Validates Cloudflare Access JWTs at the WordPress origin so protected paths stay closed to requests that bypass Cloudflare.
Alternatives to WP Require Auth
Plugins below are selected for functional relevance and current directory signals. Active-install counts do not affect this ranking.
WordPress plugins with similar use cases
Compatibility and update metadata provide context, not a quality guarantee. Review each plugin’s details for your site.
MirSecure protects your WordPress REST API by allowing access only to authenticated users.
Secure your WordPress site with easy and effective basic authentication. Restrict access, monitor attempts, and enhance security.
Create modern login, registration, profile, and password reset pages with Gutenberg blocks and shortcodes.
A complete authentication solution for Headless WordPress applications using JWT, supporting Registration, SSO, RBAC, and advanced Security features.
Add a one-time code sent over WhatsApp as a second factor for WordPress and WooCommerce logins, with recovery codes, rate limits and an audit log.
Passkeys and two-factor authentication for WordPress. Sign in without a password, and enrol before you require 2FA by role.
Standards-based two-factor authentication (TOTP & e-mail), brute-force lockout, login alerts and an audit log — with no external service.
Two-factor authentication (2FA) via email using one-time passwords (OTP).
GuardianKey is a service to protect systems in real-time against authentication attacks. It implements GK Auth Security for login protection and GKTin …