This plugin enhances the security of your WordPress website by adding a simple but effective two-factor authentication (2FA) screen after a successful password login.
Instead of adding fields to the main login page (which can cause conflicts), this plugin waits until a user has correctly entered their username and password. Then, it intercepts the login and presents them with a clean, separate screen to enter their 6-digit code from an authenticator app (like Google Authenticator, Authy, etc.).
This method is more secure, more compatible, and provides a smoother user experience.
Features:
Secure Post-Login Verification: 2FA check happens on a separate screen, after the password is correct.
Easy Setup: A simple “Usama 2FA” menu page for each user to scan a QR code and activate 2FA.
Backup Codes: On activation, 10 one-time-use backup codes are generated in case you lose your phone.
Regenerate Codes: You can generate new backup codes at any time from the settings page.
Lightweight & Simple: No bloat. Just the essential 2FA features.
Per-User: 2FA is enabled on a per-user basis. Administrators cannot control 2FA for other users.
External services
This plugin connects to a third-party API to generate the QR codes used during setup.
Service: goqr.me API (https://www.google.com/search?q=api.qrserver.com)
Usage: Used only once during setup to generate a QR code image that users scan with their authenticator app.
Data Sent: The API receives the user’s email address and the generated secret key (inside the OTPAuth URL) to create the image. This data is not stored by the service.
Provider: Foundata GmbH
Terms of Use: Terms of Use
Privacy Policy: Privacy Policy
Screenshots
The simple "2FA Security" settings page in the admin dashboard.
The QR code and activation step.
The post-activation screen, showing the one-time backup codes.
The separate 2FA verification screen that appears after a successful password login.