerce orders, Contact Form 7, Gravity Forms and more.

Ivan

The Google Authenticator plugin for WordPress gives you two-factor authentication using the Google Authenticator app for Android/iPhone/Blackberry.
If you are security aware, you may already have the Google Authenticator app installed on your smartphone, using it for two-factor authentication on Gmail/Dropbox/Lastpass/Amazon etc.
The two-factor authentication requirement can be enabled on a per-user basis. You could enable it for your administrator account, but log in as usual with less privileged accounts.
If You need to maintain your blog using an Android/iPhone app, or any other software using the XMLRPC interface, you can enable the App password feature in this plugin, 
but please note that enabling the App password feature will make your blog less secure.
<h3>Credits</h3>
Thanks to:
<a href="https://profiles.wordpress.org/evinak/" rel="nofollow ugc">Oleksiy</a> for a bugfix in multisite.
<a href="https://github.com/pancek" rel="nofollow ugc">Paweł Nowacki</a> for the Polish translation
<a href="https://github.com/FabioZumbi12" rel="nofollow ugc">Fabio Zumbi</a> for the Portuguese translation
<a href="https://www.guidoschalkx.com/" rel="nofollow ugc">Guido Schalkx</a> for the Dutch translation.
<a href="https://www.paypal.com/cgi-bin/webscr?cmd=_donations&business=henrik%40schack%2edk&lc=US&item_name=Google%20Authenticator&item_number=Google%20Authenticator&no_shipping=0&no_note=1&tax=0&bn=PP%2dDonationsBF&charset=UTF%2d8" rel="nofollow ugc">Henrik.Schack</a> for writing/maintaining versions 0.20 through 0.48
<a href="http://tobias.baethge.com/" rel="nofollow ugc">Tobias Bäthge</a> for his code rewrite and German translation.
<a href="http://blog.pcode.nl/" rel="nofollow ugc">Pascal de Bruijn</a> for his “relaxed mode” idea.
<a href="http://technobabbl.es/" rel="nofollow ugc">Daniel Werl</a> for his usability tips.
<a href="http://dd32.id.au/" rel="nofollow ugc">Dion Hulse</a> for his bugfixes.
<a href="https://profiles.wordpress.org/users/aldolat/" rel="nofollow ugc">Aldo Latino</a> for his Italian translation.
<a href="http://www.kaijia.me/" rel="nofollow ugc">Kaijia Feng</a> for his Simplified Chinese translation.
<a href="http://www.buayacorp.com/" rel="nofollow ugc">Alex Concha</a> for his security tips.
<a href="http://jetienne.com/" rel="nofollow ugc">Jerome Etienne</a> for his jquery-qrcode plugin.
<a href="http://orizhial.com/" rel="nofollow ugc">Sébastien Prunier</a> for his Spanish and French translation.

Google Authenticator

Personally I feel 2FA should be a part of WordPress core. But since it isn't, plugins like this one are a must-have to secure your sites.

The configuration interface is clearly layed out and the login page fits in perfectly with the default WP login page styling.

This plugin is light-weight, unobtrusive, free and adds that extra layer of security. Should your admin credentials ever be compromised, 2FA will keep your site secure.

Must-have security plugin

Awesome plugin, which is almost always in first group of plugin I've install on new website. Thank you for create and maintain it.

One on few my first-to-install plugin

Google Authenticator for your WordPress blog.

G Online SMS vs Google Authenticator