Helmi

<p><strong>SecureAuth Authenticator 2FA</strong> enhances your WordPress login security by requiring a time-based one-time password (TOTP) in addition to the regular username and password. The TOTP code is generated by an authenticator app on your mobile device, adding an extra layer of protection even if your password is compromised.</p>
<p>This plugin is lightweight, secure, and easy to use. It integrates directly into the user profile page to allow users to set up and manage their two-factor authentication with ease.</p>
<p><strong>Features:</strong></p>
<ul>
<li>Adds a TOTP (Time-Based One-Time Password) field to the login form.</li>
<li>User-friendly 2FA setup available on each user’s profile page.</li>
<li>Generates secret keys and displays QR codes for scanning with mobile apps.</li>
<li>Compatible with apps like Google Authenticator, Microsoft Authenticator, and Authy.</li>
<li>Secure handling with nonce verification and input sanitization.</li>
<li>No external libraries required (except Google Chart API for QR code).</li>
</ul>


SecureAuth Authenticator 2FA

Adds TOTP-based two-factor authentication (2FA) via SecureAuth Authenticator to your WordPress login page.

Michael Finkenberger

<p><strong>WP Access Control Center</strong> is a powerful security control center for WordPress administrators who want full control over authentication, sessions, and password policies.</p>
<p>Take control of your site’s access layer with real-time session monitoring, flexible two-factor authentication, and powerful emergency tools — all in one place.</p>
<h3>🛡️ Security Overview Dashboard 📊</h3>
<ul>
<li>General indicator about the current site security status</li>
<li>Status overview about the most important security settings</li>
<li>Live view of main session KPIs (refresh: 5s)</li>
<li>Next step recommendations to get your site more secure</li>
<li>Can be made <em>sticky</em> to stay visible when scrolling down</li>
</ul>
<h3>🔐 Two-Factor Protection</h3>
<ul>
<li>Email-based verification codes</li>
<li>TOTP support (Google Authenticator, Microsoft Authenticator, Authy, etc.)</li>
<li>Role-based enforcement</li>
<li>Grace periods for smooth rollout</li>
<li>Backup codes for account recovery</li>
<li>Trusted devices to reduce login friction</li>
</ul>
<h3>👁️ Live Session Control</h3>
<ul>
<li>Real-time overview of all active sessions (AJAX-powered)</li>
<li>Inspect session details and parameters</li>
<li>Instantly terminate individual or all sessions</li>
<li>Monitor user activity as it happens</li>
</ul>
<h3>🔑 Password Policies</h3>
<ul>
<li>Enforce password strength requirements</li>
<li>Prevent password reuse</li>
<li>Define role-based password expiration</li>
<li>Real-time feedback during password creation</li>
</ul>
<h3>⚡ Bulk Password Reset</h3>
<ul>
<li>Reset passwords for roles or selected users</li>
<li>Optionally terminate related sessions</li>
<li>Automatic email notifications (fully customizable)</li>
</ul>
<h3>🔄 Security Key Rotation</h3>
<ul>
<li>One-click regeneration of WordPress KEYs & SALTs</li>
<li>Immediately invalidates all active sessions</li>
<li>Essential for incident response</li>
</ul>
<h3>⏱️ Advanced Session Control</h3>
<ul>
<li>Configure session lifetime per role</li>
<li>Separate rules for “Remember Me”</li>
<li>Automatic cleanup of expired sessions</li>
</ul>
<h3>🎨 Login Experience Designer</h3>
<ul>
<li>Customize the 2FA login page</li>
<li>Background images (outer & inner)</li>
<li>Flexible CSS customization</li>
<li>Safe defaults – no changes unless configured</li>
</ul>
<p><strong>No external services required.</strong> Everything runs locally within your WordPress installation.</p>


WP Access Control Center

Take full control over authentication, sessions, and password security in WordPress – including real-time session monitoring, 2FA, and emergency tools

SecureAuth Authenticator 2FA vs WP Access Control Center