Ivan

The Google Authenticator plugin for WordPress gives you two-factor authentication using the Google Authenticator app for Android/iPhone/Blackberry.
If you are security aware, you may already have the Google Authenticator app installed on your smartphone, using it for two-factor authentication on Gmail/Dropbox/Lastpass/Amazon etc.
The two-factor authentication requirement can be enabled on a per-user basis. You could enable it for your administrator account, but log in as usual with less privileged accounts.
If You need to maintain your blog using an Android/iPhone app, or any other software using the XMLRPC interface, you can enable the App password feature in this plugin, 
but please note that enabling the App password feature will make your blog less secure.
<h3>Credits</h3>
Thanks to:
<a href="https://profiles.wordpress.org/evinak/" rel="nofollow ugc">Oleksiy</a> for a bugfix in multisite.
<a href="https://github.com/pancek" rel="nofollow ugc">Paweł Nowacki</a> for the Polish translation
<a href="https://github.com/FabioZumbi12" rel="nofollow ugc">Fabio Zumbi</a> for the Portuguese translation
<a href="https://www.guidoschalkx.com/" rel="nofollow ugc">Guido Schalkx</a> for the Dutch translation.
<a href="https://www.paypal.com/cgi-bin/webscr?cmd=_donations&business=henrik%40schack%2edk&lc=US&item_name=Google%20Authenticator&item_number=Google%20Authenticator&no_shipping=0&no_note=1&tax=0&bn=PP%2dDonationsBF&charset=UTF%2d8" rel="nofollow ugc">Henrik.Schack</a> for writing/maintaining versions 0.20 through 0.48
<a href="http://tobias.baethge.com/" rel="nofollow ugc">Tobias Bäthge</a> for his code rewrite and German translation.
<a href="http://blog.pcode.nl/" rel="nofollow ugc">Pascal de Bruijn</a> for his “relaxed mode” idea.
<a href="http://technobabbl.es/" rel="nofollow ugc">Daniel Werl</a> for his usability tips.
<a href="http://dd32.id.au/" rel="nofollow ugc">Dion Hulse</a> for his bugfixes.
<a href="https://profiles.wordpress.org/users/aldolat/" rel="nofollow ugc">Aldo Latino</a> for his Italian translation.
<a href="http://www.kaijia.me/" rel="nofollow ugc">Kaijia Feng</a> for his Simplified Chinese translation.
<a href="http://www.buayacorp.com/" rel="nofollow ugc">Alex Concha</a> for his security tips.
<a href="http://jetienne.com/" rel="nofollow ugc">Jerome Etienne</a> for his jquery-qrcode plugin.
<a href="http://orizhial.com/" rel="nofollow ugc">Sébastien Prunier</a> for his Spanish and French translation.

Google Authenticator

Personally I feel 2FA should be a part of WordPress core. But since it isn't, plugins like this one are a must-have to secure your sites.

The configuration interface is clearly layed out and the login page fits in perfectly with the default WP login page styling.

This plugin is light-weight, unobtrusive, free and adds that extra layer of security. Should your admin credentials ever be compromised, 2FA will keep your site secure.

Must-have security plugin

Awesome plugin, which is almost always in first group of plugin I've install on new website. Thank you for create and maintain it.

One on few my first-to-install plugin

Google Authenticator for your WordPress blog.

Hamid Alinia

Enable OTP login for WordPress that supports WooCommerce using phone numbers, SMS, or WhatsApp. Secure passwordless login with custom gateways and GDPR compliance.
Login/register with phone number in WordPress can happen with this plugin. Your customer can authenticate with their mobile number via OTP.
Added country flags to login with phone number form
You can add almost every SMS gateways (if you have) yourself for free, or you can ask us to develop your sms gateway with paying extra.
you can change style and appearance of forms
You can use Firebase, textlocal and other SMS gateways
For checking docs and getting more help please visit: 
<a href="https://idehweb.com/product/login-with-phone-number-in-wordpress/" title="login with phone number in WordPress" rel="nofollow ugc">Login with phone number in WordPress documentations</a>
<ul>
<li>
Login with phone number in WordPress
</li>
<li>
Login with OTP WordPress
</li>
<li>
Login with mobile number WordPress
</li>
<li>
Login/Register with E-mail
</li>
<li>
WordPress Login Form
</li>
<li>
Woocommerce Registration Form
</li>
<li>
Woocommerce Login With Phone Number
</li>
<li>
WordPress OTP Login
</li>
<li>
Woocommerce Registration With Phone Number
</li>
<li>
Add Phone Number to WordPress Registration
</li>
<li>
Simple Use
</li>
<li>
Support of International SMS Delivery
</li>
<li>
Activating Users by Phone Number
</li>
<li>
Password Recovery Form
</li>
<li>
Page Authentication in Order to Visit Pages
</li>
<li>
Login and Registration with Phone Number
</li>
<li>
Redirect Users to Specific URLs After Logging in or Registering
</li>
</ul>
You can use your custom gateway. you can also use other ready sms gateways from idehweb.com.
Supported gateways for now:
<ul>
<li>Firebase – Free</li>
<li>Msg91 – Free</li>
<li>Twilio</li>
<li>Netgsm</li>
<li>Alibabacloud</li>
<li>Messagebird</li>
<li>Kavenegar</li>
<li>Trustsignal</li>
<li>taqnyat</li>
<li>2factor</li>
<li>Textlocal</li>
<li>BlueSoft</li>
<li>IQSMS</li>
<li>Whatsapp</li>
<li>Ultramessage</li>
<li>Telegram</li>
<li>Ippanel</li>
<li>Sms.ir</li>
<li>MelliPayamak</li>
<li>Farazsms</li>
</ul>
You can now choose to store phone numbers with or without the country code.
<iframe loading="lazy" class="youtube-player" width="750" height="422" src="https://www.youtube.com/embed/0B0sE9JMzCE?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent" allowfullscreen="true" style="border:0;" sandbox="allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox"></iframe>
<h3>External Services</h3>
This plugin uses external services to provide chat support and analyze user behavior. Below is the list of services used and what data is sent:
<ol>
<li>Crisp Chat</li>
</ol>
– Used to provide live chat functionality within the plugin for user support. 
– Data sent: user chat messages, name, email, IP address. 
– Service provider: Crisp IM SARL 
– Terms of Service: https://crisp.chat/en/terms/ 
– Privacy Policy: https://crisp.chat/en/privacy/
<ol>
<li>Microsoft Clarity</li>
</ol>
– Used for user behavior analytics to understand how users interact with the plugin’s administrative pages. 
– Data sent: user interactions like mouse movements, clicks, and scrolling. Personally identifiable information (PII) is masked. 
– Service provider: Microsoft 
– Terms of Service: https://clarity.microsoft.com/terms 
– Privacy Policy: https://privacy.microsoft.com/en-us/privacystatement
<ol>
<li>Firebase Authentication</li>
</ol>
– Used to verify users’ phone numbers with OTP for secure authentication. 
– Data sent: phone number and verification requests. IP addresses are used for security and abuse prevention. 
– Service provider: Google Firebase 
– Terms of Service: https://firebase.google.com/terms 
– Privacy Policy: https://firebase.google.com/support/privacy

OTP Login With Phone Number, OTP Verification

1. Shows ads.
2. Shows developers real face in my admin dashboard :|
3. The core basic functionality (connection to KaveNegar SMS service provider) is locked behind Pro version. Almost all SMS gateways are locked behind a paywall.
4. "Enable usage tracking" option checked by default (without users knowladge).

Shows Ads and Needs Pro Version!

OTP login with phone, SMS, or WhatsApp. OTP verification for WordPress & WooCommerce using custom gateways. GDPR-compliant. Login with otp

Google Authenticator vs OTP Login With Phone Number, OTP Verification