SecureKey Accessv0.15.0

This plugin adds two-factor authentication (2FA) to website logins, requiring users to provide a second verification step beyond their password. It is designed for site administrators and individual users who need to secure their accounts against unauthorized access, especially if passwords are compromised.

• Multiple Authentication Methods: Users can choose from several second-factor options, including time-based codes from authenticator apps, one-time codes sent via email, physical security keys, and printable backup codes.
• Per-User Configuration: Each user manages their own 2FA settings from their profile page, selecting and configuring their preferred methods. This allows for personalized security based on user preference and available hardware.
• No Global Settings: The plugin operates on an individual user basis. Site administrators can configure 2FA for other users by editing their profiles, but there are no site-wide enforcement settings that apply to all users automatically.
• Developer Hooks: Provides a range of filters and actions for developers to customize available providers, token behavior, and integration with APIs, allowing for extended functionality.
• Backup and Recovery: Encourages the use of backup verification codes to prevent account lockout if a primary method (like a phone) is lost or unavailable.