Mohamed Endisha

<p>Secure 2FA adds an extra layer of security to your WordPress login process by enabling 2FA via several authentication methods.</p>
<h3>Features</h3>
<ul>
<li>Free two-factor authentication (2FA) plugin</li>
<li>Multiple authentication methods: One-time password (OTP), Yubico OTP (YubiKey), Email OTP, and WhatsApp OTP</li>
<li>Customizable OTP configurations: Expiration time, retries, and more</li>
<li>Role-based enforcement: Require 2FA for all or specific roles while excluding others</li>
<li>Supports WordPress Multisite and single-site installations</li>
<li>Activity log tracking: Monitor authentication attempts and security events</li>
<li>Rate limiting: Prevent brute-force attacks by limiting OTP requests per user</li>
<li>Backup recovery codes: Allow users to regain access if they lose their primary 2FA method</li>
<li>Automatic log cleanup: Enable or disable automatic deletion of old activity logs with configurable schedules</li>
<li>UI control: Manage the visibility of the “Configure 2FA” option in the sidebar, admin toolbar, and user list</li>
</ul>
<h3>Time-based One-Time Password 2FA Method</h3>
<ul>
<li>Compatible with diifrent authotcitors apps susch as Google Authenticator and Duo etc.</li>
<li>Generates QR codes during 2FA setup.</li>
<li>Supports manual setup keys.</li>
</ul>
<h3>WhatsApp 2FA Method</h3>
<p>This method leverages Meta’s official API to send OTPs via WhatsApp authentication template. It supports the following features:</p>
<ul>
<li>Set a default template language.</li>
<li>Support multiple template languages based on the user’s UI language (templates must match WhatsApp requirements).</li>
<li>Define a base country for phone numbers when configuring 2FA.</li>
<li>Restrict phone number selection by specifying an allowed countries list.</li>
<li>Enable IP address lookup to detect the user’s country during 2FA setup.</li>
<li>Allow or prevent multiple users from using the same phone number.</li>
<li>Set custom phone number regex patterns to enforce specific formatting rules.</li>
</ul>
<h3>Email OTP 2FA Method</h3>
<ul>
<li>Allow or disallow users to enter a different email when configuring email as a two-factor authentication method.</li>
<li>Specify a custom email address from which OTPs will be sent.</li>
<li>Customize email languages, subject lines, and message content based on supported languages.</li>
</ul>
<h3>Yubico OTP 2FA Method</h3>
<p>Yubico OTP is a secure and convenient authentication method supported by all YubiKeys out of the box. It provides an additional layer of security as a second-factor authentication option.</p>
<h3>Requirements</h3>
<ul>
<li>WordPress 6.0 or newer.</li>
<li>PHP version 7.4 or newer.</li>
</ul>
<h3>External Library and Services Usage</h3>
<ul>
<li>The plugin utilizes the <a href="https://github.com/jackocnr/intl-tel-input" rel="nofollow ugc">intl-tel-input</a> library to provide phone number formatting functionality.  </li>
<li>The plugin integrates with Meta’s WhatsApp Business API, which is subject to <strong>Meta’s Terms of Service</strong> and <strong>pricing policies</strong>. You may need to subscribe to a third-party WhatsApp API method or a Meta-approved Business Solution Provider to use this service. For details, visit <a href="https://developers.facebook.com/docs/whatsapp" rel="nofollow ugc">Meta’s WhatsApp Business API documentation</a>.  </li>
<li>The plugin integrates with the <strong>Yubico OTP API</strong>. It securely sends the user’s one-time password (OTP) to Yubico’s verification service to authenticate login attempts. Review Yubico’s <a href="https://www.yubico.com/support/terms-conditions/yubico-website-terms-conditions/" rel="nofollow ugc">Terms & Conditions</a> and <a href="https://www.yubico.com/support/terms-conditions/privacy-notice/" rel="nofollow ugc">Privacy Notice</a> for more details.</li>
</ul>
<h3>License</h3>
<p>Secure 2FA is licensed under the GNU General Public License v2 or later.</p>


Secure 2FA

Secure 2FA adds an extra layer of security to your WordPress login process by enabling 2FA via several authentication methods.

matrixplatform

<p>Teddy ID is a secure authentication service that allows your users to log in to your site by tapping just one button on user’s phone, without entering a password, yet as secure as modern internet banking sites. Every time a user logs in to your site, TeddyID recognizes the user automatically and sends a picture to his phone and to his computer. The user makes sure the pictures match and approves login by tapping “Yes” button in TeddyID app on his phone. Passwords are no longer needed, and security is ensured by use of two devices associated with the user: a computer and a phone. This is two factor authentication made simple.</p>
<p>Try it for yourself on our site https://www.TeddyID.com.</p>
<p>TeddyID will be displayed as a widget above your page content. In most cases, the entire login flow takes place within this widget and the user never has to leave your site.</p>
<p>New users will be automatically added to your wordpress database. There is an option to auto-generate email addresses to further ease the registration process in case your site doesn’t require emails.</p>
<p>Existing users can link their accounts at your site to their TeddyID accounts in their /wp-admin/ if they want to move from password based authentication to phone based authentication.</p>


Teddy ID

Secure login to your site by tapping just one button on the phone, no password required.

Secure 2FA vs Teddy ID