Web Guy

<p>This is probably the 2FA plugin you’re looking for.</p>
<p>Secure, private, and <em>lightweight</em>.</p>
<p>Integrates into WordPress like a native feature.</p>
<h4>Proactive vs Reactive Security</h4>
<p>Prevents attacks instead of reacting to them. The best breach is the one that never happens.</p>
<h4>How it Works</h4>
<ol>
<li>Install and activate the plugin</li>
<li>Go to <em>Users > Profile > Two-Factor Authentication</em> (near the bottom)</li>
<li>Check the box next to “Enable 2FA” and click “Update Profile”</li>
<li>2FA and Backup Codes are now enabled</li>
<li>Scan the QR code or manually enter the secret key into your auth app of choice (and be sure to rename the generic site name “2FA” to something more useful)</li>
<li>Once successful login with a 2FA code from your app has been confirmed, you should disable Backup Codes</li>
<li>Brute force protection is enabled by default and can be managed site-wide by admins in profile settings</li>
</ol>
<p>Backup Codes have been rethought from the usual method you might be used to. Read more about that in the FAQ below.</p>
<h4>Need Support?</h4>
<p>Ask for help <a href="https://github.com/webguyio/tiny-2fa/issues" rel="nofollow ugc">here</a>.</p>


Tiny 2FA + Brute Force Protection

A simple two-factor authentication plugin that just works.

twofactorauthentication

twofactor

<p>Have a completely Secure login to your WordPress eCommerce website using this FREE, simple & very easy to setup plugin. Ecommerce two factor authentication provides secure login to your WordPress eCommerce website ensuring no unauthorized access to your website.</p>
<h4>User Identity Verification or OTP Verification</h4>
<p>Login: Verify users on login with different authentication methods like SMS Verification, Email, Google Authenticator, Authy Authenticator, Duo, Microsoft Authenticator, TOTP Based Authenticator, Security Questions, and many others. Easy OTP Verification with SMS Verification and Email Verification.</p>
<h4>Third-Party Custom SMS Gateway</h4>
<p>The premium plugin supports any third-party custom SMS Gateway. If you don’t have your own SMS gateway you can use miniOrange gateway. Send SMS all over the world.<br />
* Some Famous Gateways Supported:<br />
    * Twilio<br />
    * Clickatell<br />
    * ClickSend<br />
    * SendGrid<br />
    * Plivo<br />
    * GatewayApi</p>
<p>Others not listed gateway can be tested on our site, Test your Gateway: <a href="https://login.xecurify.com/moas/login?redirectUrl=https://login.xecurify.com/moas/admin/customer/smsconfig" rel="nofollow ugc">Custom Gateway</a></p>
<h4>Supports variety of WordPress custom login forms and plugins</h4>
<ul>
<li>Woocommerce : <a href="https://wordpress.org/plugins/woocommerce/">Woocommerce</a></li>
<li>BuddyPress: <a href="https://wordpress.org/plugins/buddypress/">BuddyPress form</a></li>
<li>bbpress: <a href="https://wordpress.org/plugins/bbpress/">bbpress form</a></li>
<li>Ultimate Member – User Profile & Membership: <a href="https://wordpress.org/plugins/ultimate-member/">Ultimate Member – User Profile & Membership Form</a></li>
<li>Restrict Content Pro: <a href="https://wordpress.org/plugins/restrict-content/">Restrict Content Pro Form</a></li>
<li>My theme Login: <a href="https://wordpress.org/plugins/theme-my-login/">My theme Login Form</a></li>
<li>User Registration – Custom Registration: <a href="https://wordpress.org/plugins/bbpress/">User Registration – Custom Registration Form</a></li>
<li>Custom Login Page Customizer: <a href="https://wordpress.org/plugins/loginpress/">Custom Login Page Customizer Form</a></li>
<li>Admin Custom Login: <a href="https://wordpress.org/plugins/admin-custom-login/">Admin Custom Login Form</a></li>
<li>RegistrationMagic – Custom Registration :<a href="https://wordpress.org/plugins/custom-registration-form-builder-with-submission-manager/">RegistrationMagic – Custom Registration Forms</a></li>
<li>Digimember</li>
<li>Paid Membership Pro</li>
<li>Memberpress Pro</li>
<li>And many more</li>
</ul>
<h4>Ecommerce 2 Factor Authentication FREE Plugin Features</h4>
<ul>
<li>Simplified & easy user interface.</li>
<li>Ecommerce Two Factor Authentication (2FA) for <strong>3 User</strong> forever FREE!</li>
<li><strong>Variety of Authentication Methods:</strong> Any App supporting TOTP algorithm like Google, Authy, LastPass Authenticator, QR Code, Push Notification, Soft Token, Security Questions(KBA), OTP over Email and OTP over SMS </li>
<li>Includes Language Translation Support. Supports a wide variety of languages</li>
<li>Passwordless login or login with phone number</li>
<li>This plugin Supports standard TOTP + HOTP protocols for Authentication Methods.</li>
<li>Two Factor Authentication (2FA) allows authentication on the login page itself for Google Authenticator & miniOrange Soft Token.</li>
<li>Brute force attack prevention & IP Blocking.</li>
<li>User login Monitoring.</li>
<li>RCP Login Support</li>
</ul>
<h4>Ecommerce 2 Factor Authentication Premium Lite Plugin Features</h4>
<ul>
<li>Ecommerce – Two-Factor Authentication for all users and all user roles <em>( Site-based pricing )</em></li>
<li><strong>Two-Factor Authentication Methods for Ecommerce Login:</strong> Google Authenticator, Authy Authenticator, Microsoft Authenticator, LastPass Authenticator, Security Questions(KBA), OTP Over Email, OTP Over SMS, Email Verification, Mobile Verification <em>( SMS credits need to be purchased as per the need)</em></li>
<li><strong><a href="https://docs.miniorange.com/documentation/login-username-2nd-factor-2" rel="nofollow ugc">Multiple Login Options on Ecommerce Website</a>:</strong> Username + password + two-factor (or) Username + two-factor i.e. Passwordless login /Login without password /Password free authentication. With google authenticator plugin, the 2FA plugin user is authenticated directly with the second layer of security without entering the password. You can opt between a password and 2FA or only a second factor.</li>
<li><strong>Unlimited Email transactions:</strong> miniOrange’s google authenticator plugin provides unlimited Email transactions with your SMTP server</li>
<li><strong>Backup Method:</strong> KBA(Security Questions), OTP Over Email, Backup codes if you are unable to validate two step verification</li>
<li><a href="https://docs.miniorange.com/documentation/custom-redirect-login-url" rel="nofollow ugc">User role based redirection after Login</a></li>
<li><a href="https://docs.miniorange.com/documentation/google-authenticator-app-name" rel="nofollow ugc">Customize account name in Google Authenticator app</a></li>
<li><a href="https://docs.miniorange.com/documentation/custom-security-questions" rel="nofollow ugc">Custom Security Questions (KBA)</a></li>
<li><a href="https://docs.miniorange.com/documentation/specific-set-authentication-methods-based-role" rel="nofollow ugc">Role based 2 Factor</a></li>
<li><a href="https://docs.miniorange.com/documentation/enforce-2fa-users" rel="nofollow ugc">Force Two factor for users</a></li>
<li><a href="https://docs.miniorange.com/documentation/want-send-email-notification-users-setting-2-factor" rel="nofollow ugc">Email notification to users asking them to set up Two-Factor Authentication (WP 2FA/TFA)</a></li>
<li><a href="https://docs.miniorange.com/documentation/privacy-policy-site" rel="nofollow ugc">Set Privacy Policy for users</a></li>
<li><a href="https://docs.miniorange.com/documentation/remember-my-device" rel="nofollow ugc">Remember Device to skip 2fa</a></li>
<li><strong>Customizable Login UI Popup:</strong> Using google authenticator plugin you can customize the user interface of the login popup as per your preference.</li>
</ul>
<h4>Ecommerce 2 Factor Authentication Premium Plugin Features</h4>
<ul>
<li>Ecommerce Two Factor Authentication (2FA) for Users as per the upgrade <em>( User-based pricing )</em></li>
<li><strong>Available Authentication Methods for Ecommerce Login:</strong> Google, Authy, LastPass Authenticator, QR Code, Push Notification, Soft Token, Security Questions(KBA), OTP Over Email, OTP Over SMS, OTP Over SMS and Email, Email Verification, Hardware Token. <em>( SMS and Email credits need to be purchased as per the need)</em></li>
<li>Language Translation Support</li>
<li><strong>Multiple Login Options on Ecommerce Website:</strong> Username + password + two-factor (or) Username + two-factor i.e. Passwordless login <a href="https://docs.miniorange.com/documentation/login-username-2nd-factor-2" rel="nofollow ugc">Guide</a></li>
<li><strong>Backup Methods:</strong> KBA(Security Questions), OTP Over Email, Backup Codes <a href="https://docs.miniorange.com/documentation/want-configure-backup-methods-users-can-configure-case-locked-site-not-able-log" rel="nofollow ugc">Guide</a></li>
<li>Multisite compatible.</li>
<li>Force Two factor for users <a href="https://docs.miniorange.com/documentation/enforce-2fa-users" rel="nofollow ugc">Guide</a></li>
<li>Email notification to users asking them to set up Two Factor Authentication (2FA) <a href="https://docs.miniorange.com/documentation/want-send-email-notification-users-setting-2-factor" rel="nofollow ugc">Guide</a></li>
<li>User role based redirection after Login <a href="https://docs.miniorange.com/documentation/custom-redirect-login-url" rel="nofollow ugc">Guide</a>, Custom Security Questions (KBA) <a href="https://docs.miniorange.com/documentation/custom-security-questions" rel="nofollow ugc">Guide</a>, Customize account name in Google Authenticator app <a href="https://docs.miniorange.com/documentation/google-authenticator-app-name" rel="nofollow ugc">Guide</a>.</li>
<li>Enable Two Factor Authentication (2FA) for specific Users/User Roles <a href="https://docs.miniorange.com/documentation/enable-two-factor-based-roles" rel="nofollow ugc">Guide</a></li>
<li>Choose specific authentication methods for Users <a href="https://docs.miniorange.com/documentation/specific-set-authentication-methods-based-role" rel="nofollow ugc">Guide</a></li>
<li>Set Privacy Policy for users <a href="https://docs.miniorange.com/documentation/privacy-policy-site" rel="nofollow ugc">Guide</a></li>
<li>App-Specific Password to login from mobile Apps</li>
<li>Remember Device <a href="https://docs.miniorange.com/documentation/remember-my-device" rel="nofollow ugc">Guide</a></li>
<li><strong>Add-Ons Included:</strong> RBA & Trusted Devices Management Add-on, Personalization Add-on, and Short Codes Add-on</li>
</ul>
<h4>Ecommerce 2 Factor Authentication Enterprise Plugin Features</h4>
<ul>
<li>Ecommerce Two Factor Authentication (2FA) for Users as per the upgrade <em>( User-based pricing )</em></li>
<li><strong>Available Authentication Methods for Ecommerce login:</strong> Google, Authy, LastPass Authenticator, QR Code, Push Notification, Soft Token, Security Questions(KBA), OTP Over Email, OTP Over SMS, OTP Over SMS and Email, Email Verification, Hardware Token. <em>( SMS and Email credits need to be purchased as per the need)</em></li>
<li>Language Translation Support</li>
<li><strong>Multiple Login Options on Ecommerce Website:</strong> Username + password + two-factor (or) Username + two-factor i.e. Passwordless login.</li>
<li><strong>Backup Methods:</strong> KBA(Security Questions), OTP Over Email, Backup Codes</li>
<li>Multisite compatible.</li>
<li>Email notification to users asking them to set up Two Factor Authentication (2FA).</li>
<li>User role-based redirection after log in, Custom Security Questions (KBA), Customize account name in Google Authenticator app.</li>
<li>Enable Two Factor Authentication (2FA) for specific Users/User Roles</li>
<li>Choose specific authentication methods for Users</li>
<li>App-Specific Password to login from mobile Apps</li>
<li><strong>Add-Ons Included:</strong> RBA & Trusted Devices Management Add-on, Personalization Add-on, and Short Codes Add-on</li>
<li>**Brute force attack prevention, IP Blocking & User login Monitoring. **</li>
<li>File protection & strong password</li>
</ul>
<h4>Why do you need to register?</h4>
<p>miniOrange Two-factor Plugin uses miniOrange APIs to communicate between your WP and miniOrange. To keep this communication secure, we ask you to register and assign API keys specific to your account. This way your account and users’ calls can be only accessed by API keys assigned to you.<br />
Adding to this, you can also use the same account on multiple applications and your users do not have to maintain multiple accounts or 2-factors.</p>
<h4>Add Ons [Applicable for Free and Standard Plans, Inclusive in the Premium Plan]</h4>
<ul>
<li>
<p>RBA & Trusted Devices Management Add-on Features<br />
 * Remember Device<br />
 * Set Device Limit for the users to login<br />
 * IP Restriction: Limit users to login from specific IPs<br />
 * Personalization Add-on Features<br />
 * Custom UI of Two Factor Authentication (2FA) popups<br />
 * Custom Email and SMS Templates<br />
 * Customize ‘Powered by’ Logo<br />
 * Customize Plugin Icon<br />
 * Customize Plugin Name</p>
</li>
<li>
<p>Short Codes Add-on Features<br />
 * Option to turn on/off 2-factor by user<br />
 * Option to configure the Google Authenticator and Security Questions by user<br />
 * Option to ‘Enable Remember Device’ from a custom login form<br />
 * On-Demand ShortCodes for specific functionalities ( like for enabling 2FA for specific pages)</p>
</li>
</ul>
<h4>Apps Supported by the plugin</h4>
<ul>
<li>miniOrange Authenticator App.</li>
<li>Google Authenticator App.</li>
<li>Duo Authenticator App.</li>
<li>Microsoft Authenticator Authenticator App.</li>
<li>Authy 2-Factor Authentication App [STANDARD / PREMIUM FEATURE]</li>
</ul>
<h4>Useful blog posts about two factor authenticaion plugin </h4>
<p>*<a href="https://themeisle.com/blog/how-to-add-two-factor-authentication-to-wordpress/" rel="nofollow ugc">Beginner’s Guide: How to Add Two-Factor Authentication to WordPress</a><br />
*<a href="https://phppot.com/wordpress/how-to-add-wordpress-two-factor-authentication-2fa-using-google-authenticator-plugin/" rel="nofollow ugc">How to Add WordPress Two-Factor Authentication (2FA)</a></p>
<p>Customized solutions and Active support are available. Email us at info@miniorange.com or call us at +1 9786589387.</p>
<p><strong>Note: The plugin is GDPR Compliant and supports a wide variety of Language Translation</strong></p>


Ecommerce – Two Factor Authentication  

2FA, OTP on login for all forms with SMS, Email, other Apps like Microsoft, Duo, LastPass & more. Supports Email verification, SMS Verification, Q …

Tiny 2FA + Brute Force Protection vs Ecommerce – Two Factor Authentication