WP 2FA Premium v2.8.0 - Two-Factor Authentication For WordPress
Add an extra layer of security to your WordPress website login pages and its users.
From $5.99 / year
Requires Freemius Activator v2.13.0.1 to function. Install it first.
Log in to download
Free - no credits used
Related items
Related Security Plugins
Complianz Premium - GDPR/CCPA Cookie Consent
by Real Big Plugins
Complianz is a GDPR/CCPA Cookie Consent plugin that supports GDPR, DSGVO, LGPD, POPIA, APA, RGPD, CCPA and PIPEDA with a conditional Cookie Notice and customized Cookie Policy based on the results...
ReCaptcha For WooCommerce - WordPress Plugin
by Woo
Security is the most important concern nowadays for any website or an eCommerce store.
Wordfence Premium - WordPress Security Plugin
by Defiant Inc
Wordfence Premium is for self-administered websites that are looking for the ultimate protection against the latest exploits including real-time firewall rules and malware signature, a continuously...
Add an extra layer of security to your WordPress website login pages and its users. Enable two-factor authentication (2FA), the best protection against users using weak passwords, and automated password guessing and brute force attacks.
WP 2FA KEY PLUGIN FEATURES & CAPABILITIES
- Free Two-factor authentication (2FA) for all users
- Supports multiple 2FA methods
- Universal 2FA app support – generate codes from Google Authenticator, Authy & any other 2FA app
- Supports 2FA backup methods
- Very easy to use and simple to set up
- Use 2FA policies to enforce 2FA with a grace period
- Or require users to instantly setup 2FA upon logging in
- Out of the box support for third party plugins such as WooCommerce and other e-commerce & membership plugins
- No WordPress dashboard access required for users to set up 2FA
- Fully editable email templates
- Protection against automated password & dictionary attacks
- And many other plugin features
EXTEND THE FUNCTIONALITY OF WP 2FA & AUTOMATE MORE
Upgrade to WP 2FA Premium to:
- More 2FA methods such as 2FA over SMS, Push notification and one-click login
- Add trusted devices – no need for 2FA code each time you log in
- Whitelabel all the 2FA pages – for a consistent user experience
- Fully whitelabel-enabled user 2FA wizards & emails; add your own the logo, upload custom CSS and also change the text
- Give the users more alternative 2FA methods to choose from and use so they are never locked out
- Add 2FA to your WooCommerce user pages with just one-click
- Configure different 2FA policies for different user profiles
- Easily get an overview of users’ 2FA setup with the reports
- And many other features
Recent releases
Release history
- *New features**
- Out of the box support for Yubico - [use any YubiKey hardware key by Yubico as a 2FA method to log in to your WordPress website](https://melapress.com/support/kb/wp-2fa-hardware-key/).
- **Plugin & functionality improvements**
- Bumped up the minimum supported PHP version from 7.2 to 7.3.
- The names of debug log file in uploads directory are now randomized.
- The SMS templates in white labelling are now in a dedicated section for themselves (previously were part of the email templates).
- Adjusted the order in which the 2FA methods are listed.
- **Bug fixes**
- White labelling option "Enable our CSS within user wizard" could not be unchecked once checked.
- Refer to the complete [plugin changelog](https://melapress.com/support/kb/wp-2fa-plugin-changelog/?utm_source=wordpress.org&utm_medium=referral&utm_campaign=WP2FA&utm_content=plugin+repos+description) for more detailed information about what was new, improved and fixed in previous version updates of WP 2FA.
- the default SMS messages to give the user more info / context.
- a number of strings in the settings + improved help text.
- the default text in different sections of the wizard to simplify things and improve UX.
- the order of methods in the 2FA plugin.
- the white labelling settings strings and added new ones etc - clearer explanation and improved help text.
- the white labelling settings for the 2FA code page.
- the features' page - added the new features etc.
- the default methods names for the SMS providers to avoid confusion.
- all UTM parameters in the plugin's URLs and links.
- Changes in backup methods text via white labelling settings was not properly reflected in the wizard.
- PHP fatal error in class-email-wizard-steps.php in some edge cases.
- Apostrophe character shows up as ASCII in email subject.
- Error with importing plugin's settings from one website to another in some edge cases.
- The grace period expiration setting did not have a default value / setting.
- Redirecting to frontend 2FA page without permalinks set up does not work.
- Some user profile 2FA buttons were not functioning properly when used on mobile.
- Data was not always / all deleted when the setting "Delete data upon uninstall" was enabled.
- reference to Premium backup methods in the free edition's wizard.
View changelog
- **Improvements**
- The default "From email address" used by the plugin now uses the website's domain, thus improving email deliverability.
- All one-time codes generated by the plugin are now 6 digits long.
- Applied some coding best practices in some sections to ensure better protection against timing base attacks.
- **Security fix**
- **Bug fixes**
- Refer to the complete [plugin changelog](https://melapress.com/support/kb/wp-2fa-plugin-changelog/?utm_source=wordpress.org&utm_medium=referral&utm_campaign=WP2FA&utm_content=plugin+repos+description) for more detailed information about what was new, improved and fixed in previous version updates of WP 2FA.
- a sensitive information disclosure issue - user salts can only be potentially exposed if debug is enabled and the web server is not Apache.
- Text changes in the "logged out users trying to access 2FA config" setting not saved.
- User not redirected to the URL configured in the settings when all backup codes are disabled.
- Formatting / layout of advert in the configuration, which in some cases it was showing over some of the help text.
Frequently asked questions
Is WP 2FA Premium GPL licensed?
What is the latest version of WP 2FA Premium?
How much does WP 2FA Premium cost on GPLCoffee?
Which WordPress and PHP versions does WP 2FA Premium support?
Is WP 2FA Premium safe to download?
Auto-updates included
Install it once, update automatically.
The GPLC Connector installs this plugin from your wp-admin and rolls out new versions to your connected sites - up to 25. Included with 12-month and Geek Lifetime plans (plus legacy 6-month).