SPIDY 2FA LOGIN

SPIDY 2FA LOGIN is a lightweight, ultra-secure, and fast security plugin designed to add an impenetrable layer of protection to your WordPress login screen. Protect your user accounts and stop brute-force attacks instantly without hurting the user experience. Unlike heavy, bloated security suites or complex 2FA tools that force your users to download, install, and configure external authenticator apps (like Google Authenticator, Authy, or Microsoft Authenticator), SPIDY 2FA LOGIN keeps things incredibly simple and fast. Three secure login options. One smart plugin. Zero hassle. Why SPIDY 2FA LOGIN is different

• True Passwordless and Biometric Login: Allow users to authenticate using their device's native hardware, including fingerprint sensors, Apple Face ID, Windows Hello, or hardware security keys (YubiKey).
• No Third-Party App Installs: Users do not need to install anything on their phones. Everything works natively in the browser.
• 100% Graceful Fallback: If biometric authentication is unavailable or a device is lost, the plugin automatically falls back to secure email verification. Nobody ever gets locked out.
• WooCommerce Ready: Seamlessly integrated to secure your e-commerce checkout and customer My Account login portals.
• Lightweight Performance: No malware scanners, no heavy firewalls, and no database bloat. It does exactly one job perfectly.

Built-In Two-Factor Authentication Methods

1. Biometric and Passkey Login (WebAuthn / FIDO2) The cutting-edge security standard used by major websites. It uses secure cryptographic hardware key verification directly on the user's browser or smartphone. (Requires an HTTPS site and PHP 8.2+ for the biometric component; older environments safely fallback to email/SMS).
2. Secure Email One-Time Password (OTP) Sends a secure 6-digit confirmation code directly to the user's registered email address immediately upon correct password entry.
3. SMS Verification (Twilio or Clickatell) Send immediate login codes via text message. Fully compatible with your own pay-as-you-go Twilio or Clickatell gateway accounts for absolute pricing control.

Important note: The developers at Web Data Service are currently finalizing tests on a proprietary SMS Gateway. This upcoming solution will allow users to send OTP verification codes using the mobile plan directly associated with their own smartphone, making it the ideal choice for new and bootstrapping online businesses. This PRO extension will be released with highly accessible and affordable pricing tiers. Key Technical Features

• Immediate User Management Control: Dedicated dashboard panel to toggle, monitor, and assign specific 2FA requirements on a per-user basis.
• No Hidden Fees or Limits: Unlimited users, unlimited logins, and absolutely no artificial paywalls or visitor caps.
• GDPR Compliant and Privacy Focused: Zero personal data is sent to external servers. Cryptographic authentication remains local. Email delivery runs via native wp_mail().
• Translation-Ready: Optimized code infrastructure using the spidy-2fa-login text domain, fully prepared for community translation integrations.

1.6.8

• Improved: Hidden mobile layout QR code requests when logging in natively on responsive smartphones.
• Changed: Shortened biometric button copy for uniform UI aesthetics.
• Fixed: Internal constant alignments across multi-version assets.

1.6.7

• Removed bundled language files to migrate translations to official translate.wordpress.org systems.
• Cleared unnecessary development folders within vendors to trim bundle size.
• Fixed broken documentation resource links.

1.6.6

• Lowered global activation limits to PHP 7.4 to guarantee graceful email execution on older setups.