Descrición

Usa a sección «Opcións de Two-Factor» en «Usuarios» O teu perfil» para activar e configurar na túa cuenta un ou varios provedores de identificación de dous factores:

Códigos de correo electrónico
Contrasinais dun só uso baseadas en tempo (TOTP)
FIDO dobre factor universal (U2F)
Códigos de respaldo
Método ficticio (só con fins de proba)

Para máis antecedentes, consulta esta entrada.

Accións e filtros

Aquí hai unha lista de ganchos de acción e filtro proporcionados polo plugin:

two_factor_providers filter overrides the available two-factor providers such as email and time-based one-time passwords. Array values are PHP classnames of the two-factor providers.
two_factor_enabled_providers_for_user filter overrides the list of two-factor providers enabled for a user. First argument is an array of enabled provider classnames as values, the second argument is the user ID.
A acción two_factor_user_authenticated, que recibe o obxecto de conexión WP_User como primeiro argumento, para definir o usuario rexistrado xusto despois do fluxo de traballo de identificación.
two_factor_token_ttl filter overrides the time interval in seconds that an email token is considered after generation. Accepts the time in seconds as the first argument and the ID of the WP_User object being authenticated.

Capturas

Opcións de dobre factor no perfil de usuario.
Sección de claves de seguridade U2F no perfil de usuario.
Identificación do código do correo electrónico durante o acceso a WordPress.

Preguntas frecuentes

How can I send feedback or get help with a bug?

The best place to report bugs, feature suggestions, or any other (non-security) feedback is at the Two Factor GitHub issues page. Before submitting a new issue, please search the existing issues to check if someone else has reported the same feedback.

Where can I report security bugs?

The plugin contributors and WordPress community take security bugs seriously. We appreciate your efforts to responsibly disclose your findings, and will make every effort to acknowledge your contributions.

To report a security issue, please visit the WordPress HackerOne program.

Comentarios

nmrockswp 6 de Setembro, 2024

This is definitely the best and easiest and most reliable plugin for WordPress to include Google 2-factor authentication. Thank you very much!

vartdomen 26 de Maio, 2024

Plugin nice work with true SMTP configuration

svenbolte 17 de Maio, 2024

i have tested lots of plugins to implement a flexible MFA to wp admin areas. This one is defly the best of it. it is slim, simple, easy to configure und supports email tokens and the ms authenticator ap aswell as fido keys or google auth app.

Alex 25 de Abril, 2024

Just works.

Dan Knauss 11 de Abril, 2024

If you are not using another 2FA system, this is the simplest and best way to quickly protect your site and your users from compromised accounts. It is a common and often required security-by-default feature on many enterprise WordPress sites. Everyone should use it if they’re not using another 2FA solution. ***Be sure to add the code snippet Kaspars (one of the contributors) shared in the support form thread to require 2FA by default for all users.*** And if you are allowing open registration (where anyone visiting your site can create an account) you will also want to install and activate the WP Approve User plugin contributed by Konstantin Obenland. These are both 100% free, rock-solid, community-contributed plugins from expert WP folks. <3