Linux 软件免费装

在这里免费安装WordPress以及其他软件

Banner图

Two Factor

开发者 georgestephanis
valendesigns
stevenkword
extendwings
sgrant
aaroncampbell
johnbillion
stevegrunwell
netweb
kasparsd
alihusnainarshad
passoniate
更新时间 2026年2月17日 21:21
WordPress版本: 6.9
版权: GPL-2.0-or-later
版权网址: 版权信息

标签

security totp authentication 2fa mfa

下载

0.10.0 0.11.0 0.4.6 0.7.3 0.15.0 0.4.2 0.4.4 0.4.5 0.9.0 0.9.1 0.8.0 0.4.7 0.4.8 0.5.0 0.5.2 0.6.0 0.7.0 0.7.1 0.7.2 0.8.1 0.13.0 0.14.0 0.14.1 0.14.2 0.5.1 0.8.2 0.12.0

详情介绍:

The Two-Factor plugin adds an extra layer of security to your WordPress login by requiring users to provide a second form of authentication in addition to their password. This helps protect against unauthorized access even if passwords are compromised. Setup Instructions Important: Each user must individually configure their two-factor authentication settings. There are no site-wide settings for this plugin. For Individual Users
  1. Navigate to your profile: Go to "Users" → "Your Profile" in the WordPress admin
  2. Find Two-Factor Options: Scroll down to the "Two-Factor Options" section
  3. Choose your methods: Enable one or more authentication providers (noting a site admin may have hidden one or more so what is available could vary):
  4. Authenticator App (TOTP) - Use apps like Google Authenticator, Authy, or 1Password
  5. Email Codes - Receive one-time codes via email
  6. FIDO U2F Security Keys - Use physical security keys (requires HTTPS)
  7. Backup Codes - Generate one-time backup codes for emergencies
  8. Dummy Method - For testing purposes only (requires WP_DEBUG)
  9. Configure each method: Follow the setup instructions for each enabled provider
  10. Set primary method: Choose which method to use as your default authentication
  11. Save changes: Click "Update Profile" to save your settings
For Site Administrators Available Authentication Methods Authenticator App (TOTP) - Recommended Backup Codes - Recommended Email Codes FIDO U2F Security Keys Dummy Method Important Notes HTTPS Requirement Browser Compatibility Account Recovery Security Best Practices For more history, see this post. Actions & Filters 以下列出该插件提供的动作和过滤器钩子：

屏幕截图:

  • U2F Security Keys section under User Profile - Displays the security key management interface for registering and managing FIDO U2F devices.
  • Email Code Authentication during WordPress Login - Shows the email verification screen that appears during login.
  • Authenticator App (TOTP) setup with QR code - Demonstrates the QR code generation and manual key entry for TOTP setup.
  • Backup codes generation and management - Shows the backup codes interface for generating and managing emergency access codes.

升级注意事项:

0.10.0 Bumps WordPress minimum supported version to 6.3 and PHP minimum to 7.2. 0.9.0 Users are now asked to re-authenticate with their two-factor before making changes to their two-factor settings. This associates each login session with the two-factor login meta data for improved handling of that session.

常见问题:

What PHP and WordPress versions does the Two-Factor plugin support?

This plugin supports the last two major versions of WordPress and the minimum PHP version supported by those WordPress versions.

我该如何发送反馈或获取有关错误的帮助？

报告漏洞、功能建议或任何其他（非安全相关）的反馈最佳途径是在 GitHub Two Factor 的 issues 页面。在提交新问题之前，请搜索现有问题以检查是否有其他人报告了相同的反馈。

我应该在哪里报告安全漏洞？

插件贡献者和 WordPress 社区非常重视安全漏洞。我们感谢您负责任地披露您发现的漏洞，并将竭尽全力解决您的贡献。 To report a security issue, please visit the WordPress HackerOne program.

Why doesn't this plugin have site-wide settings?

This plugin is designed to work on a per-user basis, allowing each user to choose their preferred authentication methods. This approach provides maximum flexibility and security. Site administrators can still configure 2FA for other users by editing their profiles. For more information, see issue #437.

What if I lose access to all my authentication methods?

If you have backup codes enabled, you can use one of those to regain access. If you don't have backup codes or have used them all, you'll need to contact your site administrator to reset your account. This is why it's important to always enable backup codes and keep them in a secure location.

Can I use this plugin with WebAuthn?

The plugin currently supports FIDO U2F, which is the predecessor to WebAuthn. For full WebAuthn support, you may want to look into additional plugins that extend this functionality. The current U2F implementation requires HTTPS and has browser compatibility limitations.

Is there a recommended way to use passkeys or hardware security keys with Two-Factor?

Yes. For passkeys and hardware security keys, you can install the Two-Factor Provider: WebAuthn plugin: https://wordpress.org/plugins/two-factor-provider-webauthn/ . It integrates directly with Two-Factor and adds WebAuthn-based authentication as an additional two-factor option for users.

更新日志:

0.15.0 - 2026-02-13 0.14.2 - 2025-12-11 0.14.1 - 2025-09-05 0.14.0 - 2025-07-03 0.13.0 - 2025-04-02 View the complete changelog details here.