WP 2-step verification

Description

WordPress 2-Step Verification (Wp2sv) adds an extra layer of security to your WordPress Account.

In addition to your username and password, you’ll enter a code that generated by Android/iPhone/Blackberry app or Plugin will send you via email upon signing in.

Features

Easy setup
Multisite supported
Option to use application or email
Backup codes
Protect XML-RPC with app password
App passwords for apps that don’t support 2-Step Verification
Easy recovery(via ftp) if lost phone
Setup 2-Step at front page for Woocommerce

Installation

Download the plugin and extract its content
Upload the extracted folder to the /wp-content/plugins/ directory
Activate the plugin through the ‘Plugins’ menu in WordPress
Set up 2-step verification through the ‘Users->2-Step Verification’ menu

Screenshots

Overview page
Set up instruction
Enter code after login
App passwords list
New App password
Recovery

Faq

I cannot complete the first set up step, verification code is incorrect

Codes are time-dependent. Make sure your phone is set to the correct local time. If your server time is incorrect, click Sync now at top right of overview page

I don’t received email

The plugin uses wordpress built-in function to send email. If email function not work you can try some plugin to help sending email over SMTP like WP Mail Bank,WP Mail SMTP, WP SMTP,…

Does the plugin support multisites?

Yes, it does. You can network active it, it work with all users no matter if your site is multisite or not
If an user turn it ON that mean he will be asked for code once login on all sites whole the network.

It keeps saying “Wp2sv database update required”

Please check if wp cron disabled then please enable it. You also can manually run upgrade in cli using command wp cron event run wp2sv_upgrade

Reviews

Site got locked out

By baldeaglemall on October 30, 2020

I had to get siteground technical support to delete the plugin and then I was able to log back in. I am using with woocommerce and WCFM so be careful.

Good plugin and cool ui

By curti55 on September 20, 2020

I've been looking for woocommerce integrate so far. And i'm happy that now it's supported. But im getting issue while connect with woo admin app. Hope that fixed soon.

'Backup email' currently not working.

By Karim (sheershamedia) on January 12, 2020

Alternative second 'Backup email' currently not working. it is can't Set up.

Must have security plugin which gives you that extra security layer <3

By yucelsnc (Yucel.S.n.C.3D) on November 28, 2019

I just love this plugin <3 it gets his job well done , also i like the fact that you can choose between email or mobile. Perfomance is good to, doesnt slow down your website. i guess there is no compatibility error that we havent seen since a whole year updates 🙁 ? hope we can use this great plugin furthermore in future,aslo to see updates <3 I just can recommend it to anyone who is lookig for this extra security layer or who needs this feature for his own website. Greets Barnet

Very nice plugin, however not working with Gutenberg enabled sites.

By Dariusz (idarek) on August 19, 2019

Very nice looking plugin. Easy to set up and configure, however, have 2 major issues. First is that haven't been updated for some time (10 months) and due to that some compatibility with the latest version of WordPress causing big issues. For my blog, where using Gutenberg editor ( Classic one) there is no possibility to update post/page (unable to save!) when the plugin is enabled. When is off, issue not exist.

Does not work every time

By acuvic on April 10, 2019

As the title, works around 50% of the time. I'm using the latest wordpress version

What's better than Awesome...This plugin

By Anonymous User 15431392 (anonymized_15431392) on March 29, 2019

WOW. The other 2FA app on Worpdress plugins that actually works is to expensive for my small site. But...this plugin has MORE features, it works, and it's amazing! Thank you!

Très Bien

By brunowp on March 9, 2019

Simple et pratique Vous installez google authenticator et hop c'est parti. Vous pouvez ajouter un téléphone de secours. Vous avez des codes d'accès en cas de perte de tel. Ajout par email etc etc , vraiment bien

Good plugin

By 4iteam on October 27, 2018

Thank for this plugin, easy to install and configure. Also nice UI

Best Security Plugin I ever Used

By Ali Husnain (alihusnainarshad) on July 31, 2018

I wanna thanks the developer... For this Great Plugin.. BEST Security Plugin , Very Useful.... It Provide Exactly Same Thing That I want. I want to join this project. I'll be happy if I'm involved in this... Thanks Again for Such Useful Plugin

Changelog

2.6.4

Remove unused qrcode url
Use https for time sync

2.6.2

Fix QR code not showing

2.6.1

Fix is_ajax not defined

2.6.0

Fix email code expired too soon
Add setting for expiration when send code via email
Add force enable option
Email subject and content can be via filters: wp2sv_email_subject, wp2sv_email_content

2.5.6

Update vue to 2.7.14
Fix issue with translation

2.5.4

Fix cannot use same email again after turn off by admin

2.5.2

Tested WordPress 5.9.3

2.5.1

Fix php warning message
Only show 4.x compatibility warning when language is not english

2.5

Full Vue for setup page
Use wp-i18n js https://make.wordpress.org/core/2018/11/09/new-javascript-i18n-support-in-wordpress/
Attempts limit for verify code and send email

2.4.2

Fix jetpack connection issue

2.4.1

Fix issue xml-rpc not working even with app password
Fix compatibility with contact form

2.4

Woocommerce account page integration
Fix bugs

2.3.1

Fix some issues
Added hooks: wp2sv_init, wp2sv_setup, wp2sv_handle, wp2sv_handled

2.3.0

Template refactored, new location for template {theme}/wp2sv/
Revoke trusted device
Fix some bugs

2.2.0

Add woocommerce support
Fix rest api is blocked by wp2sv

2.1.2

Fix recovery method not working

2.1.1

Improve performance, may fix possibility 403 issue

2.1

Improve compatibility with other plugins/services
Strict mode (use WP2SV_STRICT_MODE constance) for more security but may not compatible with others

2.0.2

Fix not able to connect via Xml-RPC due to fatal error

2.0.1

Fix compatibility with third-party applications

2.0

New design for admin
Refactored code