This plugin adds a mandatory second password step for administrator accounts on a site. It is designed for site owners who need an extra layer of security beyond the standard username and password, specifically to protect the admin panel from unauthorized access.

Second Password Prompt: After a successful standard login, administrators are automatically redirected to a custom page to enter a unique second password before gaining full access to the site. Attempt Limiting and Blocking: The system allows only three attempts to enter the correct second password. After three failures, the user account is blocked and logged out, requiring manual intervention to reset the attempt counter. Login Monitoring: The plugin can be configured to send an email notification for every login attempt, recording the username, password attempt, timestamp, and IP address for security auditing. Admin Panel Lock: Access to the site's admin area is completely blocked unless the correct second password has been entered and a verification cookie is present. Manual Reset: If an administrator is locked out, access can be restored by manually deleting or resetting a specific text file within the plugin's directory, providing a straightforward recovery method.