Mohamed Endisha

<p>Secure 2FA adds an extra layer of security to your WordPress login process by enabling 2FA via several authentication methods.</p>
<h3>Features</h3>
<ul>
<li>Free two-factor authentication (2FA) plugin</li>
<li>Multiple authentication methods: One-time password (OTP), Yubico OTP (YubiKey), Email OTP, and WhatsApp OTP</li>
<li>Customizable OTP configurations: Expiration time, retries, and more</li>
<li>Role-based enforcement: Require 2FA for all or specific roles while excluding others</li>
<li>Supports WordPress Multisite and single-site installations</li>
<li>Activity log tracking: Monitor authentication attempts and security events</li>
<li>Rate limiting: Prevent brute-force attacks by limiting OTP requests per user</li>
<li>Backup recovery codes: Allow users to regain access if they lose their primary 2FA method</li>
<li>Automatic log cleanup: Enable or disable automatic deletion of old activity logs with configurable schedules</li>
<li>UI control: Manage the visibility of the “Configure 2FA” option in the sidebar, admin toolbar, and user list</li>
</ul>
<h3>Time-based One-Time Password 2FA Method</h3>
<ul>
<li>Compatible with diifrent authotcitors apps susch as Google Authenticator and Duo etc.</li>
<li>Generates QR codes during 2FA setup.</li>
<li>Supports manual setup keys.</li>
</ul>
<h3>WhatsApp 2FA Method</h3>
<p>This method leverages Meta’s official API to send OTPs via WhatsApp authentication template. It supports the following features:</p>
<ul>
<li>Set a default template language.</li>
<li>Support multiple template languages based on the user’s UI language (templates must match WhatsApp requirements).</li>
<li>Define a base country for phone numbers when configuring 2FA.</li>
<li>Restrict phone number selection by specifying an allowed countries list.</li>
<li>Enable IP address lookup to detect the user’s country during 2FA setup.</li>
<li>Allow or prevent multiple users from using the same phone number.</li>
<li>Set custom phone number regex patterns to enforce specific formatting rules.</li>
</ul>
<h3>Email OTP 2FA Method</h3>
<ul>
<li>Allow or disallow users to enter a different email when configuring email as a two-factor authentication method.</li>
<li>Specify a custom email address from which OTPs will be sent.</li>
<li>Customize email languages, subject lines, and message content based on supported languages.</li>
</ul>
<h3>Yubico OTP 2FA Method</h3>
<p>Yubico OTP is a secure and convenient authentication method supported by all YubiKeys out of the box. It provides an additional layer of security as a second-factor authentication option.</p>
<h3>Requirements</h3>
<ul>
<li>WordPress 6.0 or newer.</li>
<li>PHP version 7.4 or newer.</li>
</ul>
<h3>External Library and Services Usage</h3>
<ul>
<li>The plugin utilizes the <a href="https://github.com/jackocnr/intl-tel-input" rel="nofollow ugc">intl-tel-input</a> library to provide phone number formatting functionality.  </li>
<li>The plugin integrates with Meta’s WhatsApp Business API, which is subject to <strong>Meta’s Terms of Service</strong> and <strong>pricing policies</strong>. You may need to subscribe to a third-party WhatsApp API method or a Meta-approved Business Solution Provider to use this service. For details, visit <a href="https://developers.facebook.com/docs/whatsapp" rel="nofollow ugc">Meta’s WhatsApp Business API documentation</a>.  </li>
<li>The plugin integrates with the <strong>Yubico OTP API</strong>. It securely sends the user’s one-time password (OTP) to Yubico’s verification service to authenticate login attempts. Review Yubico’s <a href="https://www.yubico.com/support/terms-conditions/yubico-website-terms-conditions/" rel="nofollow ugc">Terms & Conditions</a> and <a href="https://www.yubico.com/support/terms-conditions/privacy-notice/" rel="nofollow ugc">Privacy Notice</a> for more details.</li>
</ul>
<h3>License</h3>
<p>Secure 2FA is licensed under the GNU General Public License v2 or later.</p>


Secure 2FA

Secure 2FA adds an extra layer of security to your WordPress login process by enabling 2FA via several authentication methods.

Two Factor Authentication vs Secure 2FA