This plugin adds a mandatory second layer of security to the login process for any site built with the popular CMS. It is designed for administrators who need to protect user accounts from unauthorized access, especially in environments handling sensitive data.

• Two-Factor Authentication (2FA): Requires users to enter a time-based code from their mobile device in addition to their password, significantly improving account security.
• App-Based Verification: Supports standard authenticator applications like Google Authenticator and Authy, which generate secure one-time codes without needing SMS.
• Rescue Code Option: Provides a backup method for users to log in if they lose access to their primary authenticator device, preventing account lockout.
• Enforced Security: Administrators can require 2FA for all users or specific roles, ensuring compliance with security policies across the site.
• Lightweight Integration: Works with the core login system without requiring major changes to the site's existing user management or theme.