Simon Kraft

Thomas Günther

protect.one

Out of the box, WordPress allows unlimited attempts to log in. This opens up opportunities for attackers to crack passwords simply by trying over and over again. This kind of attack is called brute-force, and Protect Login mitigates this by slowing down the login after a series of subsequent failed attempts.
But we did not stop there. We’re also working on ways to improve the security of your WordPress passwords. Currently, we do this by allowing you to enforce a password policy to make sure your users don’t use weak passwords for their accounts.

Protect Login

Add an additional layer of protection to your WordPress login and make sure bad actors have a hard time guessing your user's login credentials.

Henrik Schack

This is a plugin for WordPress that provides multifactor authentication with one-time passwords using the <a href="http://www.yubico.com/" rel="nofollow ugc">Yubikey USB token</a>. 
The plugin uses the Yubico Web service API in the authentication process. 
The one-time password requirement can be enabled on a per user basis.

yubikey-plugin

Thanks for an amazing plugin. Hopefully the maintainer is looking and will update things to show they are tested as working with WP 5.4, since it does.

Love that I can use my YubiKey on WP

Enhanced Login Security for Your Wordpress blog.

Protect Login vs yubikey-plugin