Adds an extra avatar-selection step to the WordPress login screen for selected users.
Alternatives to Caret Two Stage Authentication
Plugins below are selected for functional relevance and current directory signals. Active-install counts do not affect this ranking.
Relevant replacements
WordPress plugins with similar use cases
Compatibility and update metadata provide context, not a quality guarantee. Review each plugin’s details for your site.
Administrators must enter an email verification code after password login. Regular users log in without extra verification.
Temporary admin access without sharing a password, login by email code or link, and two-step login with an authenticator app. Free.
Configify 2FAv1.0.0
Flexible Two-Factor Authentication for WordPress. Choose Google Authenticator (TOTP), Math CAPTCHA, or Google reCAPTCHA — with a security audit log.
Enterprise-grade Passwordless OTP Login, OTP Registration, Multi-Channel Two-Factor Authentication (2FA), and WooCommerce Checkout Phone Verification.
Add secure email-based 2FA authentication to WordPress logins with OTP verification, recovery codes, a grace period, and flexible user targeting.
Secure WordPress and WooCommerce logins: email verification, two-factor authentication (2FA), passwordless login, login logs, and last-login tracking.
Email TFAv1.0.4
Add an extra layer of security via two-factor authentication with email for WordPress logins.
Gracewell Security Suitev1.0.0
Login protection, authenticator 2FA, manual file integrity checks, WordPress hardening and activity logging in a responsive security dashboard.
ZA Creative Login Shieldv6.0.1
Enterprise WordPress login security with 2FA, WebAuthn passkeys, risk scoring, analytics, file integrity, and vulnerability scanning.