Web Guy

<p>This is probably the 2FA plugin you’re looking for.</p>
<p>Secure, private, and <em>lightweight</em>.</p>
<p>Integrates into WordPress like a native feature.</p>
<h4>Proactive vs Reactive Security</h4>
<p>Prevents attacks instead of reacting to them. The best breach is the one that never happens.</p>
<h4>How it Works</h4>
<ol>
<li>Install and activate the plugin</li>
<li>Go to <em>Users > Profile > Two-Factor Authentication</em> (near the bottom)</li>
<li>Check the box next to “Enable 2FA” and click “Update Profile”</li>
<li>2FA and Backup Codes are now enabled</li>
<li>Scan the QR code or manually enter the secret key into your auth app of choice (and be sure to rename the generic site name “2FA” to something more useful)</li>
<li>Once successful login with a 2FA code from your app has been confirmed, you should disable Backup Codes</li>
<li>Brute force protection is enabled by default and can be managed site-wide by admins in profile settings</li>
</ol>
<p>Backup Codes have been rethought from the usual method you might be used to. Read more about that in the FAQ below.</p>
<h4>Need Support?</h4>
<p>Ask for help <a href="https://github.com/webguyio/tiny-2fa/issues" rel="nofollow ugc">here</a>.</p>


Tiny 2FA + Brute Force Protection

A simple two-factor authentication plugin that just works.

Nick Hausler

<p>Privakey (www.privakey.com) is a secure, multi-factor authentication service that acts as an alternative to usernames and passwords. A user creates a Privakey account with a personal device, such as their mobile phone, and a PIN. They can then use this account to log into any Privakey-enabled website.</p>
<p>This plugin enables users to connect their Privakey accounts to their WordPress accounts, so anyone who switches can sign in with Privakey instead of their username & password.</p>


Privakey SignOn

This plugin allows users to securely sign into their WordPress accounts, without passwords, using the…

Tiny 2FA + Brute Force Protection vs Privakey SignOn