Mohamed Endisha

<p>Secure 2FA adds an extra layer of security to your WordPress login process by enabling 2FA via several authentication methods.</p>
<h3>Features</h3>
<ul>
<li>Free two-factor authentication (2FA) plugin</li>
<li>Multiple authentication methods: One-time password (OTP), Yubico OTP (YubiKey), Email OTP, and WhatsApp OTP</li>
<li>Customizable OTP configurations: Expiration time, retries, and more</li>
<li>Role-based enforcement: Require 2FA for all or specific roles while excluding others</li>
<li>Supports WordPress Multisite and single-site installations</li>
<li>Activity log tracking: Monitor authentication attempts and security events</li>
<li>Rate limiting: Prevent brute-force attacks by limiting OTP requests per user</li>
<li>Backup recovery codes: Allow users to regain access if they lose their primary 2FA method</li>
<li>Automatic log cleanup: Enable or disable automatic deletion of old activity logs with configurable schedules</li>
<li>UI control: Manage the visibility of the “Configure 2FA” option in the sidebar, admin toolbar, and user list</li>
</ul>
<h3>Time-based One-Time Password 2FA Method</h3>
<ul>
<li>Compatible with diifrent authotcitors apps susch as Google Authenticator and Duo etc.</li>
<li>Generates QR codes during 2FA setup.</li>
<li>Supports manual setup keys.</li>
</ul>
<h3>WhatsApp 2FA Method</h3>
<p>This method leverages Meta’s official API to send OTPs via WhatsApp authentication template. It supports the following features:</p>
<ul>
<li>Set a default template language.</li>
<li>Support multiple template languages based on the user’s UI language (templates must match WhatsApp requirements).</li>
<li>Define a base country for phone numbers when configuring 2FA.</li>
<li>Restrict phone number selection by specifying an allowed countries list.</li>
<li>Enable IP address lookup to detect the user’s country during 2FA setup.</li>
<li>Allow or prevent multiple users from using the same phone number.</li>
<li>Set custom phone number regex patterns to enforce specific formatting rules.</li>
</ul>
<h3>Email OTP 2FA Method</h3>
<ul>
<li>Allow or disallow users to enter a different email when configuring email as a two-factor authentication method.</li>
<li>Specify a custom email address from which OTPs will be sent.</li>
<li>Customize email languages, subject lines, and message content based on supported languages.</li>
</ul>
<h3>Yubico OTP 2FA Method</h3>
<p>Yubico OTP is a secure and convenient authentication method supported by all YubiKeys out of the box. It provides an additional layer of security as a second-factor authentication option.</p>
<h3>Requirements</h3>
<ul>
<li>WordPress 6.0 or newer.</li>
<li>PHP version 7.4 or newer.</li>
</ul>
<h3>External Library and Services Usage</h3>
<ul>
<li>The plugin utilizes the <a href="https://github.com/jackocnr/intl-tel-input" rel="nofollow ugc">intl-tel-input</a> library to provide phone number formatting functionality.  </li>
<li>The plugin integrates with Meta’s WhatsApp Business API, which is subject to <strong>Meta’s Terms of Service</strong> and <strong>pricing policies</strong>. You may need to subscribe to a third-party WhatsApp API method or a Meta-approved Business Solution Provider to use this service. For details, visit <a href="https://developers.facebook.com/docs/whatsapp" rel="nofollow ugc">Meta’s WhatsApp Business API documentation</a>.  </li>
<li>The plugin integrates with the <strong>Yubico OTP API</strong>. It securely sends the user’s one-time password (OTP) to Yubico’s verification service to authenticate login attempts. Review Yubico’s <a href="https://www.yubico.com/support/terms-conditions/yubico-website-terms-conditions/" rel="nofollow ugc">Terms & Conditions</a> and <a href="https://www.yubico.com/support/terms-conditions/privacy-notice/" rel="nofollow ugc">Privacy Notice</a> for more details.</li>
</ul>
<h3>License</h3>
<p>Secure 2FA is licensed under the GNU General Public License v2 or later.</p>


Secure 2FA

Secure 2FA adds an extra layer of security to your WordPress login process by enabling 2FA via several authentication methods.

craimundo

victornavarro

<p>OwnID is a passwordless add-on for your WordPress or WooCommerce website. The authentication flow is web-based and doesn’t require you to install an app. Our complete end-to-end platform works cross-OS, cross-device, and cross-domain. It supports Passkeys out of the box.</p>
<p>Our plugin handles a multitude of login scenarios: new user login, existing user login, phone unavailable, biometrics not supported, and more. Your users will be able to log in quickly and easily, always.</p>
<h3>CONFIGURATION STEPS</h3>
<ol>
<li>Sign up to OwnID <a href="https://console.ownid.com/registration?utm_source=wordpress" title="OwnID console" rel="nofollow ugc">console</a>.</li>
<li>Select <strong>WordPress</strong> integration and complete your onboarding.</li>
<li>Copy and paste the <strong>AppID</strong> and <strong>Shared Secret</strong> into OwnID WordPress plugin Settings.</li>
<li>Enjoy your passwordless login! 🚀</li>
</ol>
<h3>DOCUMENTATION AND SUPPORT</h3>
<ul>
<li>For more information about our product, check out <a href="https://ownid.com/" title="The best passwordless plugin" rel="nofollow ugc">OwnID</a>.</li>
<li>If you still have questions, ask us at contact@ownid.com</li>
</ul>
<h3>PRIVACY</h3>
<p>OwnID does not store any user data and has no access to any biometric data.</p>


OwnID Passwordless Login

This plugin will make your login/registration forms to WordPress and WooCommerce more secure and with a better UX experience.

Users won't have to remember a password anymore, they will be able to use their phones to automatically get logged-in in one click.

More secure, better UX, all devices supported.

Easiest way to secure your login form

An easy and secure passwordless add-on for your website.

Secure 2FA vs OwnID Passwordless Login