noplanman

<p>With WP-OTP you can easily set up 2 Factor Authentication with One Time Passwords for your WordPress login.<br />
This extra layer makes your WordPress site a lot more secure.</p>
<p>The new stealth mode allows for invisible OTP code entry, making your login screen look like any other, no extra OTP code input field.</p>
<h4>Getting started</h4>
<p>After installing and activating the plugin, every user can enable WP-OTP on their profile page.</p>
<p>It’s as easy as scanning the provided QR Code or entering the OTP secret to any OTP generator app.<br />
Then just activate it by entering the generated OTP and voilà, all set up.<br />
Now, the login requires an OTP code to succeed.</p>
<p>Each user gets their own secret key to authenticate with, giving them control over their login security.</p>
<h4>Development</h4>
<p>This plugin is completely open source and a work of passion.<br />
If you would like to be part of it and join in, make your way over to the <a href="https://git.feneas.org/noplanman/wp-otp" rel="nofollow ugc">project page</a> now.<br />
Also, if you have an idea you would like to see in this plugin or if you’ve found a bug, please <a href="https://git.feneas.org/noplanman/wp-otp/issues/new" rel="nofollow ugc">let me know</a>.</p>
<h4>Configuration</h4>
<ul>
<li><code>WP_OTP_STEALTH</code>: Set this to <code>true</code> to enable stealth OTP mode.</li>
</ul>
<h4>Filters</h4>
<p>There are a multitude of filters to be adjusted.</p>
<ul>
<li><code>wp_otp_qr_code_provisioning_uri</code>: URI for online QR Code rendering (must contain <code>{PROVISIONING_URI}</code> placeholder for QR Code data).</li>
<li><code>wp_otp_login_form_text</code>: Text for input field on the login screen.</li>
<li><code>wp_otp_login_form_text_sub</code>: Subtext for the input field on the login screen.</li>
<li><code>wp_otp_login_form_invalid_code_text</code>: Error text for an invalid code input on the login screen.</li>
<li><code>wp_otp_code_expiration_window</code>: Set the window of code verification expiration.</li>
<li><code>wp_otp_recovery_codes_count</code>: Number of recovery codes to generate.</li>
<li><code>wp_otp_recovery_codes_length</code>: Length of the recovery codes.</li>
<li><code>wp_otp_secret_length</code>: Length of the secret key.</li>
</ul>
<h4>Minimum requirements</h4>
<p>WordPress 4.6, PHP 7.4.</p>
<h4>Donate / Support</h4>
<p>All <a href="https://noplanman.ch/donate" rel="nofollow ugc">donations</a> are much appreciated, thank you 🙏</p>
<p><a href="https://tidelift.com/subscription/pkg/wordpress-wp-otp?utm_source=wordpress-wp-otp&utm_medium=referral&utm_campaign=readme" rel="nofollow ugc">Get professional support for this plugin with a Tidelift subscription</a><br />
<em>Tidelift helps make open source sustainable for maintainers while giving companies assurances about security, maintenance, and licensing for their dependencies.</em></p>
<h4>Security</h4>
<p>To report a security vulnerability, please use the <a href="https://tidelift.com/security" rel="nofollow ugc">Tidelift security contact</a>. Tidelift will coordinate the fix and disclosure.</p>


WP-OTP

Make your WordPress login extra secure with One Time Passwords.

notakey

<p>Users with enabled Notakey authentication provider will be sent authentication request to registered mobile device (phone, tablet) after entering a valid username and password.</p>
<p>This plugin requires WordPress <a href="https://wordpress.org/plugins/two-factor/" rel="ugc">Two-Factor</a> plugin, that provides base authentication framework. After installing and configuring both plugins, an additional authentication provider will be added to provider list. To register a mobile device for Notakey authentication, use the “Two-Factor Options” section under “Users” <span aria-hidden="true" class="wp-exclude-emoji">→</span> “Your Profile”. Install “Notakey Authenticator” and scan provided QR code with Notakey app and enter required details for device registeration.</p>
<p>Notakey authentication can be combined with other second factor authentication means: TOTP, email, backup codes and others.</p>
<p>This plugin adds also some basic security policy options for WordPress site admins:</p>
<ul>
<li>
<p>Enable 2FA provider override list – allows users to select only specified authentication providers.</p>
</li>
<li>
<p>Enable Notakey 2FA provider for all users – enables Notakey authentication for all users (in case your users have devices already registered on other services).</p>
</li>
<li>
<p>Allow users to provide onboarding details – lets users enter their mobile number, if SMS code verification onboarding is used.</p>
</li>
<li>
<p>Reject user login without 2FA verification – blocks user login without any second factor authentication.</p>
</li>
</ul>
<p>Other configuration options include:</p>
<ul>
<li>
<p>Various options to customize authentication request.</p>
</li>
<li>
<p>Configuration for Notakey Authentication Server.</p>
</li>
</ul>
<p>To adjust policy or configure this plugin, navigate to “Settings” <span aria-hidden="true" class="wp-exclude-emoji">→</span> “Notakey MFA”.</p>
<p>Plugin requires a hosted or on-premise version of Notakey Authentication Server (yes, there is a free version) with configured service, onboarding requirements and API client credentials.</p>
<p>See our <a href="https://documentation.notakey.com/" rel="nofollow ugc">documentation site</a> for detailed instructions how to set up Notakey Authentication Server.</p>
<h3>Get Involved</h3>
<p>Development happens <a href="https://github.com/notakey/wordpress-two-factor/" rel="nofollow ugc">on GitHub</a>.</p>
<p>Here is how to get started:</p>
<pre><code>git clone https://github.com/notakey/wordpress-two-factor.git
</code></pre>
<p>Start development by starting a <a href="https://code.visualstudio.com/docs/remote/containers" rel="nofollow ugc">devcontainer</a>.</p>
<p>Then open <a href="https://help.github.com/articles/creating-a-pull-request-from-a-fork/" rel="nofollow ugc">a pull request</a> with the suggested changes.</p>


Notakey Provider for Two-Factor

Reduce friction and improve security of Two-Factor Authentication using push-based Notakey Authenticator mobile application.

WP-OTP vs Notakey Provider for Two-Factor