Linux 软件免费装

Gupti 2FA

开发者 plexomedia
更新时间 2026年8月22日 17:08
PHP版本: 7.4 及以上
WordPress版本: 7.0
版权: GPLv2 or later
版权网址: 版权信息

标签

google authenticator totp login security 2fa two-factor

下载

1.0.0

详情介绍:

Gupti 2FA adds an extra layer of security to your WordPress site by requiring a time-based one-time password (TOTP) from Google Authenticator (or any compatible app) at login. Everything runs locally on your server — no third-party APIs, no account signup, no data leaves your site. For users: For admins: Security hardening built in:

安装:

  1. Upload the gupti-2fa folder to /wp-content/plugins/, or install via Plugins → Add New.
  2. Activate the plugin through the Plugins menu in WordPress.
  3. To enable 2FA for yourself: go to your Profile page, scan the QR code with your authenticator app, and enter the 6-digit code to verify.
  4. To enforce 2FA for user roles: go to Gupti 2FA → Configuration, select the roles, and save.

常见问题:

What if I lose my phone?

Use one of your 8 recovery codes on the login screen to complete verification, then reconfigure 2FA from your profile. If you have lost the recovery codes too, a site administrator can reset your 2FA from the 2FA Status Report.

Does this work with custom login pages?

It hooks into WordPress core authentication, so it works with any theme or plugin that uses the standard wp_authenticate / wp_login_url flow.

Does it send my data anywhere?

No. Secrets are generated, stored (encrypted), and verified entirely on your own server. QR codes are rendered locally in PHP. The plugin makes no external requests.

Will REST API or XML-RPC logins bypass 2FA?

No. Password-based programmatic logins are blocked for 2FA-enabled accounts. Use WordPress application passwords for API access — they are unaffected.

Where can I get support?

Use the plugin support forum on WordPress.org, or email us at hello@plexomedia.com.

更新日志:

1.0.0