gpaterno

<p>A lot of web sites, even well known ones (newspapers, telcos, …) adopts<br />
WordPress as their CMS. WordPress is a great platform, however it<br />
can happen that password leaking or guessing might lead to unauthorized<br />
access to the platform. A potential attacker can be therefore able to<br />
change articles, part of the web site and/or make the website unavailable,<br />
with image and economic damages for a company or for a blogger.<br />
This is even more true if your website is not SSL protected.</p>
<p>SecurePass is a SaaS service offering an easy and affordable solution<br />
for One Time Passwords (OTP) and strong authentication in general. They<br />
offer 5 users for free included with their standard (=basic) account, which<br />
is more than enough for standard blogs and web sites. Companies can purchase<br />
additional users, if needed.</p>
<p>More information on the section “Setup and configure SecurePass” in Other Notes.<br />
To open a SecurePass account go to http://www.secure-pass.net/open</p>
<h3>Setup and configure SecurePass</h3>
<p>If you don’t own already an account with SecurePass, you can sign-up for a new account here: http://www.secure-pass.net/open</p>
<p>Note: Use “misec2011” as promo code, it will give you an entitlement for using<br />
SecurePass up to 10 users for 2 years free-of-charge. Without any promo code,<br />
you will have 5 users for 20 years for free. It depends on what you need (more users or more years).</p>
<p>Connect to the admin interface on https://admin.secure-pass.net<br />
and create a new device (basically a RADIUS client).</p>
<p>In the admin interface, go to the “Device” section and add a new device.<br />
You will need to set the public IP Address of the server, a fully qualified<br />
domain name (FQDN), and the secret password for the radius authentication.<br />
It’s ok if your web server is behind a firewall and/or NAT, ensure that<br />
your server has rights to send (and receive) RADIUS authentication requests,<br />
i.e. UDP port 1812.</p>
<h3>Further reading</h3>
<ul>
<li>
<p>This plugin web site:<br />
https://github.com/gpaterno/wp-securepass/</p>
</li>
<li>
<p>SecurePass web site:<br />
http://www.secure-pass.net/</p>
</li>
<li>
<p>UK on-line shop for SecurePass (they sell hardware tokens):<br />
http://shop.nervinesecurity.com/</p>
</li>
</ul>


SecurePass authentication

This is a plugin to autheticate users through the SecurePass One Time Passwords service.

Lalit Yadav

sumitkamboj53

<p>This plugin enhances the default WordPress login security by adding a One-Time Password (OTP) verification step via email:</p>
<ul>
<li>Users log in with their regular email/username and password.</li>
<li>If credentials are valid, an OTP is generated and emailed to the user.</li>
<li>A popup is shown on the same login page (<code>wp-login.php</code>) to enter the OTP.</li>
<li>Once the correct OTP is entered, the user is logged in.</li>
</ul>
<p>To help you get started, there’s a comprehensive video tutorial available that guides you through the process of setting.<br />
<span class="embed-youtube" style="text-align:center; display: block;"><iframe loading="lazy" class="youtube-player" width="750" height="422" src="https://www.youtube.com/embed/AZ6w1lkltOI?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent" allowfullscreen="true" style="border:0;" sandbox="allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox"></iframe></span></p>
<h3>Features</h3>
<ul>
<li>Secure login via OTP sent to user’s email.</li>
<li>Role-based OTP enforcement.</li>
<li>Uses native wp-login.php form — no custom forms required.</li>
<li>Session-based OTP handling for security.</li>
<li>Expiring OTP (default: 40 seconds).</li>
<li>No third-party dependencies.</li>
</ul>
<h3>Donate</h3>
<p>If you find this plugin useful and want to support its development, you can make a donation via the following link:</p>
<p><a href="https://donate.stripe.com/3cI5kE7sv6ex30s5LB5kk2x" rel="nofollow ugc">Donate Here</a></p>
<p>Your donation helps to ensure that this plugin remains free and receives regular updates!</p>
<h3>Credits</h3>
<p>The plugin development was supported by [webnotics], [sumitkamboj53]. Contributions and feedback are always welcome.</p>
<h3>Documentation and Support</h3>
<p><strong><a href="https://webnotics.org/email-otp-login-with-default-login-form/" title="documentation" rel="nofollow ugc">Documentation</a></strong><br />
For detailed documentation, visit https://webnotics.org/email-otp-login-with-default-login-form/<br />
For support, please contact us at <a href="mailto:support@webnotics.solutions" rel="nofollow ugc">support@webnotics.solutions</a>.</p>
<h3>License</h3>
<p>This plugin is licensed under the GPLv2 or later.</p>


Email OTP Login with default login form


A highly trusted plugin for adding OTP verification to login. It supports both email.






Best plugin for login with email otp

Adds email OTP (One-Time Password) verification after valid login credentials on the default wp-login.php form for added security.

SecurePass authentication vs Email OTP Login with default login form