Changeset 2749431
- Timestamp:
- 06/29/2022 04:43:14 AM (4 years ago)
- Location:
- miniorange-2-factor-authentication
- Files:
-
- 4 edited
-
tags/5.5.78/changelog.txt (modified) (1 diff)
-
tags/5.5.78/readme.txt (modified) (12 diffs)
-
trunk/changelog.txt (modified) (1 diff)
-
trunk/readme.txt (modified) (12 diffs)
Legend:
- Unmodified
- Added
- Removed
-
miniorange-2-factor-authentication/tags/5.5.78/changelog.txt
r2747195 r2749431 5 5 This file contains older changelog entries, so we can keep the size of the standard WordPress readme.txt file reasonable. 6 6 For the latest changes, please refer to the "Changelog" section in the [readme.txt file](https://plugins.svn.wordpress.org/miniorange-2-factor-authentication/trunk/readme.txt). 7 8 = 5.5.78 = 9 * Google Authenticator - Two factor Authentication (2FA, OTP) : 10 * Bug Fixes and Code Improvements 11 12 = 5.5.77 = 13 * Google Authenticator - Two factor Authentication (2FA, OTP) : 14 * Bug Fixes and Code Improvements 15 16 = 5.5.76 = 17 * Google Authenticator - Two factor Authentication (2FA, OTP) : 18 * Bug Fixes and Code Improvements 19 20 = 5.5.75 = 21 * Google Authenticator - Two factor Authentication (2FA, OTP) : 22 * Bug Fixes and Code Improvements 23 24 = 5.5.7 = 25 * Google Authenticator - Two factor Authentication (2FA, OTP) : 26 * Bug Fixes and Code Improvements 27 28 = 5.5.6 = 29 * Google Authenticator - Two factor Authentication (2FA, OTP) : 30 * Bug Fixes 7 31 8 32 = 5.5.5 = -
miniorange-2-factor-authentication/tags/5.5.78/readme.txt
r2747195 r2749431 2 2 3 3 Contributors: twofactor, twofactorauthentication, hsn97,cyberlord92 4 Tags: google authenticator, two factor,two factor authentication, OTP Authentication, 2FA , wp 2fa, 2-factor authentication, multi factor authentication , MFA ,two step verification, TFA, mobile verification, MFA, Remember Device, OTP Over Telegram, Mobile Authentication, 2 step authentication, passwordless login, QR Code Authentication, email verification, KBA, Security Questions, login with SMS, Authy, Authy two factor , FIDO, FIDO2, Webauthn, multi factor, wordfence, IP Blocking, IP Whitelisting, SMS login, OTP Over SMS and Email, login without password, Mobile verification, password free authentication, session restriction.4 Tags: google authenticator, two-factor, two-factor authentication, OTP Authentication, 2FA , wp 2fa, 2-factor authentication, multi-factor authentication, MFA, Remember Device, OTP Over Telegram, passwordless login, email verification, Security Questions, FIDO, FIDO2, Webauthn, SMS login, OTP Over SMS and Email, OTP over Whatsapp, Whatsapp 2FA, QR Code Authentication, WordPress Authentication. 5 5 Donate link: https://miniorange.com/ 6 6 Requires at least: 3.0.1 7 7 Tested up to: 6.0 8 8 Requires PHP: 5.3.0 9 Stable tag: 5.5.7 89 Stable tag: 5.5.77 10 10 License: GPLv2 or later 11 11 License URI: http://www.gnu.org/licenses/gpl-2.0.html … … 15 15 == Description == 16 16 17 **Google Authenticator - Two Factor (WP 2FA / OTP)** - Provides *secure login* to WordPress. This plugin can be configured for any **TOTP-based/OTP Login** methods like Duo/Microsoft/Google Authenticator. It supports OTP login based 2fa methods.18 19 You can check out following video to configure google authenticator as a two factor:17 **Google Authenticator - Two-Factor (WP 2FA / OTP)** - Provides *secure login* to WordPress. This plugin can be configured for any **TOTP-based/OTP Login** methods like Duo/Microsoft/Google Authenticator. It supports OTP login based 2fa methods. 18 19 You can check out following video to configure google authenticator as a two-factor: 20 20 21 21 [youtube https://youtu.be/_nkMCkxLcIs] 22 22 23 = Trial for Google authenticator Premium and Enterprise plugin = 24 We do provide 7 days trial of our Google Authenticator Premium plugins. You can test all Premium features including 2fa methods/OTP authentication methods such as google authenticator, OTP Over SMS/Email. 25 26 = [Google Authenticator - Two step verification/ 2 Factor Authentication/ WP 2FA] FREE Plugin Features = 27 * Simplified & easy user interface to set up **Google Authenticator** and other Two-Factor Authentication ( WP 2FA/TFA/OTP ) methods. 28 * **3 Users** forever FREE! 29 * QR Code authentication, Push Notification, Soft Token and Security Questions(KBA) are supported in the plugin for multi factor authentication(WP 2FA/TFA). 30 * Includes Language Translation Support 31 * **[User Profile 2fa](https://plugins.miniorange.com/how-to-set-up-2-factor-from-wordpress-user-profile-section):** Administrators can set up Two Factor (TFA)of users via WordPress users section 32 * **Multi Factor Authentication(MFA):** This feature can be used to invoke any two factor method on login among multiple methods which were configured. You can configure multiple TOTP/OTP Login based 2fa methods that can be used as a **backup 2fa method** 33 * **Two-Factor Authentication** ( TFA/2FA ) for Ajax login forms like User Pro, login with ajax, Theme my login, etc with all authentication methods. 23 [Features](https://plugins.miniorange.com/2-factor-authentication-for-wordpress-wp-2fa?utm_source=wordpress&utm_medium=readme+link&utm_campaign=last+June#key-features) | [14 day Premium trial](https://mail.google.com/mail/u/0/?fs=1&tf=cm&source=mailto&su=TWO+FACTOR+WORDRESS+-+WP+2FA+Trial+Request.&to=2fasupport@xecurify.com&body=I+want+to+request+a+trial+of+the+2FA+plugin.+&utm_source=wordpress&utm_medium=readme+link&utm_campaign=last+June) 24 25 **Maintained & Supported by miniOrange** 26 27 We are experts in the field of security and have released advanced WordPress solutions such as [Password Policy Manager]([https://plugins.miniorange.com/password-policy-manager?utm_source=wordpress&utm_medium=readme+link&utm_campaign=last+June]). 28 Apart from this, we also have [Broken Link Checker]([https://plugins.miniorange.com/broken-link-checker-finder?utm_source=wordpress&utm_medium=readme+link&utm_campaign=last+June]) to scan detect and fix your broken links to keep your site functioning smoothly. 29 30 = [Google Authenticator - Two step verification/ 2 Factor Authentication/ WP 2FA] = 31 * QR Code authentication, Push Notification, Soft Token and Security Questions(KBA) for multi-factor authentication(WP 2FA/MFA). 32 * Language Translation Support. 33 * **[User Profile 2fa](https://plugins.miniorange.com/how-to-set-up-2-factor-from-wordpress-user-profile-section):** Administrators can set up Two-Factor (2FA) of users via WordPress users section 34 * **Multi Factor Authentication(MFA):** This feature can be used to invoke any two-factor method on login among multiple methods which were configured. You can configure multiple TOTP/OTP Login based 2fa methods that can be used as a **backup 2fa method** 35 * **Two-Factor Authentication** ( TFA/2FA ) for Ajax login forms like User Pro, login with ajax, Theme my login, etc. 34 36 * **Passwordless login** and login with phone number 35 37 * **[Prevent account sharing](https://security.miniorange.com/restricting-users-from-sharing-their-login-credentials/):** Google Authenticator(WP 2FA) is OTP login based method which restricts users from sharing WordPress login credentials which help to secure WordPress Websites. The Google authenticator plugin also adds a session control feature that limits user sessions based on WordPress User activities. 36 38 * This plugin Supports standard TOTP 37 * Two-Factor Authentication (WP 2FA/TFA) allows authentication on the login page itself for Google Authenticator & miniOrange Soft Token 38 * **[Multiple Login Options](https://docs.miniorange.com/documentation/login-username-2nd-factor-2):** Username + password + two-factor (or) Username + two-factor i.e. Passwordless login /Login without password /Password free authentication 39 * Two-Factor Authentication (WP 2FA/TFA) allows authentication on the login page itself for Google Authenticator & miniOrange Soft Token. 40 * 3 users free for lifetime. 41 * **[Multiple Login Options](https://docs.miniorange.com/documentation/login-username-2nd-factor-2):** Username + password + two-factor (or) Username + two-factor i.e. Passwordless login /Login without password /Password free authentication. 39 42 * Recovery codes in case you are locked out for all Two-Factor Authentication (WP 2FA/TFA) 40 * **Mobile verification - two step verification** (WP 2FA/TFA) using a user's mobile phone with authentication methodlike google authenticator, QR code authentication, etc.43 * **Mobile verification - two step verification** (WP 2FA/TFA) using authentication methods like google authenticator, QR code authentication, etc. 41 44 42 45 = Additional Features other than the basic Google Authenticator two-factor authentication = 43 46 44 * Complete Web Security suite to protect wordpress from any attacks45 * Web Application Firewall (WAF): Word press Firewall to protect your site47 * Complete Web Security to protect WordPress from any attacks 48 * Web Application Firewall (WAF): WordPress Firewall to protect your site 46 49 * OWASP TOP 10 Protection 47 50 * Login Protection: Spam and Login Protection … … 68 71 * Duo Authenticator 69 72 * Microsoft Authenticator 70 * Authy 2 Factor Authenticator73 * Authy 2-Factor Authenticator 71 74 * LastPass Authenticator 72 75 * FreeOTP Authenticator 73 76 74 77 = User Identity Verification or multi-factor authentication with Google Authenticator = 75 **Login and Registration:** Verify users on login with different OTP Login methods & other two factor methods like OTP over SMS, OTP Over Email, OTP Over Telegram, Google Authenticator, SMS Verification, Email, Authy Authenticator, Duo Authenticator, Microsoft Authenticator, TOTP Based Authenticator, Security Questions, and many others.78 **Login and Registration:** Verify users on login with different OTP Login methods & other two-factor methods like OTP over SMS, OTP Over Email, OTP Over Telegram, Google Authenticator, SMS Verification, Email, Authy Authenticator, Duo Authenticator, Microsoft Authenticator, TOTP Based Authenticator, Security Questions, and many others. 76 79 Users will receive an OTP at the time of registration which will be used to verify their identity. OTP authentication can be done either via OTP Login methods(OTP Over email or via OTP over SMS). 77 80 … … 81 84 = Third Party Custom SMS Gateway for OTP Over SMS ( OTP Login/two-factor authentication / 2FA ) = 82 85 The premium plugin supports any third-party **custom SMS Gateway**. If you don't have your SMS gateway you can use miniOrange gateway and send SMS(OTP over SMS) all over the world for OTP authentication. 83 [Here](https://plugins.miniorange.com/supported-sms-email-gateways) are some famous gateways supported for two factor (WP 2FA/TFA/OTP).86 [Here](https://plugins.miniorange.com/supported-sms-email-gateways) are some famous gateways supported for two-factor (WP 2FA/TFA/OTP). 84 87 [Test your Gateway](https://login.xecurify.com/moas/login?redirectUrl=https://login.xecurify.com/moas/admin/customer/smsconfig) 85 88 86 = Why do you need to register for Google Authenticator? = 87 88 **Google authenticator** uses miniOrange APIs to communicate between your WP and miniOrange. To keep this communication secure, we ask you to register and assign API keys specific to your account. This way your account and users' calls can be only accessed by API keys assigned to you. 89 Adding to this, you can also use the same account on multiple applications and your users do not have to maintain multiple accounts or WordPress 2FA like Google Authenticator if you are using our cloud solution. Single code generated in Google Authenticator will be enough to log in to all sites. With this, you can also achieve sync of **two-factor authentication on multiple sites**. 90 91 = Google Authenticator ( WP 2FA - two-factor authentication ) Premium Lite Plugin Features = 92 93 * Google Authenticator - Two-Factor Authentication (WP 2FA/TFA) for all users and all user roles *( Site-based pricing )* 89 = Why do you need to register for Google Authenticator? = 90 **Google authenticator** uses miniOrange APIs to communicate between your WP and miniOrange. To keep this communication secure, we ask you to register and assign API keys specific to your account. This way your account and users' calls can be only accessed by API keys assigned to you. 91 92 93 = Google Authenticator ( WP 2FA - two-factor authentication ) All Inclusive Plugin Features = 94 95 * [Google Authenticator - Two-Factor Authentication (WP 2FA/TFA)](https://plugins.miniorange.com/2-factor-authentication-for-wordpress-wp-2fa?utm_source=wordpress&utm_medium=readme+link&utm_campaign=last+June) for all users and all user roles *( Site-based pricing )* 94 96 * **Two-Factor Authentication Methods:** Google Authenticator, Authy Authenticator, Microsoft Authenticator, LastPass Authenticator, Security Questions(KBA), OTP Authentication( OTP Over Email & OTP Over SMS), Email Verification, Mobile Verification *( SMS credits need to be purchased as per the need)* 95 * **[Multiple Login Options](https://docs.miniorange.com/documentation/login-username-2nd-factor-2):** Username + password + two-factor (or) Username + two-factor i.e. Passwordless login /Login without password /Password free authentication. With google authenticator plugin, the 2FA plugin user is authenticated directly with the second layer of security without entering the password.You can opt between a password and 2FA or only a second factor.96 * **Unlimited Email transactions :** miniOrange's google authenticator plugin provides unlimited Email transactions with your SMTP server97 * **Backup Method:** KBA (Security Questions), OTP Over Email, Backup codes if you are unable to validate two step verification97 * **[Multiple Login Options](https://docs.miniorange.com/documentation/login-username-2nd-factor-2):** Username + password + two-factor (or) Username + two-factor i.e. Passwordless login /Login without password /Password free authentication. You can opt between a password and 2FA or only a second factor. 98 * **Unlimited Email transactions** 99 * **Backup Method:** KBA (Security Questions), OTP Over Email, Backup codes. 98 100 * [User role based redirection after Login](https://docs.miniorange.com/documentation/custom-redirect-login-url) 99 101 * [Customize account name in Google Authenticator app](https://docs.miniorange.com/documentation/google-authenticator-app-name) 100 102 * [Custom Security Questions (KBA)](https://docs.miniorange.com/documentation/custom-security-questions) 101 103 * [Role based 2 Factor](https://docs.miniorange.com/documentation/specific-set-authentication-methods-based-role) 102 * [Force Two factor for users](https://docs.miniorange.com/documentation/enforce-2fa-users)104 * [Force Two-factor for users](https://docs.miniorange.com/documentation/enforce-2fa-users) 103 105 * [Email notification to users asking them to set up Two-Factor Authentication (WP 2FA/TFA)](https://docs.miniorange.com/documentation/want-send-email-notification-users-setting-2-factor) 104 106 * [Set Privacy Policy for users](https://docs.miniorange.com/documentation/privacy-policy-site) 105 107 * [Remember Device to skip 2fa](https://docs.miniorange.com/documentation/remember-my-device) 106 108 * **Customizable Login UI Popup:** Using google authenticator plugin you can customize the user interface of the login popup as per your preference. 109 * Multisite compatible (only 3 subsites) 107 110 108 111 = Google Authenticator ( WP 2FA / OTP ) Enterprise Plugin Features = 109 112 110 * [Google Authenticator - Two-Factor Authentication](https://plugins.miniorange.com/2-factor-authentication-for-wordpress ) - 2FA for Users as per the upgrade *( User-based pricing )*113 * [Google Authenticator - Two-Factor Authentication](https://plugins.miniorange.com/2-factor-authentication-for-wordpress-wp-2fa?utm_source=wordpress&utm_medium=readme+link&utm_campaign=last+June) - 2FA for Users as per the upgrade *( User-based pricing )* 111 114 * **Available Authentication Methods:** Google Authenticator, Authy Authenticator, Microsoft Authenticator, LastPass Authenticator, QR Code, Push Notification, Soft Token, Security Questions(KBA), OTP Authentication(OTP Over Email, OTP Over SMS or OTP Over SMS and Email), Email Verification, Hardware Token. *( SMS and Email credits need to be purchased for successful OTP authentication as per the need)* 112 * **Multiple Login Options:** Username + password + two-factor Authentication (or) Username + two-factor authentication(2FA) i.e. Passwordless login /Login without password /Password free authentication.113 * **Backup Methods:** KBA(Security Questions), OTP Over Email, Backup Codes 115 * **Multiple Login Options:** Username + password + two-factor Authentication (or) Username + two-factor authentication(2FA) i.e. Passwordless login /Login without password. 116 * **Backup Methods:** KBA(Security Questions), OTP Over Email, Backup Codes. 114 117 * **[Sync 2fa for multiple websites](https://plugins.miniorange.com/two-factor-authentication-2fa-for-multiple-wordpress-websites)** 115 118 * **Multisite compatible** for all WordPress 2FA methods. 116 119 * Email notification to users asking them to set up Google Authenticator - Two-Factor Authentication (WP 2FA/TFA). 117 * User **role based redirection** after Login, Custom Security Questions (KBA), Customiz e account name in Google Authenticator app.120 * User **role based redirection** after Login, Custom Security Questions (KBA), Customizable account name in Google Authenticator app. 118 121 * Enable Two-Factor Authentication (WP 2FA/OTP) for specific Users/User Roles 119 122 * Choose specific two-factor authentication methods for Users … … 140 143 * Turn on/off 2 factor (two-factor authentication) by user 141 144 * Reconfigure 2fa methods 142 * 'Enable Remember Device' from a custom login form to skip 2 factor for trusted devices.145 * 'Enable Remember Device' from a custom login form to skip 2-factor for trusted devices. 143 146 * On-Demand ShortCodes for specific functionalities ( like for enabling WordPress 2FA (Two-Factor authentication) for specific pages) 144 147 … … 146 149 Password free authentication is possible with WebAuthn. 147 150 148 Check all the features other than two-factor authentication ( Two step verification/OTP authentication ) here: [miniOrange Website](https://security.miniorange.com/)151 Check all the security features other than two-factor authentication ( Two step verification/OTP authentication ) here: [miniOrange Website](https://security.miniorange.com/) 149 152 150 153 <h4>Useful blog posts about two-factor authentication ( 2FA / MFA ) plugin </h4> … … 152 155 * [How to Add WordPress Two-Factor Authentication (WP 2FA/TFA)](https://phppot.com/wordpress/how-to-add-wordpress-two-factor-authentication-2fa-using-google-authenticator-plugin/) 153 156 * [How to translate WordPress Two-Factor Authentication (WP 2FA/TFA)](https://plugins.miniorange.com/the-plugin-translate-spanish-language-with-2-factor-wordpress) 157 * [Simple method to add Two Factor Authentication in WordPress](https://wpastra.com/two-factor-authentication-wordpress/) 158 * [WordPress two factor authentication – How to Setup 2FA](https://www.fixrunner.com/wordpress-two-factor-authentication/) 159 * [OTP over WhatsApp](https://plugins.miniorange.com/login-with-whatsapp-as-a-two-factor-method-for-wordpress?utm_source=wordpress&utm_medium=readme+link&utm_campaign=last+June) 154 160 155 161 Customized solutions and Active support are available. Email us at info@xecurify.com or call us at +1 9786589387. … … 169 175 3. Activate miniOrange 2 Factor Authentication (2FA) from the Plugins tab of your admin dashboard. 170 176 171 = Once Activated [Google Authenticator - Two Step Verification]=172 1. Select miniOrange 2-Factor ( 2 factor authentication ) from the left menu and follow the instructions.173 2. Configure any 2 factor method, say Google Authenticator.174 2. Once, you complete your setup. Click on the Log Out button.175 3. Enter the username and password. After the initial validation, you will be prompted for the 2-factor method you had set up.176 4. Validate yourself with the 2-factor authentication(WP 2FA/TFA) method you configured.177 178 177 **Video Guide** : 179 178 [youtube https://youtu.be/_nkMCkxLcIs] … … 185 184 You can obtain access to your website by one of the below options: 186 185 187 1. If you have an additional administrator account whose Two Factor (2FA) is not enabled yet, you can login with it.186 1. If you have an additional administrator account whose Two-Factor (2FA) is not enabled yet, you can login with it. 188 187 2. If you had set up KBA questions earlier, you can use them as an alternate method to login to your website instead of 2FA. 189 188 3. Rename the plugin from FTP - this disables the Google Authenticator (WP 2FA/TFA) plugin and you will be able to login with your WordPress username and password. … … 205 204 You can select the two-factor authentication methods under the Login Settings tab. The selected authentication methods will be shown to the user during inline registration for example if you select Google Authenticator it will be shown on login. [PREMIUM FEATURE] 206 205 207 = I have a custom/front-end login page on my site and I want the look and feel to remain the same when I add 2 factor ? =208 209 If you have a custom login form other than wp-login.php then we will provide you the shortcode. Shortcode will work only for the customized login page created from WordPress plugins. We are not claiming that it will work with all the customized login pages. In such a case, custom work is needed to integrate two factor with your customized login page. You can submit a query in our <b>Support Section</b> in the plugin or you can contact us at info@xecurify.com for more details.206 = I have a custom/front-end login page on my site and I want the look and feel to remain the same when I add 2-factor ? = 207 208 If you have a custom login form other than wp-login.php then we will provide you the shortcode. Shortcode will work only for the customized login page created from WordPress plugins. We are not claiming that it will work with all the customized login pages. In such a case, custom work is needed to integrate two-factor with your customized login page. You can submit a query in our <b>Support Section</b> in the plugin or you can contact us at info@xecurify.com for more details. 210 209 211 210 = I have installed plugins that limit the login attempts like Limit Login Attempt, Loginizer, Wordfence, etc. Are there any incompatibilities with these kinds of plugins? = … … 217 216 Our Two-Factor plugin is compatible with most of the security plugins, but if it is not working for you. Please submit a query in our Support Section in the plugin or you can contact us at info@xecurify.com. 218 217 219 = If you are using any render-blocking javascript and CSS plugin like Async JS and CSS Plugin and you are not able to login with Two-Factor or your screen got blank. =218 = If you are using any render-blocking javascript and CSS plugin like Async JS and CSS Plugin and you are not able to login with Two-Factor or your screen went blank. = 220 219 221 220 If you are using Async JS and CSS Plugin. Please go to its settings and add jquery to the list of exceptions and save settings. It will work. If you are still not able to get it right, Please submit a query in our Support Section in the plugin or you can contact us at info@xecurify.com. … … 227 226 = I am upgrading my phone. = 228 227 229 You should go to <b>Setup Two Factor (2FA) </b> Tab and click on <b>Reconfigure</b> to reconfigure 2-Factor with your new phone.228 You should go to <b>Setup Two-Factor (2FA) </b> Tab and click on <b>Reconfigure</b> to reconfigure 2-Factor with your new phone. 230 229 231 230 == Screenshots == -
miniorange-2-factor-authentication/trunk/changelog.txt
r2737884 r2749431 5 5 This file contains older changelog entries, so we can keep the size of the standard WordPress readme.txt file reasonable. 6 6 For the latest changes, please refer to the "Changelog" section in the [readme.txt file](https://plugins.svn.wordpress.org/miniorange-2-factor-authentication/trunk/readme.txt). 7 8 = 5.5.78 = 9 * Google Authenticator - Two factor Authentication (2FA, OTP) : 10 * Bug Fixes and Code Improvements 11 12 = 5.5.77 = 13 * Google Authenticator - Two factor Authentication (2FA, OTP) : 14 * Bug Fixes and Code Improvements 15 16 = 5.5.76 = 17 * Google Authenticator - Two factor Authentication (2FA, OTP) : 18 * Bug Fixes and Code Improvements 19 20 = 5.5.75 = 21 * Google Authenticator - Two factor Authentication (2FA, OTP) : 22 * Bug Fixes and Code Improvements 23 24 = 5.5.7 = 25 * Google Authenticator - Two factor Authentication (2FA, OTP) : 26 * Bug Fixes and Code Improvements 27 28 = 5.5.6 = 29 * Google Authenticator - Two factor Authentication (2FA, OTP) : 30 * Bug Fixes 7 31 8 32 = 5.5.5 = -
miniorange-2-factor-authentication/trunk/readme.txt
r2747195 r2749431 2 2 3 3 Contributors: twofactor, twofactorauthentication, hsn97,cyberlord92 4 Tags: google authenticator, two factor,two factor authentication, OTP Authentication, 2FA , wp 2fa, 2-factor authentication, multi factor authentication , MFA ,two step verification, TFA, mobile verification, MFA, Remember Device, OTP Over Telegram, Mobile Authentication, 2 step authentication, passwordless login, QR Code Authentication, email verification, KBA, Security Questions, login with SMS, Authy, Authy two factor , FIDO, FIDO2, Webauthn, multi factor, wordfence, IP Blocking, IP Whitelisting, SMS login, OTP Over SMS and Email, login without password, Mobile verification, password free authentication, session restriction.4 Tags: google authenticator, two-factor, two-factor authentication, OTP Authentication, 2FA , wp 2fa, 2-factor authentication, multi-factor authentication, MFA, Remember Device, OTP Over Telegram, passwordless login, email verification, Security Questions, FIDO, FIDO2, Webauthn, SMS login, OTP Over SMS and Email, OTP over Whatsapp, Whatsapp 2FA, QR Code Authentication, WordPress Authentication. 5 5 Donate link: https://miniorange.com/ 6 6 Requires at least: 3.0.1 7 7 Tested up to: 6.0 8 8 Requires PHP: 5.3.0 9 Stable tag: 5.5.7 89 Stable tag: 5.5.77 10 10 License: GPLv2 or later 11 11 License URI: http://www.gnu.org/licenses/gpl-2.0.html … … 15 15 == Description == 16 16 17 **Google Authenticator - Two Factor (WP 2FA / OTP)** - Provides *secure login* to WordPress. This plugin can be configured for any **TOTP-based/OTP Login** methods like Duo/Microsoft/Google Authenticator. It supports OTP login based 2fa methods.18 19 You can check out following video to configure google authenticator as a two factor:17 **Google Authenticator - Two-Factor (WP 2FA / OTP)** - Provides *secure login* to WordPress. This plugin can be configured for any **TOTP-based/OTP Login** methods like Duo/Microsoft/Google Authenticator. It supports OTP login based 2fa methods. 18 19 You can check out following video to configure google authenticator as a two-factor: 20 20 21 21 [youtube https://youtu.be/_nkMCkxLcIs] 22 22 23 = Trial for Google authenticator Premium and Enterprise plugin = 24 We do provide 7 days trial of our Google Authenticator Premium plugins. You can test all Premium features including 2fa methods/OTP authentication methods such as google authenticator, OTP Over SMS/Email. 25 26 = [Google Authenticator - Two step verification/ 2 Factor Authentication/ WP 2FA] FREE Plugin Features = 27 * Simplified & easy user interface to set up **Google Authenticator** and other Two-Factor Authentication ( WP 2FA/TFA/OTP ) methods. 28 * **3 Users** forever FREE! 29 * QR Code authentication, Push Notification, Soft Token and Security Questions(KBA) are supported in the plugin for multi factor authentication(WP 2FA/TFA). 30 * Includes Language Translation Support 31 * **[User Profile 2fa](https://plugins.miniorange.com/how-to-set-up-2-factor-from-wordpress-user-profile-section):** Administrators can set up Two Factor (TFA)of users via WordPress users section 32 * **Multi Factor Authentication(MFA):** This feature can be used to invoke any two factor method on login among multiple methods which were configured. You can configure multiple TOTP/OTP Login based 2fa methods that can be used as a **backup 2fa method** 33 * **Two-Factor Authentication** ( TFA/2FA ) for Ajax login forms like User Pro, login with ajax, Theme my login, etc with all authentication methods. 23 [Features](https://plugins.miniorange.com/2-factor-authentication-for-wordpress-wp-2fa?utm_source=wordpress&utm_medium=readme+link&utm_campaign=last+June#key-features) | [14 day Premium trial](https://mail.google.com/mail/u/0/?fs=1&tf=cm&source=mailto&su=TWO+FACTOR+WORDRESS+-+WP+2FA+Trial+Request.&to=2fasupport@xecurify.com&body=I+want+to+request+a+trial+of+the+2FA+plugin.+&utm_source=wordpress&utm_medium=readme+link&utm_campaign=last+June) 24 25 **Maintained & Supported by miniOrange** 26 27 We are experts in the field of security and have released advanced WordPress solutions such as [Password Policy Manager]([https://plugins.miniorange.com/password-policy-manager?utm_source=wordpress&utm_medium=readme+link&utm_campaign=last+June]). 28 Apart from this, we also have [Broken Link Checker]([https://plugins.miniorange.com/broken-link-checker-finder?utm_source=wordpress&utm_medium=readme+link&utm_campaign=last+June]) to scan detect and fix your broken links to keep your site functioning smoothly. 29 30 = [Google Authenticator - Two step verification/ 2 Factor Authentication/ WP 2FA] = 31 * QR Code authentication, Push Notification, Soft Token and Security Questions(KBA) for multi-factor authentication(WP 2FA/MFA). 32 * Language Translation Support. 33 * **[User Profile 2fa](https://plugins.miniorange.com/how-to-set-up-2-factor-from-wordpress-user-profile-section):** Administrators can set up Two-Factor (2FA) of users via WordPress users section 34 * **Multi Factor Authentication(MFA):** This feature can be used to invoke any two-factor method on login among multiple methods which were configured. You can configure multiple TOTP/OTP Login based 2fa methods that can be used as a **backup 2fa method** 35 * **Two-Factor Authentication** ( TFA/2FA ) for Ajax login forms like User Pro, login with ajax, Theme my login, etc. 34 36 * **Passwordless login** and login with phone number 35 37 * **[Prevent account sharing](https://security.miniorange.com/restricting-users-from-sharing-their-login-credentials/):** Google Authenticator(WP 2FA) is OTP login based method which restricts users from sharing WordPress login credentials which help to secure WordPress Websites. The Google authenticator plugin also adds a session control feature that limits user sessions based on WordPress User activities. 36 38 * This plugin Supports standard TOTP 37 * Two-Factor Authentication (WP 2FA/TFA) allows authentication on the login page itself for Google Authenticator & miniOrange Soft Token 38 * **[Multiple Login Options](https://docs.miniorange.com/documentation/login-username-2nd-factor-2):** Username + password + two-factor (or) Username + two-factor i.e. Passwordless login /Login without password /Password free authentication 39 * Two-Factor Authentication (WP 2FA/TFA) allows authentication on the login page itself for Google Authenticator & miniOrange Soft Token. 40 * 3 users free for lifetime. 41 * **[Multiple Login Options](https://docs.miniorange.com/documentation/login-username-2nd-factor-2):** Username + password + two-factor (or) Username + two-factor i.e. Passwordless login /Login without password /Password free authentication. 39 42 * Recovery codes in case you are locked out for all Two-Factor Authentication (WP 2FA/TFA) 40 * **Mobile verification - two step verification** (WP 2FA/TFA) using a user's mobile phone with authentication methodlike google authenticator, QR code authentication, etc.43 * **Mobile verification - two step verification** (WP 2FA/TFA) using authentication methods like google authenticator, QR code authentication, etc. 41 44 42 45 = Additional Features other than the basic Google Authenticator two-factor authentication = 43 46 44 * Complete Web Security suite to protect wordpress from any attacks45 * Web Application Firewall (WAF): Word press Firewall to protect your site47 * Complete Web Security to protect WordPress from any attacks 48 * Web Application Firewall (WAF): WordPress Firewall to protect your site 46 49 * OWASP TOP 10 Protection 47 50 * Login Protection: Spam and Login Protection … … 68 71 * Duo Authenticator 69 72 * Microsoft Authenticator 70 * Authy 2 Factor Authenticator73 * Authy 2-Factor Authenticator 71 74 * LastPass Authenticator 72 75 * FreeOTP Authenticator 73 76 74 77 = User Identity Verification or multi-factor authentication with Google Authenticator = 75 **Login and Registration:** Verify users on login with different OTP Login methods & other two factor methods like OTP over SMS, OTP Over Email, OTP Over Telegram, Google Authenticator, SMS Verification, Email, Authy Authenticator, Duo Authenticator, Microsoft Authenticator, TOTP Based Authenticator, Security Questions, and many others.78 **Login and Registration:** Verify users on login with different OTP Login methods & other two-factor methods like OTP over SMS, OTP Over Email, OTP Over Telegram, Google Authenticator, SMS Verification, Email, Authy Authenticator, Duo Authenticator, Microsoft Authenticator, TOTP Based Authenticator, Security Questions, and many others. 76 79 Users will receive an OTP at the time of registration which will be used to verify their identity. OTP authentication can be done either via OTP Login methods(OTP Over email or via OTP over SMS). 77 80 … … 81 84 = Third Party Custom SMS Gateway for OTP Over SMS ( OTP Login/two-factor authentication / 2FA ) = 82 85 The premium plugin supports any third-party **custom SMS Gateway**. If you don't have your SMS gateway you can use miniOrange gateway and send SMS(OTP over SMS) all over the world for OTP authentication. 83 [Here](https://plugins.miniorange.com/supported-sms-email-gateways) are some famous gateways supported for two factor (WP 2FA/TFA/OTP).86 [Here](https://plugins.miniorange.com/supported-sms-email-gateways) are some famous gateways supported for two-factor (WP 2FA/TFA/OTP). 84 87 [Test your Gateway](https://login.xecurify.com/moas/login?redirectUrl=https://login.xecurify.com/moas/admin/customer/smsconfig) 85 88 86 = Why do you need to register for Google Authenticator? = 87 88 **Google authenticator** uses miniOrange APIs to communicate between your WP and miniOrange. To keep this communication secure, we ask you to register and assign API keys specific to your account. This way your account and users' calls can be only accessed by API keys assigned to you. 89 Adding to this, you can also use the same account on multiple applications and your users do not have to maintain multiple accounts or WordPress 2FA like Google Authenticator if you are using our cloud solution. Single code generated in Google Authenticator will be enough to log in to all sites. With this, you can also achieve sync of **two-factor authentication on multiple sites**. 90 91 = Google Authenticator ( WP 2FA - two-factor authentication ) Premium Lite Plugin Features = 92 93 * Google Authenticator - Two-Factor Authentication (WP 2FA/TFA) for all users and all user roles *( Site-based pricing )* 89 = Why do you need to register for Google Authenticator? = 90 **Google authenticator** uses miniOrange APIs to communicate between your WP and miniOrange. To keep this communication secure, we ask you to register and assign API keys specific to your account. This way your account and users' calls can be only accessed by API keys assigned to you. 91 92 93 = Google Authenticator ( WP 2FA - two-factor authentication ) All Inclusive Plugin Features = 94 95 * [Google Authenticator - Two-Factor Authentication (WP 2FA/TFA)](https://plugins.miniorange.com/2-factor-authentication-for-wordpress-wp-2fa?utm_source=wordpress&utm_medium=readme+link&utm_campaign=last+June) for all users and all user roles *( Site-based pricing )* 94 96 * **Two-Factor Authentication Methods:** Google Authenticator, Authy Authenticator, Microsoft Authenticator, LastPass Authenticator, Security Questions(KBA), OTP Authentication( OTP Over Email & OTP Over SMS), Email Verification, Mobile Verification *( SMS credits need to be purchased as per the need)* 95 * **[Multiple Login Options](https://docs.miniorange.com/documentation/login-username-2nd-factor-2):** Username + password + two-factor (or) Username + two-factor i.e. Passwordless login /Login without password /Password free authentication. With google authenticator plugin, the 2FA plugin user is authenticated directly with the second layer of security without entering the password.You can opt between a password and 2FA or only a second factor.96 * **Unlimited Email transactions :** miniOrange's google authenticator plugin provides unlimited Email transactions with your SMTP server97 * **Backup Method:** KBA (Security Questions), OTP Over Email, Backup codes if you are unable to validate two step verification97 * **[Multiple Login Options](https://docs.miniorange.com/documentation/login-username-2nd-factor-2):** Username + password + two-factor (or) Username + two-factor i.e. Passwordless login /Login without password /Password free authentication. You can opt between a password and 2FA or only a second factor. 98 * **Unlimited Email transactions** 99 * **Backup Method:** KBA (Security Questions), OTP Over Email, Backup codes. 98 100 * [User role based redirection after Login](https://docs.miniorange.com/documentation/custom-redirect-login-url) 99 101 * [Customize account name in Google Authenticator app](https://docs.miniorange.com/documentation/google-authenticator-app-name) 100 102 * [Custom Security Questions (KBA)](https://docs.miniorange.com/documentation/custom-security-questions) 101 103 * [Role based 2 Factor](https://docs.miniorange.com/documentation/specific-set-authentication-methods-based-role) 102 * [Force Two factor for users](https://docs.miniorange.com/documentation/enforce-2fa-users)104 * [Force Two-factor for users](https://docs.miniorange.com/documentation/enforce-2fa-users) 103 105 * [Email notification to users asking them to set up Two-Factor Authentication (WP 2FA/TFA)](https://docs.miniorange.com/documentation/want-send-email-notification-users-setting-2-factor) 104 106 * [Set Privacy Policy for users](https://docs.miniorange.com/documentation/privacy-policy-site) 105 107 * [Remember Device to skip 2fa](https://docs.miniorange.com/documentation/remember-my-device) 106 108 * **Customizable Login UI Popup:** Using google authenticator plugin you can customize the user interface of the login popup as per your preference. 109 * Multisite compatible (only 3 subsites) 107 110 108 111 = Google Authenticator ( WP 2FA / OTP ) Enterprise Plugin Features = 109 112 110 * [Google Authenticator - Two-Factor Authentication](https://plugins.miniorange.com/2-factor-authentication-for-wordpress ) - 2FA for Users as per the upgrade *( User-based pricing )*113 * [Google Authenticator - Two-Factor Authentication](https://plugins.miniorange.com/2-factor-authentication-for-wordpress-wp-2fa?utm_source=wordpress&utm_medium=readme+link&utm_campaign=last+June) - 2FA for Users as per the upgrade *( User-based pricing )* 111 114 * **Available Authentication Methods:** Google Authenticator, Authy Authenticator, Microsoft Authenticator, LastPass Authenticator, QR Code, Push Notification, Soft Token, Security Questions(KBA), OTP Authentication(OTP Over Email, OTP Over SMS or OTP Over SMS and Email), Email Verification, Hardware Token. *( SMS and Email credits need to be purchased for successful OTP authentication as per the need)* 112 * **Multiple Login Options:** Username + password + two-factor Authentication (or) Username + two-factor authentication(2FA) i.e. Passwordless login /Login without password /Password free authentication.113 * **Backup Methods:** KBA(Security Questions), OTP Over Email, Backup Codes 115 * **Multiple Login Options:** Username + password + two-factor Authentication (or) Username + two-factor authentication(2FA) i.e. Passwordless login /Login without password. 116 * **Backup Methods:** KBA(Security Questions), OTP Over Email, Backup Codes. 114 117 * **[Sync 2fa for multiple websites](https://plugins.miniorange.com/two-factor-authentication-2fa-for-multiple-wordpress-websites)** 115 118 * **Multisite compatible** for all WordPress 2FA methods. 116 119 * Email notification to users asking them to set up Google Authenticator - Two-Factor Authentication (WP 2FA/TFA). 117 * User **role based redirection** after Login, Custom Security Questions (KBA), Customiz e account name in Google Authenticator app.120 * User **role based redirection** after Login, Custom Security Questions (KBA), Customizable account name in Google Authenticator app. 118 121 * Enable Two-Factor Authentication (WP 2FA/OTP) for specific Users/User Roles 119 122 * Choose specific two-factor authentication methods for Users … … 140 143 * Turn on/off 2 factor (two-factor authentication) by user 141 144 * Reconfigure 2fa methods 142 * 'Enable Remember Device' from a custom login form to skip 2 factor for trusted devices.145 * 'Enable Remember Device' from a custom login form to skip 2-factor for trusted devices. 143 146 * On-Demand ShortCodes for specific functionalities ( like for enabling WordPress 2FA (Two-Factor authentication) for specific pages) 144 147 … … 146 149 Password free authentication is possible with WebAuthn. 147 150 148 Check all the features other than two-factor authentication ( Two step verification/OTP authentication ) here: [miniOrange Website](https://security.miniorange.com/)151 Check all the security features other than two-factor authentication ( Two step verification/OTP authentication ) here: [miniOrange Website](https://security.miniorange.com/) 149 152 150 153 <h4>Useful blog posts about two-factor authentication ( 2FA / MFA ) plugin </h4> … … 152 155 * [How to Add WordPress Two-Factor Authentication (WP 2FA/TFA)](https://phppot.com/wordpress/how-to-add-wordpress-two-factor-authentication-2fa-using-google-authenticator-plugin/) 153 156 * [How to translate WordPress Two-Factor Authentication (WP 2FA/TFA)](https://plugins.miniorange.com/the-plugin-translate-spanish-language-with-2-factor-wordpress) 157 * [Simple method to add Two Factor Authentication in WordPress](https://wpastra.com/two-factor-authentication-wordpress/) 158 * [WordPress two factor authentication – How to Setup 2FA](https://www.fixrunner.com/wordpress-two-factor-authentication/) 159 * [OTP over WhatsApp](https://plugins.miniorange.com/login-with-whatsapp-as-a-two-factor-method-for-wordpress?utm_source=wordpress&utm_medium=readme+link&utm_campaign=last+June) 154 160 155 161 Customized solutions and Active support are available. Email us at info@xecurify.com or call us at +1 9786589387. … … 169 175 3. Activate miniOrange 2 Factor Authentication (2FA) from the Plugins tab of your admin dashboard. 170 176 171 = Once Activated [Google Authenticator - Two Step Verification]=172 1. Select miniOrange 2-Factor ( 2 factor authentication ) from the left menu and follow the instructions.173 2. Configure any 2 factor method, say Google Authenticator.174 2. Once, you complete your setup. Click on the Log Out button.175 3. Enter the username and password. After the initial validation, you will be prompted for the 2-factor method you had set up.176 4. Validate yourself with the 2-factor authentication(WP 2FA/TFA) method you configured.177 178 177 **Video Guide** : 179 178 [youtube https://youtu.be/_nkMCkxLcIs] … … 185 184 You can obtain access to your website by one of the below options: 186 185 187 1. If you have an additional administrator account whose Two Factor (2FA) is not enabled yet, you can login with it.186 1. If you have an additional administrator account whose Two-Factor (2FA) is not enabled yet, you can login with it. 188 187 2. If you had set up KBA questions earlier, you can use them as an alternate method to login to your website instead of 2FA. 189 188 3. Rename the plugin from FTP - this disables the Google Authenticator (WP 2FA/TFA) plugin and you will be able to login with your WordPress username and password. … … 205 204 You can select the two-factor authentication methods under the Login Settings tab. The selected authentication methods will be shown to the user during inline registration for example if you select Google Authenticator it will be shown on login. [PREMIUM FEATURE] 206 205 207 = I have a custom/front-end login page on my site and I want the look and feel to remain the same when I add 2 factor ? =208 209 If you have a custom login form other than wp-login.php then we will provide you the shortcode. Shortcode will work only for the customized login page created from WordPress plugins. We are not claiming that it will work with all the customized login pages. In such a case, custom work is needed to integrate two factor with your customized login page. You can submit a query in our <b>Support Section</b> in the plugin or you can contact us at info@xecurify.com for more details.206 = I have a custom/front-end login page on my site and I want the look and feel to remain the same when I add 2-factor ? = 207 208 If you have a custom login form other than wp-login.php then we will provide you the shortcode. Shortcode will work only for the customized login page created from WordPress plugins. We are not claiming that it will work with all the customized login pages. In such a case, custom work is needed to integrate two-factor with your customized login page. You can submit a query in our <b>Support Section</b> in the plugin or you can contact us at info@xecurify.com for more details. 210 209 211 210 = I have installed plugins that limit the login attempts like Limit Login Attempt, Loginizer, Wordfence, etc. Are there any incompatibilities with these kinds of plugins? = … … 217 216 Our Two-Factor plugin is compatible with most of the security plugins, but if it is not working for you. Please submit a query in our Support Section in the plugin or you can contact us at info@xecurify.com. 218 217 219 = If you are using any render-blocking javascript and CSS plugin like Async JS and CSS Plugin and you are not able to login with Two-Factor or your screen got blank. =218 = If you are using any render-blocking javascript and CSS plugin like Async JS and CSS Plugin and you are not able to login with Two-Factor or your screen went blank. = 220 219 221 220 If you are using Async JS and CSS Plugin. Please go to its settings and add jquery to the list of exceptions and save settings. It will work. If you are still not able to get it right, Please submit a query in our Support Section in the plugin or you can contact us at info@xecurify.com. … … 227 226 = I am upgrading my phone. = 228 227 229 You should go to <b>Setup Two Factor (2FA) </b> Tab and click on <b>Reconfigure</b> to reconfigure 2-Factor with your new phone.228 You should go to <b>Setup Two-Factor (2FA) </b> Tab and click on <b>Reconfigure</b> to reconfigure 2-Factor with your new phone. 230 229 231 230 == Screenshots ==
Note: See TracChangeset
for help on using the changeset viewer.