Linux 软件免费装
Banner图

miniOrange 2FA – Two Factor Authentication for WordPress (OTP, SMS, Email, Google Authenticator)

开发者 twofactor
twofactorauthentication
hsn97
cyberlord92
更新时间 2026年5月21日 20:30
PHP版本: 5.3.0 及以上
WordPress版本: 7.0
版权: Expat
版权网址: 版权信息

标签

2fa mfa two-factor-authentication google-authenticator wordpress-2fa

下载

5.1.9 5.0.16 5.2.0 6.2.4 6.2.5 5.0.4 5.0.7 5.0.8 5.1.0 5.2.2 5.3.12 5.3.13 5.3.14 5.3.15 5.3.16 5.3.17 5.3.18 5.3.20 5.3.21 5.3.22 5.3.23 5.3.25 5.3.4 5.3.7 5.4.12 5.4.17 5.4.2 5.4.20 5.4.21 5.4.22 5.4.24 5.4.26 5.4.27 5.4.28 5.4.29 5.4.3 5.4.31 5.4.4 5.4.5 5.4.6 5.4.7 5.4.8 5.4.9 5.2.5 5.2.6 5.3.0 5.3.11 5.4.32 5.0.0 5.0.1 5.0.10 5.0.12 5.0.2 5.2.1 6.0.2 6.0.5 6.2.1 6.2.2 6.2.3 4.5.4 4.5.9 5.1.13 5.1.14 5.1.15 5.1.16 5.4.0 5.4.1 5.4.43 5.4.45 5.4.51 5.5 4.5.3 5.4.16 5.4.35 5.4.39 5.4.47 4.5.2 4.6.1 5.1.17 5.3.5 5.4.14 5.4.34 5.4.41 5.2.4 4.4.8 5.4.40 5.4.44 5.4.48 5.4.50 5.5.2 5.5.4 5.5.6 5.5.7 4.5.5 4.5.8 5.0.3 5.1.19 5.1.2 5.1.7 5.3.3 5.3.8 5.4.23 5.4.38 5.4.42 5.4.46 5.4.49 5.5.3 5.5.76 5.5.78 5.1.21 5.4.37 5.5.82 5.6.0 4.3.4 4.4 4.4.2 5.0.5 5.6.1 5.6.2 5.5.79 5.6.3 5.6.4 4.4.1 4.4.3 4.4.5 5.0.11 5.0.15 5.0.6 5.6.6 5.7.2 4.4.7 4.4.9 4.5.1 4.5.7 4.6.2 5.1.11 5.1.18 5.1.20 5.1.4 5.1.12 5.1.3 5.3.26 5.6.5 5.7.0 5.7.1 5.7.3 5.7.4 5.7.5 5.8 5.1.5 5.1.6 5.5.1 5.8.2 5.3.24 5.4.30 5.5.5 5.3.6 5.4.15 5.5.77 5.8.3 6.0.7 6.2.0 5.2.3 5.4.33 5.5.81 5.8.4 5.1.8 5.3.19 5.4.19 5.4.52 6.0.3 6.1.8 6.0.0 4.4.6 6.0.9 6.1.5 6.1.6 5.0.17 5.0.9 5.1.10 6.0.1 6.1.4 6.1.7 6.1.0 6.1.1 6.1.2 6.1.3 5.1.22 5.4.18 5.4.25 5.4.36 5.5.75 5.5.80 5.8.1 6.0.6 6.0.8 4.4.4

详情介绍:

Two Factor Authentication (2FA) for WordPress Secure your WordPress login with powerful Two Factor Authentication (2FA). miniOrange 2FA plugin protects your website from brute-force attacks, password leaks, and unauthorized access using OTP, SMS, Email, and Authenticator apps like Google Authenticator. Improve your WordPress login security with multi-factor authentication (MFA) by adding a second verification step after password login. The free plan allows up to 5 users to complete 2FA setup on your site; premium removes that cap and adds advanced enforcement (trusted devices, multisite, branding, and more). Set up 2FA for WordPress in minutes for admins, editors, and customers where you enable it. Enable 2FA on standard wp-login, WooCommerce login, and custom login forms—each login can require a second factor for users who have completed setup (subject to your role and user limits on free). Quick Links: Setup Guide | Features | Support WordPress 2FA Login Security Widely used on WordPress sites to strengthen login authentication and help prevent unauthorized access. Why Use Two Factor Authentication (2FA)? Passwords alone are not secure anymore. Adding 2FA to WordPress login: Key Features of miniOrange WordPress 2FA Plugin Supported 2FA Authentication Methods Authenticator Apps (TOTP-based 2FA) OTP-Based Authentication 2FA for WordPress Websites Ideal for: Advanced 2FA Features (Premium) Easy 2FA Setup
  1. Install & activate plugin
  2. Choose users/roles for 2FA
  3. Select authentication method
  4. Done! Your WordPress login is secured
Works with Popular WordPress Plugins Compatible with: Why Choose miniOrange 2FA miniOrange 2FA provides several authentication methods in one plugin, including OTP, authenticator apps, email verification, SMS, WhatsApp, and Telegram options. It also supports WooCommerce and many custom login forms, helping site owners add 2FA login security across common WordPress login flows. External Services Some 2FA methods require communication with miniOrange services to send or verify OTP, SMS, email, push, or account-related requests. These services are used only when you configure or use the related 2FA method. Service links: miniOrange Terms | miniOrange Privacy Policy Video Guide [youtube https://youtu.be/rE-awZZt13Q]

安装:

  1. Go to Plugins → Add New
  2. Search for miniOrange 2FA
  3. Install & activate
  4. Configure from plugin dashboard

屏幕截图:

  • Google Authenticator Setup as Two-Step Authentication
  • miniOrange User Account Details
  • 2-Factor Authentication plugin: Quick Settings
  • Reset Users 2FA from the plugin
  • Custom Email Templates - Whitelabelling with your Brand
  • Two-factor setup for SMS Verification with OTP

升级注意事项:

6.2.5
  • Increased the free 2FA setup limit so up to 5 users can complete two-factor authentication configuration.
  • Updated account recovery email behavior so the recovery link can be sent without checking remaining email transactions.
  • UI Improvements.
  • Readme changes.
  • Compatibility with WordPress 7.0
6.2.4
  • Bug fixes
  • Readme Updates
6.2.3
  • Readme Updates
6.2.2
  • Readme Updates
6.2.1
  • Security Fixes
  • Readme Updates
6.2.0
  • UI Updates - 2FA Settings
6.1.7
  • Minor Fixes - 2FA User Profile
6.1.5
  • Security Fixes
  • Code Optimization Changes
6.1.4
  • Bug Fixes - 2FA Login flow
  • Code Optimization Changes
6.1.3
  • Vulnerability Fixes - Admin XSS/MITM risk via IP Lookup
6.1.2
  • Vulnerability Fixes - Broken Access Control
6.1.1
  • Vulnerability Fixes - Session Hijacking & Replay Attack (Google Authentication)
6.1.0
  • UI/UX Improvements - 2FA popups
  • Vulnerability Fixes - 2FA Bypass and Weak Question & Answer Validation (KBA)
  • Bug Fixes - Low Transactions Notice
  • Added Debug Log Feature
  • Setup Guides Links added in Forms tab
  • Code Optimization
6.0.9
  • Bug Fixes - 2FA Backup Code Validation
6.0.8
  • Compatibility with WordPress 6.8
  • Bug Fixes - 2FA Login Transaction Report
6.0.7
  • UI/UX Improvements - miniOrange user Login & Registration form | Sync Transactions button
  • Bug Fixes - Login Report feature
  • Updates - Users' 2FA Status table | .pot file
6.0.6
  • Improvements - 2FA admin dashboard UI/UX
  • Auto file inclusion added
  • Added Separate tab for 2FA reports
  • Updated Email Verification popup
6.0.5
  • Updated Button CSS
  • Updated Custom Logo Branding on 2FA Popup Settings UI
  • General CSS Improvements
  • 2FA Pricing Page Removed
6.0.4
  • Improvement - Updated Login Transaction Report UX
  • 2FA Pricing Plan updates
6.0.3
  • Bug Fixes - Google Authentication CSS-JS loading issue in login
6.0.2
  • Setup Wizard flow changes.
  • Bug Fix in Setup Wizard flow.
6.0.1
  • Bug fixes for UI/UX plugin release
6.0.0
  • Updated UI/UX of the plugin
  • Added configuration for customizations of all email templates
  • Added 2FA reconfiguration link via email as backup method
  • Added Custom Redirect URL after login
  • Extended grace period functionality
  • Removed miniOrange and DUO Authenticator 2FA methods
5.8.4
  • Updated jquery jquery.dataTables.min.js version to the latest version
  • Bug fixes- Getting error on user account creation on WooCommerce
5.8.3
  • Compatibility with WordPress 6.5
  • Fixed redirection issue on activation with WordPress 6.5
  • Changed refund Policy link
  • Updated miniOrange portal links
5.8.2
  • Bug Fix- Log out the users when the grace period is enabled
  • Improvement- Added SMTP checks for email verification authentication
  • Improvement- Updated UX for Email Verification method
  • Fixed- Warnings in the error logs
5.8.1
  • Bug Fix- Show backup codes to users after configuring Email Verification
  • Updated UI for Google Authenticator user configuration screens
  • Updated UI of Setup Wizard
5.8
  • Bug fix- 2FA method was getting updated when updating a user on the user-edit page
  • Updated UI for OTP over SMS, OTP over Email and OTP over Telegram configuration screens
  • Added Email Verification authentication method
5.7.5
  • Compatibility with WordPress 6.4
5.7.4
  • Bug fix- Keep end users' 2FA configuration when the plugin is deactivated
  • Bug fix- Attempts left for the OTP-based methods
  • Bug fix- Display App Key for Google authenticator in 2FA inline registration
5.7.3
  • Bug fixes for registration forms
  • Compatibility with WordPress 6.3
5.7.2
  • Updated flow of 2FA on registration form
  • Minor bug fixes
5.7.1
  • Fixes:User can configure/reconfigure/reset cloud method,SMS transactions credited on registration,fixed email sync issue
  • Added:Resend OTP button-SMS,Telegram,Email OTP method
  • Improvement:Forced reconfiguration after backup code login,2FA prompt if TOTP is unset for admins

常见问题:

What is 2FA in WordPress?

Two Factor Authentication (2FA) adds an extra login step (OTP or approval) to secure WordPress accounts.

Does this plugin support Google Authenticator?

Yes, it fully supports Google Authenticator and all TOTP-based apps.

Can I enforce 2FA for all users?

You choose which roles should use 2FA and which accounts complete setup. On the free plan, only up to 5 users can finish 2FA setup on your site at a time—enough for many small teams. Premium removes that user limit so you can scale 2FA to large memberships, stores, and organizations, with extras like trusted devices, stronger enforcement options, and multisite support.

How do I add 2FA to WordPress?

Install and activate this plugin, open the miniOrange 2FA dashboard, choose which users or roles should use 2FA, and pick a method (Authenticator app, email OTP, SMS, and more). The built-in setup wizard walks you through configuration step by step.

Is WordPress 2FA free with this plugin?

Yes. The free plan includes 2FA for up to 5 users (each user who completes setup counts toward the limit). Premium unlocks unlimited users plus trusted devices, custom branding, multisite, and other advanced options.

Does this plugin support WooCommerce 2FA?

Yes. You can protect WooCommerce login and related flows so customers and shop staff use 2FA wherever you enable it.

What if I get locked out?

You can use backup codes, email verification, or disable the plugin via FTP.

更新日志:

6.2.5 6.2.4 6.2.3 6.2.2 6.2.1 6.2.0 6.1.7 6.1.5 6.1.4 6.1.3 6.1.2 6.1.1 6.1.0 6.0.9 6.0.8 6.0.7 6.0.6 6.0.5 6.0.4 6.0.3 6.0.2 6.0.1 6.0.0 5.8.4 5.8.3 5.8.2 5.8.1 5.8 5.7.5 5.7.4 5.7.3 5.7.2 5.7.1 5.7.0 5.6.6 5.6.5 5.6.4 5.6.3 5.6.2 5.6.1