![]() When you compare plugins for WordPress users, it often boils down to a few things: ease of use, feature set, and cost. ![]() Two Factor Authentication (from the makers of UpdraftPlus).If the criteria for comparing these plugins are features and effective security for 2FA, then they would be ranked like this: Its expansion rivals miniOrange and has a cheaper starting price of $29/year. The WP 2FA plugin premium version adds many features, including authentication options, Whitelabel, trusted devices, technical support, and many other features. Two Factor Authentication (from the makers of UpdraftPlus) only provides backup codes and compulsory use of 2FA when you purchase the upgrade. It also has the most extensive upgrade options for using the plugin. The premium package is important if you use this plugin for various user roles. It’s up to three administrator users at this point. MiniOrange Google Authenticator only supported one user until recently. ![]() If you want to upgrade their security options, you need to use the full Wordfence Login Security plugin. The only plugin that does not bombard you with upgrade options is Wordfence Login Security. The premium versions add features and functionality to the plugin. Most of the plugins in this review has premium upgrades that can be purchased for a price. Only the Wordfence plugin does not support custom login forms. WP 2FA refers to these custom logins as providing compatibility with third-party plugins. The Two Factor Authentication (from the makers of UpdraftPlus) also provides support for custom logins, but more forms would be available after upgrading to the premium version. MiniOrange Google Authenticator’s free version includes many custom login forms. Three of the four reviewed plugins provide support for these custom login forms. Many plugins and add-ons change the normal WordPress login. Two Factor Authentication provides backup options after a premium upgrade. Only Two Factor Authentication (from the makers of UpdraftPlus) leaves out the option to have backup codes. ![]() These codes allow users to get in through 2FA in case their authenticator is not with them or if it’s been lost. The grace period feature is only excluded from the Two Factor Authentication (from the makers of UpdraftPlugs). Allowing them a grace period should be considered as it allows users time to learn about the security solution and adapt to its use. The use of 2FA should not be a burden on your users. After the period has expired, users will not be able to log in without 2FA. During that period, users are not required to use 2FA. This is a period allowed by an administrator for users to set up their 2FA configuration. If you wish to use email authentication, we would recommend that it also include a hardware key for authentication through their premium upgrade. miniOrange is the only plugin that can also support multiple-factor authentication (MFA) with hardware keys. Since email access can be an additional weak point exploited by hackers, it is often recommended not to use email-based authentication. And only WP 2FA and miniOrange Google Authenticator support authenticating over email. HOTP (Hash-based One-Time Password) is not supported by Wordfence. This is typically done with an application like Google Authenticator. TOTP requires an authenticator, and HOTP can be used with an authenticator or over email or through SMS.Īll of these plugins support TOTP for authenticating users. Time-based One-time Password (TOTP) and Hash-based One-time Password (HOTP) are used for authenticating logins. This gives a person unfamiliar with 2FA a way to configure it quickly. A wizard guides you through the setup for WP 2FA and the miniOrange Google Authenticator. The initial setup may be confusing to a novice user of 2FA. You will immediately notice the difference between using a wizard when setting up these plugins. The wizard provides easy step-by-step instructions to set up 2FA. These plugins can meet the needs of a simple WordPress site and accommodate bigger sites like eCommerce sites. Two Factor Authentication (from the makers of UpdraftPlus)Īll of these plugins provide 2FA, but their differences are mainly in their features and the way they are set up.
0 Comments
Leave a Reply.AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |