WP Manifestindependent plugin directory
manifest / security / gv-2fa

GV Simple 2FA

Hardened TOTP 2FA for WordPress. TOTP, backup codes, remember device.

★ 0stars

Install

Download source zip No release zip yet

This is the repository archive. It installs, but the folder name will carry the branch suffix and updates will not flow.

Install straight from GitHub with WP-CLI:

wp plugin install https://github.com/gardevault/gv-2fa/archive/refs/heads/main.zip
No built-in updater. New versions won't appear under Dashboard → Updates. Install new releases yourself, or let Git Updater track the repository.

A hardened Two-Factor Authentication (2FA) solution for WordPress logins, prioritizing security and usability.

TOTP Standard: Works with standard authenticator apps (Google Authenticator, Authy, etc.).

Secure Login Flow: Intercepts login after password validation using a dedicated, transient-protected verification page.

Backup Codes: Provides secure, one-time-use backup codes for recovery.

Signed "Remember Device": Implements a robust, HMAC-signed cookie mechanism for the "Remember Me" feature.

Role Enforcement: Allows administrators to require 2FA for specific user roles.