Ivan

<p>The Google Authenticator plugin for WordPress gives you two-factor authentication using the Google Authenticator app for Android/iPhone/Blackberry.</p>
<p>If you are security aware, you may already have the Google Authenticator app installed on your smartphone, using it for two-factor authentication on Gmail/Dropbox/Lastpass/Amazon etc.</p>
<p>The two-factor authentication requirement can be enabled on a per-user basis. You could enable it for your administrator account, but log in as usual with less privileged accounts.</p>
<p>If You need to maintain your blog using an Android/iPhone app, or any other software using the XMLRPC interface, you can enable the App password feature in this plugin,<br />
but please note that enabling the App password feature will make your blog less secure.</p>
<h3>Credits</h3>
<p>Thanks to:</p>
<p><a href="https://profiles.wordpress.org/evinak/" rel="nofollow ugc">Oleksiy</a> for a bugfix in multisite.</p>
<p><a href="https://github.com/pancek" rel="nofollow ugc">Paweł Nowacki</a> for the Polish translation</p>
<p><a href="https://github.com/FabioZumbi12" rel="nofollow ugc">Fabio Zumbi</a> for the Portuguese translation</p>
<p><a href="https://www.guidoschalkx.com/" rel="nofollow ugc">Guido Schalkx</a> for the Dutch translation.</p>
<p><a href="https://www.paypal.com/cgi-bin/webscr?cmd=_donations&business=henrik%40schack%2edk&lc=US&item_name=Google%20Authenticator&item_number=Google%20Authenticator&no_shipping=0&no_note=1&tax=0&bn=PP%2dDonationsBF&charset=UTF%2d8" rel="nofollow ugc">Henrik.Schack</a> for writing/maintaining versions 0.20 through 0.48</p>
<p><a href="http://tobias.baethge.com/" rel="nofollow ugc">Tobias Bäthge</a> for his code rewrite and German translation.</p>
<p><a href="http://blog.pcode.nl/" rel="nofollow ugc">Pascal de Bruijn</a> for his “relaxed mode” idea.</p>
<p><a href="http://technobabbl.es/" rel="nofollow ugc">Daniel Werl</a> for his usability tips.</p>
<p><a href="http://dd32.id.au/" rel="nofollow ugc">Dion Hulse</a> for his bugfixes.</p>
<p><a href="https://profiles.wordpress.org/users/aldolat/" rel="nofollow ugc">Aldo Latino</a> for his Italian translation.</p>
<p><a href="http://www.kaijia.me/" rel="nofollow ugc">Kaijia Feng</a> for his Simplified Chinese translation.</p>
<p><a href="http://www.buayacorp.com/" rel="nofollow ugc">Alex Concha</a> for his security tips.</p>
<p><a href="http://jetienne.com/" rel="nofollow ugc">Jerome Etienne</a> for his jquery-qrcode plugin.</p>
<p><a href="http://orizhial.com/" rel="nofollow ugc">Sébastien Prunier</a> for his Spanish and French translation.</p>


Google Authenticator

Personally I feel 2FA should be a part of WordPress core. But since it isn't, plugins like this one are a must-have to secure your sites.

The configuration interface is clearly layed out and the login page fits in perfectly with the default WP login page styling.

This plugin is light-weight, unobtrusive, free and adds that extra layer of security. Should your admin credentials ever be compromised, 2FA will keep your site secure.

Must-have security plugin

Awesome plugin, which is almost always in first group of plugin I've install on new website. Thank you for create and maintain it.

One on few my first-to-install plugin

Google Authenticator for your WordPress blog.

noplanman

<p>With WP-OTP you can easily set up 2 Factor Authentication with One Time Passwords for your WordPress login.<br />
This extra layer makes your WordPress site a lot more secure.</p>
<p>The new stealth mode allows for invisible OTP code entry, making your login screen look like any other, no extra OTP code input field.</p>
<h4>Getting started</h4>
<p>After installing and activating the plugin, every user can enable WP-OTP on their profile page.</p>
<p>It’s as easy as scanning the provided QR Code or entering the OTP secret to any OTP generator app.<br />
Then just activate it by entering the generated OTP and voilà, all set up.<br />
Now, the login requires an OTP code to succeed.</p>
<p>Each user gets their own secret key to authenticate with, giving them control over their login security.</p>
<h4>Development</h4>
<p>This plugin is completely open source and a work of passion.<br />
If you would like to be part of it and join in, make your way over to the <a href="https://git.feneas.org/noplanman/wp-otp" rel="nofollow ugc">project page</a> now.<br />
Also, if you have an idea you would like to see in this plugin or if you’ve found a bug, please <a href="https://git.feneas.org/noplanman/wp-otp/issues/new" rel="nofollow ugc">let me know</a>.</p>
<h4>Configuration</h4>
<ul>
<li><code>WP_OTP_STEALTH</code>: Set this to <code>true</code> to enable stealth OTP mode.</li>
</ul>
<h4>Filters</h4>
<p>There are a multitude of filters to be adjusted.</p>
<ul>
<li><code>wp_otp_qr_code_provisioning_uri</code>: URI for online QR Code rendering (must contain <code>{PROVISIONING_URI}</code> placeholder for QR Code data).</li>
<li><code>wp_otp_login_form_text</code>: Text for input field on the login screen.</li>
<li><code>wp_otp_login_form_text_sub</code>: Subtext for the input field on the login screen.</li>
<li><code>wp_otp_login_form_invalid_code_text</code>: Error text for an invalid code input on the login screen.</li>
<li><code>wp_otp_code_expiration_window</code>: Set the window of code verification expiration.</li>
<li><code>wp_otp_recovery_codes_count</code>: Number of recovery codes to generate.</li>
<li><code>wp_otp_recovery_codes_length</code>: Length of the recovery codes.</li>
<li><code>wp_otp_secret_length</code>: Length of the secret key.</li>
</ul>
<h4>Minimum requirements</h4>
<p>WordPress 4.6, PHP 7.4.</p>
<h4>Donate / Support</h4>
<p>All <a href="https://noplanman.ch/donate" rel="nofollow ugc">donations</a> are much appreciated, thank you 🙏</p>
<p><a href="https://tidelift.com/subscription/pkg/wordpress-wp-otp?utm_source=wordpress-wp-otp&utm_medium=referral&utm_campaign=readme" rel="nofollow ugc">Get professional support for this plugin with a Tidelift subscription</a><br />
<em>Tidelift helps make open source sustainable for maintainers while giving companies assurances about security, maintenance, and licensing for their dependencies.</em></p>
<h4>Security</h4>
<p>To report a security vulnerability, please use the <a href="https://tidelift.com/security" rel="nofollow ugc">Tidelift security contact</a>. Tidelift will coordinate the fix and disclosure.</p>


WP-OTP

Make your WordPress login extra secure with One Time Passwords.

Google Authenticator vs WP-OTP