Ivan

The Google Authenticator plugin for WordPress gives you two-factor authentication using the Google Authenticator app for Android/iPhone/Blackberry.
If you are security aware, you may already have the Google Authenticator app installed on your smartphone, using it for two-factor authentication on Gmail/Dropbox/Lastpass/Amazon etc.
The two-factor authentication requirement can be enabled on a per-user basis. You could enable it for your administrator account, but log in as usual with less privileged accounts.
If You need to maintain your blog using an Android/iPhone app, or any other software using the XMLRPC interface, you can enable the App password feature in this plugin, 
but please note that enabling the App password feature will make your blog less secure.
<h3>Credits</h3>
Thanks to:
<a href="https://profiles.wordpress.org/evinak/" rel="nofollow ugc">Oleksiy</a> for a bugfix in multisite.
<a href="https://github.com/pancek" rel="nofollow ugc">Paweł Nowacki</a> for the Polish translation
<a href="https://github.com/FabioZumbi12" rel="nofollow ugc">Fabio Zumbi</a> for the Portuguese translation
<a href="https://www.guidoschalkx.com/" rel="nofollow ugc">Guido Schalkx</a> for the Dutch translation.
<a href="https://www.paypal.com/cgi-bin/webscr?cmd=_donations&business=henrik%40schack%2edk&lc=US&item_name=Google%20Authenticator&item_number=Google%20Authenticator&no_shipping=0&no_note=1&tax=0&bn=PP%2dDonationsBF&charset=UTF%2d8" rel="nofollow ugc">Henrik.Schack</a> for writing/maintaining versions 0.20 through 0.48
<a href="http://tobias.baethge.com/" rel="nofollow ugc">Tobias Bäthge</a> for his code rewrite and German translation.
<a href="http://blog.pcode.nl/" rel="nofollow ugc">Pascal de Bruijn</a> for his “relaxed mode” idea.
<a href="http://technobabbl.es/" rel="nofollow ugc">Daniel Werl</a> for his usability tips.
<a href="http://dd32.id.au/" rel="nofollow ugc">Dion Hulse</a> for his bugfixes.
<a href="https://profiles.wordpress.org/users/aldolat/" rel="nofollow ugc">Aldo Latino</a> for his Italian translation.
<a href="http://www.kaijia.me/" rel="nofollow ugc">Kaijia Feng</a> for his Simplified Chinese translation.
<a href="http://www.buayacorp.com/" rel="nofollow ugc">Alex Concha</a> for his security tips.
<a href="http://jetienne.com/" rel="nofollow ugc">Jerome Etienne</a> for his jquery-qrcode plugin.
<a href="http://orizhial.com/" rel="nofollow ugc">Sébastien Prunier</a> for his Spanish and French translation.

Google Authenticator

Personally I feel 2FA should be a part of WordPress core. But since it isn't, plugins like this one are a must-have to secure your sites.

The configuration interface is clearly layed out and the login page fits in perfectly with the default WP login page styling.

This plugin is light-weight, unobtrusive, free and adds that extra layer of security. Should your admin credentials ever be compromised, 2FA will keep your site secure.

Must-have security plugin

Awesome plugin, which is almost always in first group of plugin I've install on new website. Thank you for create and maintain it.

One on few my first-to-install plugin

Google Authenticator for your WordPress blog.

YoOhw Studio

Advanced Account – WooCommerce Customize My Account Page / OTP Login & Registration is an all-in-one solution to enhance your WooCommerce customer account area. It combines a versatile My Account page customizer with powerful passwordless login features, helping you deliver a better user experience and improve security. The My Account page is one of the most frequently visited sections of any e-commerce site – this plugin lets you tailor that page to your needs and make logging in or registering easier with OTP verification.
<a href="https://yoohw.com/product/woocommerce-advanced-account-premium/" rel="nofollow ugc">Premium version</a> | <a href="https://yoohw.com/docs/category/woocommerce-advanced-account/" rel="nofollow ugc">Documentation</a> | <a href="https://yoohw.com/support/" rel="nofollow ugc">Support</a> | <a href="https://sandbox.yoohw.com/demo/wcaa_demo.html" rel="nofollow ugc">Demo</a>
<h3>Key Features and Benefits</h3>
<ul>
<li>Customize Default Account Endpoints: Easily reorder, rename, or remove WooCommerce’s default My Account menu items (Dashboard, Orders, Downloads, etc.) to suit your site. You can declutter or relabel sections without any coding, making the account dashboard more intuitive for your users.</li>
<li>OTP Login & Registration (SMS/Email): Improve login security and convenience by letting users log in with a one-time password (OTP) sent to their phone or email. No more forgotten passwords – users can simply enter the code sent to their device to log in. You can also enable OTP-based registration (verification codes sent during signup) to verify user contact info. These features can help reduce barriers to account creation, improve user security, and increase engagement.</li>
<li>Phone & Email Verification: Ensure genuine users with verified contact details. The plugin can require new users to verify their phone number via SMS OTP or verify their email address by code/link before an account is fully activated. This keeps fake or typo emails out and confirms that each customer has a valid phone – useful for order notifications and security.</li>
<li>Password Reset via OTP: Along with standard email resets, users can opt to reset their password by entering a code sent to their verified email or phone. This provides a quick, secure recovery method, especially for users who prefer mobile verification.</li>
<li>WooCommerce Login Page Integration: The plugin can automatically redirect any visits to the default WordPress <code>wp-login.php</code> page to your WooCommerce “My Account” login/register screen. This funnels users through a single, branded login flow and hides the plain WP login, creating a seamless experience.</li>
<li>Mobile-Friendly & Responsive: All account pages and OTP inputs are designed to be mobile-first. Registration and login via phone number (OTP) are optimized for smartphones, so users on mobile can sign up or sign in effortlessly.</li>
<li>Extensibility and Compatibility: Built to work with any WooCommerce-compatible theme – it simply extends WooCommerce’s account template, so your styling remains consistent. The plugin is coded with WordPress standards, providing hooks and filters for developers to extend functionality. It’s translation-ready and compatible with WPML for multilingual sites. (It also integrates with the “Blacklist Manager” plugin, recognizing verified emails/phones during checkout validation.)</li>
</ul>
<h3>Premium Features</h3>
<ul>
<li>Add Unlimited Custom Endpoints: Create new account page tabs to display any content you want – e.g. a FAQ section, profile details, support tickets, exclusive downloads, or links to other pages. Each custom endpoint can show formatted text, images, videos, or even shortcodes from other plugins (for example, coupon wallets or membership info). You can even add direct links in the account menu (to your shop, an external URL, etc.) for quick access.</li>
<li>Customize Existing Enpoint Content: Override or inject content into any of the default WooCommerce My Account tabs (Dashboard, Orders, Downloads, etc.). Swap out the standard text for custom messaging, promotional banners, embedded videos, or dynamic data—without touching template files.</li>
<li>Add More or Upload new Icons: Choose from a built-in icon library or upload your own SVG/PNG icons to visually represent each endpoint in the account menu. Easily assign icons per tab for a more branded, intuitive navigation experience.</li>
<li>Role-Based / Members-Only Sections: Restrict any account endpoint (default or custom) to specific user roles or membership plans. For instance, show certain dashboard tabs only to wholesale customers, or create members-only areas for your VIP/Premium users. This allows you to personalize the user experience and deliver relevant content to each user group.</li>
<li>User Avatars and Profile Photos: Let customers upload or choose an avatar directly from their My Account page. Automatically resize/crop uploads, store them in a dedicated folder, and replace Gravatar throughout your site with the custom image.</li>
<li>Block / Unblock the Users: Instantly suspend or reinstate user accounts without deleting their data. Prevent blocked users from logging in or placing orders, and display a custom “Account Suspended” message when they attempt access.</li>
<li>Account Erasure Request: Comply with GDPR/CCPA by adding a self-service “Erase My Data” button in My Account. When requested, the system will anonymize or delete all personal data, then notify the user (and admin) upon completion.</li>
<li>Change Account Phone Number: Add a secure phone-number field with SMS-based verification. Users can click “Change Number,” receive a one-time code via Twilio or Textmagic, enter it on-site, and have their profile updated once verified.</li>
<li>Add Birth date for Users: Collect users’ birth dates during registration or on the edit-account form. Enforce minimum-age checks (e.g. 13+), make the field optional or required, and display a birthday greeting or age-based offers on their dashboard.</li>
<li>More Fields for Registration form: Extend the WooCommerce signup form with extra inputs—First Name, Last Name, Birthday (with date picker), and more. All entries are saved to user meta and editable from My Account.</li>
<li>Third Party SMS Services: Integrate with Twilio and Textmagic (with support for additional gateways on request) to power phone verification. Manage API credentials, message templates, and send/receive workflows directly from your WordPress dashboard.</li>
</ul>
<a href="https://yoohw.com/product/woocommerce-advanced-account-premium/" rel="nofollow ugc">Explore the Premium version here</a>
In summary, WooCommerce Advanced Account – Customize My Account Page / OTP Login & Registration empowers you to take full control of your customers’ account page and their login experience. Offer a personalized dashboard for your store (great for online stores, marketplaces, membership sites, eLearning platforms, etc.) while enhancing security through OTP verification. All these capabilities come in one lightweight plugin – eliminating the need to install multiple separate plugins for account customization and OTP login.
<h3>Plugin Integrations</h3>
Blacklist Manager
Seamlessly integrates with <a href="https://wordpress.org/plugins/wc-blacklist-manager/" rel="ugc">Blacklist Manager</a>—once a customer’s phone number or email is verified through this plugin, <a href="https://wordpress.org/plugins/wc-blacklist-manager/" rel="ugc">Blacklist Manager</a> will recognize it as already verified during checkout when verification is enabled.
<h3>External Services</h3>
This plugin integrates with three SMS gateway providers to deliver One-Time Passwords (OTPs) for phone number verification:
<ol>
<li><a href="https://yoohw.com/product/sms-credits/" rel="nofollow ugc">Yo Credits by YoOhw</a></li>
<li><a href="https://www.twilio.com/" rel="nofollow ugc">Twilio</a></li>
<li><a href="https://www.textmagic.com/" rel="nofollow ugc">Textmagic</a></li>
</ol>
You can choose which provider to use (or fall back automatically), set custom message templates, define resend intervals, and monitor usage directly from WordPress.

Advanced Account – WooCommerce Customize My Account Page / OTP Login & Registration

Customize the WooCommerce “My Account” page with custom endpoints, enable secure OTP login and registration via SMS/email.

Google Authenticator vs Advanced Account – WooCommerce Customize My Account Page / OTP Login & Registration