Ivan

The Google Authenticator plugin for WordPress gives you two-factor authentication using the Google Authenticator app for Android/iPhone/Blackberry.
If you are security aware, you may already have the Google Authenticator app installed on your smartphone, using it for two-factor authentication on Gmail/Dropbox/Lastpass/Amazon etc.
The two-factor authentication requirement can be enabled on a per-user basis. You could enable it for your administrator account, but log in as usual with less privileged accounts.
If You need to maintain your blog using an Android/iPhone app, or any other software using the XMLRPC interface, you can enable the App password feature in this plugin, 
but please note that enabling the App password feature will make your blog less secure.
<h3>Credits</h3>
Thanks to:
<a href="https://profiles.wordpress.org/evinak/" rel="nofollow ugc">Oleksiy</a> for a bugfix in multisite.
<a href="https://github.com/pancek" rel="nofollow ugc">Paweł Nowacki</a> for the Polish translation
<a href="https://github.com/FabioZumbi12" rel="nofollow ugc">Fabio Zumbi</a> for the Portuguese translation
<a href="https://www.guidoschalkx.com/" rel="nofollow ugc">Guido Schalkx</a> for the Dutch translation.
<a href="https://www.paypal.com/cgi-bin/webscr?cmd=_donations&business=henrik%40schack%2edk&lc=US&item_name=Google%20Authenticator&item_number=Google%20Authenticator&no_shipping=0&no_note=1&tax=0&bn=PP%2dDonationsBF&charset=UTF%2d8" rel="nofollow ugc">Henrik.Schack</a> for writing/maintaining versions 0.20 through 0.48
<a href="http://tobias.baethge.com/" rel="nofollow ugc">Tobias Bäthge</a> for his code rewrite and German translation.
<a href="http://blog.pcode.nl/" rel="nofollow ugc">Pascal de Bruijn</a> for his “relaxed mode” idea.
<a href="http://technobabbl.es/" rel="nofollow ugc">Daniel Werl</a> for his usability tips.
<a href="http://dd32.id.au/" rel="nofollow ugc">Dion Hulse</a> for his bugfixes.
<a href="https://profiles.wordpress.org/users/aldolat/" rel="nofollow ugc">Aldo Latino</a> for his Italian translation.
<a href="http://www.kaijia.me/" rel="nofollow ugc">Kaijia Feng</a> for his Simplified Chinese translation.
<a href="http://www.buayacorp.com/" rel="nofollow ugc">Alex Concha</a> for his security tips.
<a href="http://jetienne.com/" rel="nofollow ugc">Jerome Etienne</a> for his jquery-qrcode plugin.
<a href="http://orizhial.com/" rel="nofollow ugc">Sébastien Prunier</a> for his Spanish and French translation.

Google Authenticator

Personally I feel 2FA should be a part of WordPress core. But since it isn't, plugins like this one are a must-have to secure your sites.

The configuration interface is clearly layed out and the login page fits in perfectly with the default WP login page styling.

This plugin is light-weight, unobtrusive, free and adds that extra layer of security. Should your admin credentials ever be compromised, 2FA will keep your site secure.

Must-have security plugin

Awesome plugin, which is almost always in first group of plugin I've install on new website. Thank you for create and maintain it.

One on few my first-to-install plugin

Google Authenticator for your WordPress blog.

Tim Ehling

As a WordPress owner who values both security and a seamless user experience, you often face the challenge of protecting sensitive information. Most password solutions force your visitors to register for an account, granting them potential access to your WordPress environment.
This is where “OTP Content Protect” comes in, offering an innovative way to protect your content with a One-Time Password (OTP).
Our plugin was designed to give you full control over your content without opening the doors to your WordPress backend for strangers. Easily and effectively protect individual posts, pages, or even downloads. Your visitors don’t need an account and don’t have to register—they simply enter the one-time password you provide and get instant access.
By not granting unnecessary backend access, you actively minimize the risk of hacker or spam activities. “OTP Content Protect” is the perfect blend of simplicity, security, and innovation, making it the ideal password protection for your WordPress site when you need to lock specific content without burdening users with registration.
<h4>Support & Feature Requests</h4>
We are constantly developing the plugin and welcome your feedback!
<ul>
<li>For questions or issues, please use the official <a href="https://wordpress.org/support/plugin/otp-content-protect/" rel="ugc">Support Forum on WordPress.org</a> or report a bug directly via our <a href="https://die-mainagentur.de/en/wordpress-plugin-otp-content-protect/#submitbug" rel="nofollow ugc">Submit a Bug form</a>.</li>
<li>Have an idea for a new feature? Submit your feature request easily through our website: <a href="https://die-mainagentur.de/en/wordpress-plugin-otp-content-protect/#featurerequest" rel="nofollow ugc">Submit a Feature Request</a>.</li>
</ul>
<h3>Features</h3>
<ul>
<li>Protection Without Registration: The key advantage—visitors don’t need a WordPress account.</li>
<li>Flexible Content Protection: Secure posts, pages, or any custom post type.</li>
<li>Simple Password Generation: Creates secure, alphanumeric OTPs (8–10 characters).</li>
<li>Full Control: Stores creation date, optional expiration date, and a timestamp of when it was used.</li>
<li>Reusable Passwords: A used OTP can easily be reset for reuse.</li>
<li>Modern Admin Interface: AJAX-powered content list with search and convenient post-type tabs.</li>
<li>Clean Uninstall: An uninstall script completely removes all plugin data from the database upon deletion if desired.</li>
<li>Built for the World: Fully internationalized (i18n) and ready for translation.</li>
</ul>
<h3>Usage</h3>
<ol>
<li>Go to the OTP Protect settings page.</li>
<li>Select the content to protect and generate or enter an OTP.</li>
<li>(Optional) Set an expiration date.</li>
<li>Save the OTP and share it with the intended users.</li>
<li>When a visitor accesses the protected content, they will see a simple input form for the password.</li>
<li>Upon valid entry, the original content is displayed instantly.</li>
<li>In the admin overview, you can easily reset or delete used OTPs.</li>
</ol>

OTP Content Protect

The easiest way to protect WordPress content with an OTP. Secure posts and pages with a one-time password—no user registration required.

Google Authenticator vs OTP Content Protect