ProgrammeLab

WP Ultimate Security

Ultimate Security protects your WordPress site from brute force attacks, unauthorized access, and bots. Lightweight, modular, and privacy-focused.
Check out the documentation for this plugin from here
Link: <a href="https://docs.wpultimatesecurity.com/docs/" rel="nofollow ugc">Visit Documentation Site</a>
<h4>Key Features</h4>
Two-Factor Authentication 
* Email OTP verification 
* Google Authenticator, Authy, Microsoft Authenticator (TOTP/HOTP) 
* 2FA status dashboard
Login Protection 
* Custom login URL (hide wp-admin) 
* Login attempt limits 
* Password policy enforcement 
* Session management
Bot Protection 
* Google reCAPTCHA v2/v3 
* Cloudflare Turnstile 
* Protect login, registration, comments, WooCommerce
Security Hardening 
* Security keys rotation 
* Auto-update controls 
* Site health monitoring
Content Protection 
* Right-click disable 
* Text selection control 
* Image drag prevention
Tools 
* Security Score dashboard 
* Settings backup/restore 
* Test mode for previewing rules
<h3>External Services</h3>
This plugin connects to external services:
<h4>Cloudflare Turnstile</h4>
<ul>
<li>When: Turnstile CAPTCHA enabled</li>
<li>Sends: Response token, site secret key</li>
<li>URL: https://challenges.cloudflare.com/turnstile/v0/siteverify</li>
<li>Privacy: https://www.cloudflare.com/privacypolicy/</li>
</ul>
<h4>Google reCAPTCHA</h4>
<ul>
<li>When: reCAPTCHA enabled</li>
<li>Sends: Response token, site secret key</li>
<li>URL: https://www.google.com/recaptcha/api/siteverify</li>
<li>Privacy: https://policies.google.com/privacy</li>
</ul>
<h4>WordPress.org Salt API</h4>
<ul>
<li>When: Security keys rotation requested</li>
<li>Sends: Request for random salt strings</li>
<li>URL: https://api.wordpress.org/secret-key/1.1/salt/</li>
</ul>

Ultimate Security – Login Protection, 2FA, CAPTCHA & Hardening

Protect your WordPress site with 2FA, brute force protection, CAPTCHA, custom login URL, and security hardening.

Helmi

SecureAuth Authenticator 2FA enhances your WordPress login security by requiring a time-based one-time password (TOTP) in addition to the regular username and password. The TOTP code is generated by an authenticator app on your mobile device, adding an extra layer of protection even if your password is compromised.
This plugin is lightweight, secure, and easy to use. It integrates directly into the user profile page to allow users to set up and manage their two-factor authentication with ease.
Features:
<ul>
<li>Adds a TOTP (Time-Based One-Time Password) field to the login form.</li>
<li>User-friendly 2FA setup available on each user’s profile page.</li>
<li>Generates secret keys and displays QR codes for scanning with mobile apps.</li>
<li>Compatible with apps like Google Authenticator, Microsoft Authenticator, and Authy.</li>
<li>Secure handling with nonce verification and input sanitization.</li>
<li>No external libraries required (except Google Chart API for QR code).</li>
</ul>

SecureAuth Authenticator 2FA

Adds TOTP-based two-factor authentication (2FA) via SecureAuth Authenticator to your WordPress login page.

Ultimate Security – Login Protection, 2FA, CAPTCHA & Hardening vs SecureAuth Authenticator 2FA