usamashahadat

This plugin enhances the security of your WordPress website by adding a simple but effective two-factor authentication (2FA) screen after a successful password login.
Instead of adding fields to the main login page (which can cause conflicts), this plugin waits until a user has correctly entered their username and password. Then, it intercepts the login and presents them with a clean, separate screen to enter their 6-digit code from an authenticator app (like Google Authenticator, Authy, etc.).
This method is more secure, more compatible, and provides a smoother user experience.
Features:
Secure Post-Login Verification: 2FA check happens on a separate screen, after the password is correct.
Easy Setup: A simple “Usama 2FA” menu page for each user to scan a QR code and activate 2FA.
Backup Codes: On activation, 10 one-time-use backup codes are generated in case you lose your phone.
Regenerate Codes: You can generate new backup codes at any time from the settings page.
Lightweight & Simple: No bloat. Just the essential 2FA features.
Per-User: 2FA is enabled on a per-user basis. Administrators cannot control 2FA for other users.
<h3>External services</h3>
This plugin connects to a third-party API to generate the QR codes used during setup.
Service: goqr.me API (https://www.google.com/search?q=api.qrserver.com)
Usage: Used only once during setup to generate a QR code image that users scan with their authenticator app.
Data Sent: The API receives the user’s email address and the generated secret key (inside the OTPAuth URL) to create the image. This data is not stored by the service.
Provider: Foundata GmbH
Terms of Use: Terms of Use
Privacy Policy: Privacy Policy

Usama Simple 2FA Authenticator

A simple, secure 2FA plugin that adds a verification screen after login, requiring a code from your authenticator app.

popularsizzle

A two-step verification plugin using the Time-based One-time Password Algorithm (TOTP), which can be used with an app or service like Google Authenticator.
<ul>
<li>Lightweight and fast: no classes are instantiated until required</li>
<li>No reliance or affiliation with any third-party service</li>
<li>No setup or config required: immediately enabled for all uses upon plugin activation</li>
<li>Automatically throttles multiple failed login attempts</li>
<li>Uses filters to allow modifying functionality or output</li>
<li>Requires PHP 7 or later</li>
<li>Built for WordPress 4.8 or later</li>
</ul>

Simple 2FA

A lightweight, zero-config TOTP 2FA plugin with automatic rate limiting. PHP 7 and WP 4.8 or later.

Usama Simple 2FA Authenticator vs Simple 2FA