This plugin provides uncomplicated 2FA functionality for WordPress. It will allow you to require a second, one time password or OTP, code to be entered when certain (or all) users attempt to log in to WordPress.
It supports two factor methods:
- six-digit codes sent by e-mail
- standards-based authenticator apps using TOTP
The e-mail code has a limited lifetime (defaults to 15 minutes). Once a code has been consumed, it is considered invalid.
Authenticator app setup is handled from the user's own profile page. The plugin provides a QR code, a manual setup key, and recovery codes for when the authenticator app is not available.
The official repo can be found on github.com/joho1968/Cloudbridge-2FA