User Registration Two Factor Authentication

A password is only one check during login. This plugin adds a one-time password step, so users verify their identity with a code sent by email or SMS. It works with WPEverest’s User Registration plugin and fits sites that rely on user accounts, including membership sites and ecommerce platforms.

Site administrators can choose which user roles must complete two-factor authentication and configure OTP length, expiration, resend limits, usage restrictions, and login hold durations. Frontend messages can also be adjusted to explain the verification process to users. These controls let site owners set login checks to suit their account setup.

Features

• Email OTP verification: Send a one-time password to a user’s registered email address during login for an additional identity check.
• SMS code delivery: Connect with Twilio to send authentication codes by SMS, giving users a mobile option for login verification.
• Role-based enforcement: Choose which user roles must complete two-factor authentication, so verification requirements can differ across account types.
• Configurable OTP rules: Set OTP length, expiration time, resend limits, usage restrictions, and login hold durations to define how verification works.
• Custom login messages: Edit frontend messages shown during the OTP process to give users clear information as they verify their login.
• Flexible user coverage: Apply two-factor authentication to all users or select groups, according to the security rules for your site.
• User Registration integration: Use the plugin with WPEverest’s User Registration system to add two-factor checks to existing registration and login workflows.

Best for

• Membership sites with user accounts
• Ecommerce sites with customer logins
• WordPress sites with role-based access