Standards-based two-factor authentication (TOTP & e-mail), brute-force lockout, login alerts and an audit log — with no external service.
Alternatives to WebAuthn Provider for Two Factor
Plugins below are selected for functional relevance and current directory signals. Active-install counts do not affect this ranking.
Relevant replacements
WordPress plugins with similar use cases
Compatibility and update metadata provide context, not a quality guarantee. Review each plugin’s details for your site.
Ace Login Blockv0.431.0
Design your login page in the block editor, with passkeys, two-factor authentication and lockout protection built in.
A simple, secure 2FA plugin that adds a verification screen after login, requiring a code from your authenticator app.
Gupti 2FAv1.0.0
Secure your WordPress login with two-factor authentication (2FA) using any TOTP authenticator app — no external services, no bloat.
Lock and Keyv3.2.2
Phishing-resistant login with hardware security keys (Ledger, YubiKey, any FIDO2 key) for any user role, with optional password-free login.
ZA Creative Login Shieldv6.0.1
Enterprise WordPress login security with 2FA, WebAuthn passkeys, risk scoring, analytics, file integrity, and vulnerability scanning.
WP-OTPv0.7.0
Make your WordPress login extra secure with One Time Passwords.
Add secure email-based 2FA authentication to WordPress logins with OTP verification, recovery codes, a grace period, and flexible user targeting.
Zeshan Login 2FAv1.0.0
Add app-based two-factor authentication to your WordPress login. Scan a QR code, then enter a 6-digit code. Backup codes keep you from locking out.
Easily improve site security with WordPress Hardening, Two-Factor Authentication (2FA), Login Protection, Vulnerability Detection and SSL certificate.