rijensky

OtpPal lets your WordPress site send and verify OTP (One-Time Password) messages via WhatsApp. This plugin enables secure phone number verification for your WordPress forms, helping prevent spam and ensuring legitimate user submissions.
Key Features:
<ul>
<li>WhatsApp OTP Delivery: Send one-time passwords directly to users via WhatsApp</li>
<li>Form Plugin Integrations: Seamless integration with various wordpress form plugins for phone verification</li>
<li>Flexible Phone Input: Support for both international and national phone number formats</li>
<li>Easy Configuration: Simple setup through WordPress admin panel</li>
<li>Secure Verification: Server-side validation ensures secure OTP verification</li>
<li>Rate Limiting: Built-in protection against abuse (OtpPal.com)</li>
<li>Customizable UI: Clean, responsive lightbox interface for OTP input</li>
<li>Integration Guide: Built-in documentation for every supported form plugin and login option, with a public page and admin access under My OtpPal</li>
</ul>
Use Cases:
<ul>
<li>Passwordless Logins</li>
<li>Verify phone numbers in contact forms</li>
<li>Prevent spam submissions with phone verification</li>
<li>Ensure legitimate user contact information</li>
</ul>
<h3>Configuration</h3>
<ol>
<li>Navigate to OtpPal > Settings in your WordPress admin panel</li>
<li>Enter your OtpPal API key</li>
<li>Choose your preferred Phone Format:
<ul>
<li>International: Users enter phone numbers with country code (e.g., +1234567890)</li>
<li>National: Users enter phone numbers without country code (e.g., 1234567890)</li>
</ul>
</li>
<li>If using National format, select a Default Country for phone number validation</li>
<li>Click Save Settings</li>
</ol>
<h3>Usage</h3>
Enable passwordless login by embedding the login button anywhere on your site with the [otppal_login] shortcode. 
Add an in-form verifiable phone input using the otppal_phone input, or add a verification modal using the otppal_verify input. 
You can customize the appearance of the login button and the verification modal in the plugin’s config.
OtpPal supports CF7, Elementor Pro, WPForms, Gravity Forms, Fluent Forms, Ninja Forms, Formidable Forms, SureForms 
If you need another integration, please to contact us.
OtpPal will automatically:
<ul>
<li>Initialize the embedded phone widget using your global OtpPal settings (phone format, default country).</li>
<li>Intercept the form submission, open the OTP modal, and only submit after successful verification.</li>
<li>
Write the verified phone number into a hidden field so your form plugin receives it like any other field.
</li>
<li>
Use either <code>otppal_phone</code> or <code>otppal_verify</code> in a single form – never use both.
</li>
</ul>
Integration Guide
After activation or upgrade, the plugin creates an Integration Guide page on your site (typically at <code>/integration-guide/</code>). You can also embed the guide anywhere with the <code>[otppal_integration_guide]</code> shortcode.
<ul>
<li>Open My OtpPal > Integration Guide in the WordPress admin for step-by-step setup instructions.</li>
<li>Share the public guide URL with your team or customers.</li>
</ul>
<h3>Support</h3>
For support, please visit the plugin’s support forum or contact the plugin author.

OtpPal

Client-side plugin for OtpPal – Send and verify OTPs via WhatsApp.

ishitaka

XO Security is a plugin to enhance login related security. 
This plugin does not write to .htaccess file. Besides Apache, LiteSpeed, Nginx and IIS also work.
<h4>Functions</h4>
<ul>
<li>Record login log.</li>
<li>Limit login attempts.</li>
<li>Add Captcha to the login form and comment form.</li>
<li>Change the URL of the login page.</li>
<li>Enable two-factor authentication (2FA) for login.</li>
<li>Login Alert.</li>
<li>Disable login by mail address.</li>
<li>Disable login by user name.</li>
<li>Change login error message.</li>
<li>Disable XML-RPC and XML-RPC Pingback.</li>
<li>Disable REST API.</li>
<li>Disable author archive page.</li>
<li>Remove comment author class of comments list.</li>
<li>Remove the username from the oEmbed response data.</li>
<li>WooCommerce login page protection.</li>
<li>Anti-spam comment.</li>
<li>Hide WordPress version information.</li>
<li>Edit the author slug.</li>
<li>Disable RSS and Atom feeds.</li>
<li>Activate maintenance mode.</li>
<li>Delete the readme.html file.</li>
</ul>
<h4>WordPress multisite considerations</h4>
If you set the login page separately for the main site and the subsite, you will not be able to use the password loss function of the subsite. We recommend that you set the login page to be common to all sites.

XO Security

This is awesome plugin!
It has all the features I need and is very easy to use.

Awesome!

長年、SiteGuardを使っていましたが、たまにログインできなくなってプラグインをサーバーから削除とかしたりだったので、こちらのプラグインを使い始めました。
設定画面もわかりやすく、作動も安定していて、ログイン試行履歴とかも見れます（結構不正ログインされようとしているのがわかって楽しい）、随時他のサイトのセキュリティプラグインもこちらに切り替えていこうと思っています。感謝感謝

とても良い


This one plugin completes my security measures. Thanks !!


This one is all you need !


It's my top recommendation for security plugins on WordPress sites.It includes all the security features I need.


What a great plugin!


This plugin is lightweight and easy to use, so I recommend it.


XO Security is a plugin to enhance login related security.

OtpPal vs XO Security