santerref

<p>Improve the security of your WordPress by using the One-time Password feature of WP OTP: <a href="https://wpotp.com/" rel="nofollow ugc">https://wpotp.com/</a></p>
<p>WP OTP is an external service and you must create an account (which can be created from WordPress) to use the plugin. You only have to provide an email and a password.</p>
<p>Once the plugin is configured, an SMS will be sent to you at your next logins to authenticate yourself.</p>
<p>By adding this extra layer of security, it’s much harder for hackers to break into your accounts.</p>
<h4>User-specific</h4>
<p>Each user can have their own number and the 2FA feature does not have to be enabled for all users.</p>
<p>The process to assign a number to a user is very simple and is done in 2 steps.</p>
<h4>Plugin features</h4>
<ul>
<li>Canada and United States phone numbers only</li>
<li>Free 25 SMS when registering to try our plugin ($0.25)</li>
<li>Unlimited WordPress sites per account</li>
<li>Easily add funds into your account: $0.01 per SMS (minimum  $5.00)</li>
<li>Each user can have his own phone number</li>
<li>Free support and live chat</li>
<li>Simple UI/UX</li>
<li>Easy to use and setup</li>
</ul>
<h4>DEMO</h4>
<span class="embed-youtube" style="text-align:center; display: block;"><iframe loading="lazy" class="youtube-player" width="750" height="422" src="https://www.youtube.com/embed/sIWX-0HcENI?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent" allowfullscreen="true" style="border:0;" sandbox="allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox"></iframe></span>
<h4>Documentation</h4>
<p><a href="https://wpotp.com/documentation" rel="nofollow ugc">https://wpotp.com/documentation</a></p>
<h4>Coming soon</h4>
<ul>
<li>More supported countries</li>
</ul>


WP OTP – One-time password (OTP) 2FA for WordPress

Two-factor authentication for WordPress (SMS 2FA): A small plugin that's easy to use that let you add a second layer of protection in addition to …

Ivan

<p>The Google Authenticator plugin for WordPress gives you two-factor authentication using the Google Authenticator app for Android/iPhone/Blackberry.</p>
<p>If you are security aware, you may already have the Google Authenticator app installed on your smartphone, using it for two-factor authentication on Gmail/Dropbox/Lastpass/Amazon etc.</p>
<p>The two-factor authentication requirement can be enabled on a per-user basis. You could enable it for your administrator account, but log in as usual with less privileged accounts.</p>
<p>If You need to maintain your blog using an Android/iPhone app, or any other software using the XMLRPC interface, you can enable the App password feature in this plugin,<br />
but please note that enabling the App password feature will make your blog less secure.</p>
<h3>Credits</h3>
<p>Thanks to:</p>
<p><a href="https://profiles.wordpress.org/evinak/" rel="nofollow ugc">Oleksiy</a> for a bugfix in multisite.</p>
<p><a href="https://github.com/pancek" rel="nofollow ugc">Paweł Nowacki</a> for the Polish translation</p>
<p><a href="https://github.com/FabioZumbi12" rel="nofollow ugc">Fabio Zumbi</a> for the Portuguese translation</p>
<p><a href="https://www.guidoschalkx.com/" rel="nofollow ugc">Guido Schalkx</a> for the Dutch translation.</p>
<p><a href="https://www.paypal.com/cgi-bin/webscr?cmd=_donations&business=henrik%40schack%2edk&lc=US&item_name=Google%20Authenticator&item_number=Google%20Authenticator&no_shipping=0&no_note=1&tax=0&bn=PP%2dDonationsBF&charset=UTF%2d8" rel="nofollow ugc">Henrik.Schack</a> for writing/maintaining versions 0.20 through 0.48</p>
<p><a href="http://tobias.baethge.com/" rel="nofollow ugc">Tobias Bäthge</a> for his code rewrite and German translation.</p>
<p><a href="http://blog.pcode.nl/" rel="nofollow ugc">Pascal de Bruijn</a> for his “relaxed mode” idea.</p>
<p><a href="http://technobabbl.es/" rel="nofollow ugc">Daniel Werl</a> for his usability tips.</p>
<p><a href="http://dd32.id.au/" rel="nofollow ugc">Dion Hulse</a> for his bugfixes.</p>
<p><a href="https://profiles.wordpress.org/users/aldolat/" rel="nofollow ugc">Aldo Latino</a> for his Italian translation.</p>
<p><a href="http://www.kaijia.me/" rel="nofollow ugc">Kaijia Feng</a> for his Simplified Chinese translation.</p>
<p><a href="http://www.buayacorp.com/" rel="nofollow ugc">Alex Concha</a> for his security tips.</p>
<p><a href="http://jetienne.com/" rel="nofollow ugc">Jerome Etienne</a> for his jquery-qrcode plugin.</p>
<p><a href="http://orizhial.com/" rel="nofollow ugc">Sébastien Prunier</a> for his Spanish and French translation.</p>


Google Authenticator

Personally I feel 2FA should be a part of WordPress core. But since it isn't, plugins like this one are a must-have to secure your sites.

The configuration interface is clearly layed out and the login page fits in perfectly with the default WP login page styling.

This plugin is light-weight, unobtrusive, free and adds that extra layer of security. Should your admin credentials ever be compromised, 2FA will keep your site secure.

Must-have security plugin

Awesome plugin, which is almost always in first group of plugin I've install on new website. Thank you for create and maintain it.

One on few my first-to-install plugin

Google Authenticator for your WordPress blog.

WP OTP – One-time password (OTP) 2FA for WordPress vs Google Authenticator