WP Manifestindependent plugin directory
manifest / security / bp-two-factor

BP Two Factor

BuddyPress integration for the WordPress Two Factor plugin.

by r-a-y · github.com/r-a-y/bp-two-factor

★ 9stars
0forks

Install

No release zip yet. The repository archive installs, but the folder name will carry the branch suffix and updates will not flow:

wp plugin install https://github.com/r-a-y/bp-two-factor/archive/refs/heads/master.zip
Readme github.com/r-a-y/bp-two-factor ↗

Integrates the Two Factor plugin into BuddyPress.

Compatible with Two Factor v0.16.0 and WebAuthn Provider for Two Factor v2.6.1+.

How to use

  1. Install and activate the Two Factor plugin.
  2. Install and activate this plugin.
  3. Navigate to your BuddyPress profile's "Settings" page. You should see a Two Factor Authentication block.
  4. Enable your preferred 2FA method.
  5. Logout and login again to test two-factor authentication.

Notes

If a user has configured Email as their 2FA method, this plugin also supports BuddyPress HTML email templates to send the email 2FA token. Read the following to find out how to set this up: https://github.com/r-a-y/bp-two-factor/issues/2

This plugin also makes the following usability improvements:

  • Added more descriptive text to the "Security Keys" and "Recovery Codes" sections.
  • Changed the BuddyPress "Settings > General" tab to "Settings > Security" to better reflect the content on the page.
  • Hides the "Primary Method" 2FA field if only one 2FA method is enabled.
  • De-emphasizes Recovery Codes as a recommended provider as it shouldn't be recommended if no 2FA methods are configured by the user or if the user already has two or more other 2FA methods enabled.

These improvements only take place on the BuddyPress profile's "Settings" page, and not in the admin dashboard's profile page.