WordPress Two-Factor Authentication TFA Description
The password is the standard security implementation in the computer world. However, passwords can be guessed, hacked, or intercepted.
To combat these weaknesses you should install two-factor authentication methods, which provide a secret login key with one time passwords (OTP) that are not vulnerable to brute-force attacks
Securing Users AccountsUnlike passwords, two-factor authentication (2FA) is a two-step process that asks for an additional unique identification.Examples are: sending OTP to your mobile phone, sending OTP to your email account, or by using an external service such as Google Authenticator The Secure WordPress Login plugin from CreativeMinds offers a robust solution with multiple two-factor authentication methods. It lets the WordPress administrator choose from four different options to secure their WordPress site login. |
The WordPress login screen which includes an additional step for email verification |
Two-Factor Authentication Methods
The two-factor authentication (2FA) plugin from CreativeMinds can employ the following authentication methods:
- Google Authenticator – Require secret from Google’s secure app
- Mobile Phone SMS – Send a text message with a one-time key
- Email Code – Send a message with a one-time use code
- Email Link – Send a message with a one-time use link
The WordPress Two-Factor Authentication plugin also lets the WordPress administrator define which user roles require two-factor login credentials. The admin can of course apply our enhanced security check for all users.
Limit Logins by Number of IPs and DevicesRestrict how many IPs and/or devices can log in to each account and apply yet another security layer! For example, only allow the admin to log in from a specific computer. If someone tries using another device or IP, the login won't work. |
Login blocked from a new IP address |
Using One Time Passwords (OTP) and the User Registration Plugin
- Improve WordPress site security – Add an additional unique level of security to each user account with a secret key, helping to block hackers, bots, malicious users and other unwanted intruders
- Define which accounts need enhanced password security – Admin can define which account type needs OTP security access
- Define 2FA Expiration time – Admin can define how long each verification option is valid until the user needs to generate a new one
- Define time to logout – Admin can define how long each user can use their recent OTP login, in case they are not active for a defined amount of time
WordPress Two-Factor Authentication Plugin Localization
Localization SupportAll Front-End labels can easily be changed to any language so the user interface will speak your language. |
Plugin Labels Settings |
2FA Plugin Use Cases
- Protect Admin Accounts – If your site has sensitive information, it’s a good idea to protect powerful user as much as possible. Add Google Authenticator as a secondary password and feel at ease
- Only SMS – Allow users with the Subscriber role to log in only with the SMS link, so that they don’t have to remember and manage their passwords
WordPress Two-Factor Authentication Plugin Related Use Cases
- How to Create 2FA Login to Your Site With Google Authenticator
- How to Create 2FA Login to Your Site With Email
- How to Create 2FA Login to Your Site With SMS
- How to Improve Your WordPress Site Security
WordPress Two-Factor Authentication Plugin Additional Resources
- Plugin User Guide
- CreativeMinds WordPress Video Tutorials
- 7 Practical Ways to Improve WordPress User Registration and User Login Experience
- Improving Security on Your WordPress Site
- Two Factor Authentication and Secure Login in-depth website
2FA-Related Blog Resources
EXAMPLES OF SITES USING THE SECURE LOGIN AND TWO-FACTOR AUTHENTICATION PLUGIN
WordPress Two Step Authentication Related Plugins
Secure Login and Two-Factor Authentication Image Gallery
-
- Secure Login general settings
-
- Secure Login general settings
-
- Secure login Google Authenticator settings
-
- Secure Login SMS settings
-
- Secure Login Email code settings
-
- Secure Login Email link settings
-
- Secure Login labels settings
-
- Secure Login – example when using email link
-
- Secure Login – example when using GA authentication
-
- Secure Login – example when using SMS verification
Back-end Gallery
-
- General
-
- General-Common
-
- Google Authenticator
-
- SMS
-
- SMS-Email Template
-
- Email Code
-
- Email Link
-
- Appearance
-
- Notifications
-
- Labels
-
- Labels-Email Link
-
- Labels-SMS Code
-
- Notify Users-Visual
-
- Notify Users-Text
-
- Shortcodes
