Add a one-time code sent over WhatsApp as a second factor for WordPress and WooCommerce logins, with recovery codes, rate limits and an audit log.
Alternatives to Two Factor Auth
Plugins below are selected for functional relevance and current directory signals. Active-install counts do not affect this ranking.
WordPress plugins with similar use cases
Compatibility and update metadata provide context, not a quality guarantee. Review each plugin’s details for your site.
OTP verification for WordPress login, registration, and password reset using email and SMS delivery.
Move the login page to your own address, stop password guessing, add a 2-step email code for admins and harden WordPress, with a log of every login.
WordPress identity policies for password rules, login lockouts, two-factor authentication, IP controls, and Administrator oversight.
Secure WordPress login with Two Factor Authentication - supports WP, Woo + other login forms, HOTP, TOTP (Google Authenticator, Authy, etc.)
Administrators must enter an email verification code after password login. Regular users log in without extra verification.
Self-hosted WordPress security: 2FA, lockouts, audit log, integrity, headers, rate limits, WooCommerce protection, and SDK. Free.
Two-factor authentication by email code. Users log in with their password, then enter a login code from their inbox. WooCommerce ready.
Secure WordPress and WooCommerce logins: email verification, two-factor authentication (2FA), passwordless login, login logs, and last-login tracking.
Twelve local hardening controls with an audit trail. No account, no telemetry, no third-party requests, nothing to configure elsewhere.