nicunarcisbodea

narcisbodea

<p>SMSTunnel transforms your Android phone into a powerful SMS gateway for WordPress.</p>
<h4>Key Features</h4>
<ul>
<li>Use Your Own Phone – No third-party SMS gateway costs</li>
<li>Two-Factor Authentication – Secure WordPress login with SMS 2FA</li>
<li>End-to-End Encryption – Messages encrypted with RSA keys</li>
<li>Quick Setup – Scan QR code from the mobile app</li>
</ul>
<h3>External Services</h3>
<p>This plugin connects to external services to provide certain functionality. Below are the details of each service:</p>
<h4>SMSTunnel API</h4>
<ul>
<li><strong>Purpose</strong>: Core service that enables the plugin to communicate with the SMSTunnel mobile app for sending SMS messages from your phone</li>
<li><strong>When data is sent</strong>: During Quick Setup (when pairing via QR code), when sending SMS messages, and when verifying API connections</li>
<li><strong>Data sent</strong>:
<ul>
<li>During setup: Site URL, site token (random identifier), admin email (for account creation)</li>
<li>When sending SMS: Phone number, message content (encrypted if E2E is enabled), API key for authentication</li>
</ul>
</li>
<li><strong>Service provider</strong>: SMSTunnel.io (NARBOWEB SRL)</li>
<li><strong>Privacy Policy</strong>: https://smstunnel.io/privacy</li>
<li><strong>Terms of Service</strong>: https://smstunnel.io/terms</li>
</ul>
<h4>SMSTunnel Authentication</h4>
<ul>
<li><strong>Purpose</strong>: Optional sign-in via Google, Facebook, or email to link your SMSTunnel account with WordPress</li>
<li><strong>When data is sent</strong>: Only when the admin uses the “Connect with Google/Facebook/Email” options on the plugin settings page</li>
<li><strong>Data sent</strong>:
<ul>
<li>Google/Facebook: Redirects to smstunnel.io/auth/google or smstunnel.io/auth/facebook with a callback URL and CSRF state token</li>
<li>Email login: Email and password sent to smstunnel.io/api/v1/auth/login</li>
<li>After authentication: Fetches user profile from smstunnel.io/auth/me and creates an API key via smstunnel.io/api/v1/api-keys</li>
</ul>
</li>
<li><strong>Service provider</strong>: SMSTunnel.io (NARBOWEB SRL)</li>
<li><strong>Privacy Policy</strong>: https://smstunnel.io/privacy</li>
<li><strong>Terms of Service</strong>: https://smstunnel.io/terms</li>
</ul>
<p><strong>Note</strong>: QR codes are generated locally using an embedded JavaScript library (qrcode.min.js). No external QR code generation services are used. All SMS messages are sent through your own Android phone – the SMSTunnel server only acts as a relay to connect WordPress with your phone.</p>


SMSTunnel

Send SMS messages directly from WordPress using your own Android phone as the SMS gateway.

Michael Finkenberger

<p><strong>WP Access Control Center</strong> is a powerful security control center for WordPress administrators who want full control over authentication, sessions, and password policies.</p>
<p>Take control of your site’s access layer with real-time session monitoring, flexible two-factor authentication, and powerful emergency tools — all in one place.</p>
<h3>🛡️ Security Overview Dashboard 📊</h3>
<ul>
<li>General indicator about the current site security status</li>
<li>Status overview about the most important security settings</li>
<li>Live view of main session KPIs (refresh: 5s)</li>
<li>Next step recommendations to get your site more secure</li>
<li>Can be made <em>sticky</em> to stay visible when scrolling down</li>
</ul>
<h3>🔐 Two-Factor Protection</h3>
<ul>
<li>Email-based verification codes</li>
<li>TOTP support (Google Authenticator, Microsoft Authenticator, Authy, etc.)</li>
<li>Role-based enforcement</li>
<li>Grace periods for smooth rollout</li>
<li>Backup codes for account recovery</li>
<li>Trusted devices to reduce login friction</li>
</ul>
<h3>👁️ Live Session Control</h3>
<ul>
<li>Real-time overview of all active sessions (AJAX-powered)</li>
<li>Inspect session details and parameters</li>
<li>Instantly terminate individual or all sessions</li>
<li>Monitor user activity as it happens</li>
</ul>
<h3>🔑 Password Policies</h3>
<ul>
<li>Enforce password strength requirements</li>
<li>Prevent password reuse</li>
<li>Define role-based password expiration</li>
<li>Real-time feedback during password creation</li>
</ul>
<h3>⚡ Bulk Password Reset</h3>
<ul>
<li>Reset passwords for roles or selected users</li>
<li>Optionally terminate related sessions</li>
<li>Automatic email notifications (fully customizable)</li>
</ul>
<h3>🔄 Security Key Rotation</h3>
<ul>
<li>One-click regeneration of WordPress KEYs & SALTs</li>
<li>Immediately invalidates all active sessions</li>
<li>Essential for incident response</li>
</ul>
<h3>⏱️ Advanced Session Control</h3>
<ul>
<li>Configure session lifetime per role</li>
<li>Separate rules for “Remember Me”</li>
<li>Automatic cleanup of expired sessions</li>
</ul>
<h3>🎨 Login Experience Designer</h3>
<ul>
<li>Customize the 2FA login page</li>
<li>Background images (outer & inner)</li>
<li>Flexible CSS customization</li>
<li>Safe defaults – no changes unless configured</li>
</ul>
<p><strong>No external services required.</strong> Everything runs locally within your WordPress installation.</p>


WP Access Control Center

Take full control over authentication, sessions, and password security in WordPress – including real-time session monitoring, 2FA, and emergency tools

SMSTunnel vs WP Access Control Center