rijensky

OtpPal lets your WordPress site send and verify OTP (One-Time Password) messages via WhatsApp. This plugin enables secure phone number verification for your WordPress forms, helping prevent spam and ensuring legitimate user submissions.
Key Features:
<ul>
<li>WhatsApp OTP Delivery: Send one-time passwords directly to users via WhatsApp</li>
<li>Form Plugin Integrations: Seamless integration with various wordpress form plugins for phone verification</li>
<li>Flexible Phone Input: Support for both international and national phone number formats</li>
<li>Easy Configuration: Simple setup through WordPress admin panel</li>
<li>Secure Verification: Server-side validation ensures secure OTP verification</li>
<li>Rate Limiting: Built-in protection against abuse (OtpPal.com)</li>
<li>Customizable UI: Clean, responsive lightbox interface for OTP input</li>
<li>Integration Guide: Built-in documentation for every supported form plugin and login option, with a public page and admin access under My OtpPal</li>
</ul>
Use Cases:
<ul>
<li>Passwordless Logins</li>
<li>Verify phone numbers in contact forms</li>
<li>Prevent spam submissions with phone verification</li>
<li>Ensure legitimate user contact information</li>
</ul>
<h3>Configuration</h3>
<ol>
<li>Navigate to OtpPal > Settings in your WordPress admin panel</li>
<li>Enter your OtpPal API key</li>
<li>Choose your preferred Phone Format:
<ul>
<li>International: Users enter phone numbers with country code (e.g., +1234567890)</li>
<li>National: Users enter phone numbers without country code (e.g., 1234567890)</li>
</ul>
</li>
<li>If using National format, select a Default Country for phone number validation</li>
<li>Click Save Settings</li>
</ol>
<h3>Usage</h3>
Enable passwordless login by embedding the login button anywhere on your site with the [otppal_login] shortcode. 
Add an in-form verifiable phone input using the otppal_phone input, or add a verification modal using the otppal_verify input. 
You can customize the appearance of the login button and the verification modal in the plugin’s config.
OtpPal supports CF7, Elementor Pro, WPForms, Gravity Forms, Fluent Forms, Ninja Forms, Formidable Forms, SureForms 
If you need another integration, please to contact us.
OtpPal will automatically:
<ul>
<li>Initialize the embedded phone widget using your global OtpPal settings (phone format, default country).</li>
<li>Intercept the form submission, open the OTP modal, and only submit after successful verification.</li>
<li>
Write the verified phone number into a hidden field so your form plugin receives it like any other field.
</li>
<li>
Use either <code>otppal_phone</code> or <code>otppal_verify</code> in a single form – never use both.
</li>
</ul>
Integration Guide
After activation or upgrade, the plugin creates an Integration Guide page on your site (typically at <code>/integration-guide/</code>). You can also embed the guide anywhere with the <code>[otppal_integration_guide]</code> shortcode.
<ul>
<li>Open My OtpPal > Integration Guide in the WordPress admin for step-by-step setup instructions.</li>
<li>Share the public guide URL with your team or customers.</li>
</ul>
<h3>Support</h3>
For support, please visit the plugin’s support forum or contact the plugin author.

OtpPal

Client-side plugin for OtpPal – Send and verify OTPs via WhatsApp.

Volodymyr Kolesnykov

This plugin adds WebAuthn and passkey support to the <a href="https://wordpress.org/plugins/two-factor/" rel="ugc">Two Factor</a> plugin, providing a modern, secure authentication method.
Features:
<ul>
<li>Support for WebAuthn and passkeys (Windows Hello, Touch ID, YubiKeys, etc.)</li>
<li>Backward compatibility with previously registered U2F security keys</li>
<li>User-friendly settings and seamless authentication experience</li>
<li>Customizable error logging and behavior via action hooks</li>
<li>Works with the Two Factor plugin for flexible 2FA authentication</li>
</ul>
The plugin enables users to register and use hardware security keys and platform authenticators for stronger protection against password-based attacks and phishing.
Notes:
<ul>
<li>please use <a href="https://github.com/sjinks/wp-two-factor-provider-webauthn/issues" rel="nofollow ugc">GitHub issues</a> to report bugs;</li>
<li>the full source code with all development files is available on <a href="https://github.com/sjinks/wp-two-factor-provider-webauthn" rel="nofollow ugc">GitHub</a>.</li>
</ul>

WebAuthn Provider for Two Factor

Thank you so much for this plugin!!  

In February 2022 Chrome changed things so hardware security keys would no longer work with the "Two Factor" plugin. Installing this add-on gets it working again. 

I had to change the "User Verification Requirement" to "Discouraged" in order to use my existing Yubikey (without re-adding it). Otherwise, it asked for a PIN but then wouldn't recognize my key.

Hopefully it can get merged directly into the Two Factor plugin soon? 😁🙏

Two Factor works with hardware keys again!

Thank you for bridging the gap while we wait for the PR. 
This is what Open Source is all about. 

FIDO U2F WebAuthn for Two Factor


This is helpful for evaluating purposes of the code. As this plugin is part of a security level all the code should be readable easily for auditors.



Besides that, well done.Thank you.


Works well for my use case but please provide unminified JS files.


This is great. You can literally log into WordPress with 2FA using one touch (password manager with auto-login combined with this for 2FA). Beats using an authenticator app any day.


One touch 2FA is a dream

WebAuthn authentication provider for Two Factor plugin.

OtpPal vs WebAuthn Provider for Two Factor