gpaterno

A lot of web sites, even well known ones (newspapers, telcos, …) adopts 
WordPress as their CMS. WordPress is a great platform, however it 
can happen that password leaking or guessing might lead to unauthorized 
access to the platform. A potential attacker can be therefore able to 
change articles, part of the web site and/or make the website unavailable, 
with image and economic damages for a company or for a blogger. 
This is even more true if your website is not SSL protected.
SecurePass is a SaaS service offering an easy and affordable solution 
for One Time Passwords (OTP) and strong authentication in general. They 
offer 5 users for free included with their standard (=basic) account, which 
is more than enough for standard blogs and web sites. Companies can purchase 
additional users, if needed.
More information on the section “Setup and configure SecurePass” in Other Notes. 
To open a SecurePass account go to http://www.secure-pass.net/open
<h3>Setup and configure SecurePass</h3>
If you don’t own already an account with SecurePass, you can sign-up for a new account here: http://www.secure-pass.net/open
Note: Use “misec2011” as promo code, it will give you an entitlement for using 
SecurePass up to 10 users for 2 years free-of-charge. Without any promo code, 
you will have 5 users for 20 years for free. It depends on what you need (more users or more years).
Connect to the admin interface on https://admin.secure-pass.net 
and create a new device (basically a RADIUS client).
In the admin interface, go to the “Device” section and add a new device. 
You will need to set the public IP Address of the server, a fully qualified 
domain name (FQDN), and the secret password for the radius authentication. 
It’s ok if your web server is behind a firewall and/or NAT, ensure that 
your server has rights to send (and receive) RADIUS authentication requests, 
i.e. UDP port 1812.
<h3>Further reading</h3>
<ul>
<li>
This plugin web site: 
https://github.com/gpaterno/wp-securepass/
</li>
<li>
SecurePass web site: 
http://www.secure-pass.net/
</li>
<li>
UK on-line shop for SecurePass (they sell hardware tokens): 
http://shop.nervinesecurity.com/
</li>
</ul>

SecurePass authentication

This is a plugin to autheticate users through the SecurePass One Time Passwords service.

mohsin.id

spartac

NotifSMS enables you to send text messages, OTP codes, and 2FA notifications directly from your WordPress site. 
You can send SMS alerts via Twilio, custom SMS gateways, or other supported providers.
Whether you want to notify WooCommerce customers, send OTP for login, or broadcast SMS to users, this plugin provides a straightforward solution.
<h3>🔹 Features</h3>
<ul>
<li>Send SMS from WordPress – Quickly send single or bulk SMS from your WordPress dashboard. </li>
<li>WooCommerce SMS Alerts – Notify customers about order status updates (completed, shipped, cancelled, etc.). </li>
<li>Contact Form 7 & Gravity Forms Integration – Send SMS when a form is submitted. </li>
<li>OTP & 2FA (Two Factor Authentication) – Add secure SMS-based login or verification. </li>
<li>Custom SMS Gateways – Use Twilio or integrate your preferred provider. </li>
<li>Bulk & Newsletter SMS – Send bulk SMS to all users or by user role. </li>
<li>Admin SMS Notifications – Get notified instantly of site activities (new user, post, comment, etc.). </li>
<li>URL Shortening Support – Integrates Bit.ly or Google URL Shortener API. </li>
<li>Developer Friendly – Hooks and filters for custom integrations. </li>
<li>Easy setup – Activate, configure your API key, and start sending SMS in minutes!</li>
</ul>
<h3>🔹 Use Cases</h3>
This plugin is optimized for speed, flexibility, and reliability. It integrates seamlessly with popular plugins and is ideal for: 
– WooCommerce stores that want to send SMS order notifications 
– WordPress membership or e-learning sites that need 2FA/OTP SMS 
– Businesses wanting SMS marketing or user alerts
You can even extend it with premium addons for deeper integrations.
<h3>🔸 Premium Addons</h3>
Upgrade with Pro Addons to unlock more SMS automation and integrations:
<ul>
<li>WooCommerce SMS Addon – Automatic order SMS notifications. </li>
<li>Event Espresso SMS Reminder – Send reminders to event attendees. </li>
<li>Bulk SMS Addon – Send SMS to all users, by role, or to custom lists. </li>
<li>Contact Form 7 SMS Addon – Admin SMS notifications for new form submissions. </li>
<li>Easy Digital Downloads Addon – Customer SMS notifications on order updates. </li>
<li>ClassiPress / Vantage / AdForest Addons – Send SMS to ad owners and business listers. </li>
</ul>
<a href="https://wpsms.io/sms-plugins/" rel="nofollow ugc">View all addons →</a>
Need a custom integration? <a href="https://wpsms.io/" rel="nofollow ugc">Contact us</a> — we’ll help you build one.
Visit the <a href="https://www.wpsms.io/" rel="nofollow ugc">official website</a> for documentation, guides, and API details. 
Contributors are welcome via <a href="https://github.com/mohsinoffline/wp-twilio-core" rel="nofollow ugc">GitHub</a>.
<blockquote>
Disclaimer: This plugin is not affiliated with or endorsed by Twilio, Inc., WordPress, WooCommerce, or any other third-party service mentioned. All trademarks belong to their respective owners.
</blockquote>
<h3>Third-Party Services</h3>
This plugin may send data to the following third-party services when certain features are enabled:
<h3>Bitly URL Shortener</h3>
When used: When the “Shorten URLs using Bit.ly” option is enabled in plugin settings, URLs in SMS messages are automatically shortened using the Bitly API.
Service Information: 
* Service Website: https://bitly.com/ 
* API Documentation: https://dev.bitly.com/v4_documentation.html 
* Terms of Service: https://bitly.com/pages/tos 
* Privacy Policy: https://bitly.com/pages/privacy
Data Sent: Long URLs from SMS messages are sent to Bitly’s API to generate shortened URLs. No personal user data is sent beyond the URLs themselves.
<h3>Google URL Shortener (Deprecated)</h3>
When used: When the “Shorten URLs using Google (Deprecated)” option is enabled in plugin settings, URLs in SMS messages are automatically shortened using the Google URL Shortener API.
Note: Google has deprecated this service. We recommend using Bitly instead.
Service Information: 
* Service Website: https://developers.google.com/url-shortener 
* Terms of Service: https://developers.google.com/terms 
* Privacy Policy: https://policies.google.com/privacy
Data Sent: Long URLs from SMS messages are sent to Google’s API to generate shortened URLs. No personal user data is sent beyond the URLs themselves.
Important: These third-party services are only used when you explicitly enable URL shortening in the plugin settings. If URL shortening is disabled, no data is sent to these services.

NotifSMS – Notifications, OTP & 2FA

This plugin works like a charm. Thanks to the author!



Excellent Work

Send SMS, OTP & 2FA notifications from WordPress via Twilio. Includes automated alerts, bulk messaging, and integrations with popular plugins.

SecurePass authentication vs NotifSMS – Notifications, OTP & 2FA