Ian Dunn

The <a href="https://wordpress.org/plugins/google-authenticator/" rel="ugc">Google Authenticator</a> plugin is a great way to add two-factor authentication to your site, but in order for it to work, users have to activate it for their account themselves. They may not know that it’s available, or may not be motivated to enable it.
This plugin helps administrators to encourage users to activate it, and has three different methods for doing that, depending on how strict you want to be:
<ul>
<li>Gently Nag the user: A warning message will appear at the top of the Dashboard and Profile screens, asking them to enable two-factor authentication. The message goes away when they enable it. This is the default behavior.</li>
<li>Persistently Nag the user: The warning will appear at the top of all screens until they enable two-factor auth.</li>
<li>Force the user: The warning will appear on all screens, and the user will also be prevented from doing anything inside wp-admin until they activate two-factor auth. They’re temporarily assigned the role of a Subscriber, and redirected to their profile whenever they try to access another screen. Once they enable two-factor auth, their original role is restored and they can access other screens again. 
Keep in mind that the Google Authenticator plugin doesn’t require users to enter a valid 2FA code from their phone during the activation process, so some users may not set it up correctly and lock themselves out of their account. This is unfortunate and may result in more support requests, but it’s a small price to pay for increased security.</li>
</ul>

Encourage User Activation for Google Authenticator

Allows administrators to either nag users to enable two-factor authentication, or force them to enable it.

cloudusk

Cloudusk 2FA – Two Factor Authentication is a free and easy-to-use two-factor authentication (2FA) plugin for WordPress.
It adds an extra layer of security to your WordPress login by requiring a time-based one-time password (TOTP) in addition to a username and password. This helps protect WordPress user accounts from unauthorized access caused by weak or compromised passwords, brute-force attacks, and automated login attempts.
Cloudusk 2FA uses industry-standard TOTP (RFC 6238) and works with popular authenticator apps such as Google Authenticator, Authy, and Microsoft Authenticator. No SMS, email codes, or third-party services are required.
The plugin is designed to be lightweight and user-friendly, with a simple setup process that can be completed directly from the user profile screen.
<h4>Features</h4>
<ul>
<li>TOTP-based two-factor authentication for WordPress</li>
<li>Compatible with Google Authenticator, Authy, Microsoft Authenticator, and other TOTP apps</li>
<li>QR code-based setup</li>
<li>Backup recovery codes to prevent lockouts</li>
<li>No SMS, email, or external services required</li>
<li>Lightweight and performance-friendly</li>
<li>Works with the default WordPress login flow</li>
<li>Fully free to use</li>
</ul>
<h4>Privacy</h4>
Cloudusk 2FA does not send any data to external services. All authentication is handled locally within your WordPress installation.

Cloudusk 2FA – Two Factor Authentication

A free and lightweight two-factor authentication (2FA) plugin for WordPress using TOTP and authenticator apps.

Encourage User Activation for Google Authenticator vs Cloudusk 2FA – Two Factor Authentication