Passlogy

<p>You need strong password to protect your site. However, how do you remember it or is it really strong?<br />
“PassClip Auth” provides really strong password that is also easy to remember.<br />
Once you make your “pattern”, you can get your password using “PassClip”. And the password will change every 30 seconds(at the shortest).</p>
<h4>Get and sign up for PassClip</h4>
<ol>
<li>Go to <a href="https://www.passclip.com/" rel="nofollow ugc">the page about PassClip</a> and install PassClip on your smart phone.</li>
<li>Activate your PassClip by registering your “pattern” and email address.</li>
</ol>
<h4>Sign up for PassClip Auth(PCA)</h4>
<ol>
<li>Input PassClip Code “paauth” in your PassClip. That makes a new slot in your PassClip.</li>
<li>Go to <a href="https://member.passclip.com/member/ui/" rel="nofollow ugc">PassClip Auth member’s page</a> and log in with your email address and password which the slot shows you.</li>
<li>Make your “PassClip Code”. And then you get your “PassClip Auth app service id(PCA app service id)”. You need both “code” and “id” to use this plugin.</li>
</ol>
<h4>How to apply PassClip Auth to your site</h4>
<ol>
<li>Install and activate this plugin to your WordPress.</li>
<li>Go to PassClip Auth Options Setting from the menu.</li>
<li>Input the PassClip Auth app service id(PCA app service id), PassClip Code and other items in the setting page and click the “Save Change” button.</li>
</ol>
<h4>How to log in to WordPress site with PassClip Auth</h4>
<ol>
<li>Users register PassClip Code of your site in their PassClip. That makes a new slot to get password to log in to your site.</li>
<li>Show the password in PassClip (tap the new slot).</li>
<li>In login form of your site, users enter email address and password in the slot. (<strong>Users do not need general WordPress password.</strong>)</li>
<li>Click the “Log in” button.</li>
</ol>


PassClip Auth for WordPress

"PassClip Auth" provides strong and easy authentication. "PassClip Auth for WordPress" is the plugin to launch PassClip Auth to Wo …

Ivan

<p>The Google Authenticator plugin for WordPress gives you two-factor authentication using the Google Authenticator app for Android/iPhone/Blackberry.</p>
<p>If you are security aware, you may already have the Google Authenticator app installed on your smartphone, using it for two-factor authentication on Gmail/Dropbox/Lastpass/Amazon etc.</p>
<p>The two-factor authentication requirement can be enabled on a per-user basis. You could enable it for your administrator account, but log in as usual with less privileged accounts.</p>
<p>If You need to maintain your blog using an Android/iPhone app, or any other software using the XMLRPC interface, you can enable the App password feature in this plugin,<br />
but please note that enabling the App password feature will make your blog less secure.</p>
<h3>Credits</h3>
<p>Thanks to:</p>
<p><a href="https://profiles.wordpress.org/evinak/" rel="nofollow ugc">Oleksiy</a> for a bugfix in multisite.</p>
<p><a href="https://github.com/pancek" rel="nofollow ugc">Paweł Nowacki</a> for the Polish translation</p>
<p><a href="https://github.com/FabioZumbi12" rel="nofollow ugc">Fabio Zumbi</a> for the Portuguese translation</p>
<p><a href="https://www.guidoschalkx.com/" rel="nofollow ugc">Guido Schalkx</a> for the Dutch translation.</p>
<p><a href="https://www.paypal.com/cgi-bin/webscr?cmd=_donations&business=henrik%40schack%2edk&lc=US&item_name=Google%20Authenticator&item_number=Google%20Authenticator&no_shipping=0&no_note=1&tax=0&bn=PP%2dDonationsBF&charset=UTF%2d8" rel="nofollow ugc">Henrik.Schack</a> for writing/maintaining versions 0.20 through 0.48</p>
<p><a href="http://tobias.baethge.com/" rel="nofollow ugc">Tobias Bäthge</a> for his code rewrite and German translation.</p>
<p><a href="http://blog.pcode.nl/" rel="nofollow ugc">Pascal de Bruijn</a> for his “relaxed mode” idea.</p>
<p><a href="http://technobabbl.es/" rel="nofollow ugc">Daniel Werl</a> for his usability tips.</p>
<p><a href="http://dd32.id.au/" rel="nofollow ugc">Dion Hulse</a> for his bugfixes.</p>
<p><a href="https://profiles.wordpress.org/users/aldolat/" rel="nofollow ugc">Aldo Latino</a> for his Italian translation.</p>
<p><a href="http://www.kaijia.me/" rel="nofollow ugc">Kaijia Feng</a> for his Simplified Chinese translation.</p>
<p><a href="http://www.buayacorp.com/" rel="nofollow ugc">Alex Concha</a> for his security tips.</p>
<p><a href="http://jetienne.com/" rel="nofollow ugc">Jerome Etienne</a> for his jquery-qrcode plugin.</p>
<p><a href="http://orizhial.com/" rel="nofollow ugc">Sébastien Prunier</a> for his Spanish and French translation.</p>


Google Authenticator

Personally I feel 2FA should be a part of WordPress core. But since it isn't, plugins like this one are a must-have to secure your sites.

The configuration interface is clearly layed out and the login page fits in perfectly with the default WP login page styling.

This plugin is light-weight, unobtrusive, free and adds that extra layer of security. Should your admin credentials ever be compromised, 2FA will keep your site secure.

Must-have security plugin

Awesome plugin, which is almost always in first group of plugin I've install on new website. Thank you for create and maintain it.

One on few my first-to-install plugin

Google Authenticator for your WordPress blog.

PassClip Auth for WordPress vs Google Authenticator