WP 2FA Login self-updates
WordPress Plugin: Enhanced two-factor authentication with an authenticator app, email verification, backup codes, and a secure login process from sxtmedia.
★ 0stars
0forks
Install
No release zip yet. The repository archive installs, but the folder name will carry the branch suffix and updates will not flow:
wp plugin install https://github.com/sxt-media/sxtmedia-2fa/archive/refs/heads/main.zipShips its own WordPress updater (Plugin Update Checker), so new versions show up under Dashboard → Updates.
SXT 2FA
Enhanced two-factor authentication for WordPress with TOTP authenticator apps, email verification, backup codes and hardened login security.
Features
Multi-Channel 2FA
Supports:
- Google Authenticator
- Bitwarden
- Authy
- Microsoft Authenticator
- E-Mail verification
Brute-Force Protection
Integrated login protection with:
- IP-based rate limiting
- account-based throttling
- temporary lockouts
REST API & XML-RPC Hardening
- Disables XML-RPC
- Restricts REST API access
- Forces authentication for sensitive endpoints
- Blocks application passwords when 2FA is enabled
Secure Login Flow
- HMAC-SHA256 cookie validation
- user-agent verification
- temporary signed login sessions
- protected 2FA challenge flow
Secure Cryptography
- AES-256-GCM encryption for TOTP secrets
- OpenSSL-based encryption
- hashed recovery codes
- secure token generation using
random_bytes()
Requirements
- WordPress 6.0+
- PHP 8.0+
- OpenSSL extension enabled