XO Security is a plugin to enhance login related security.
Alternatives to WebAuthn Provider for Two Factor
Plugins below are selected for functional relevance and current directory signals. Active-install counts do not affect this ranking.
WordPress plugins with similar use cases
Compatibility and update metadata provide context, not a quality guarantee. Review each plugin’s details for your site.
Complete WordPress security, 2FA login protection, WAF firewall, malware scanner, 1-click quarantine, and .htaccess server hardening.
Lightweight Two-Factor Authentication with Email OTP and Authenticator App support. No bloat, no external services.
Hide wp-admin behind a custom login URL and stop brute-force attacks with two-factor authentication, login limits, IP rules and an activity log.
Phishing-resistant login with hardware security keys (Ledger, YubiKey, any FIDO2 key) for any user role, with optional password-free login.
Passwordless login with passkeys (WebAuthn). Nothing to configure, no external service, and password sign-in keeps working.
Require two-factor authentication for selected user roles. An add-on for the Two Factor plugin.
Lightweight two-factor authentication that just works. Protect your WordPress site with authenticator apps or email codes in under 2 minutes.
Two-factor authentication (2FA) via email, SMS or biometric login (WebAuthn/FIDO2) for WordPress. Simple, free, no third-party app required.
Add app-based two-factor authentication to your WordPress login. Scan a QR code, then enter a 6-digit code. Backup codes keep you from locking out.