2-Step Verification

This plugin adds a mandatory second verification step to the login process for a content management system, requiring users to enter a code sent to their email. It is designed for site administrators who need a straightforward method to improve login security without relying on external apps or services.

Email-based verification: The second factor is delivered directly to the user's registered email address, eliminating the need for a separate authenticator app or mobile device.

Privacy-focused design: The system operates independently and does not send data to or rely on any third-party service, keeping authentication data within your own infrastructure.

Browser-only enforcement: The two-step process is applied specifically to logins made through a web browser, ensuring compatibility with standard user workflows while not interfering with application-based logins.

Automatic code expiration: For security, each generated verification code is valid for only five minutes after it is sent, reducing the window for potential misuse.

Simple activation: The plugin requires no complex configuration; it becomes active immediately upon installation to provide protection with minimal setup.