VeriShieldv0.6.1

This plugin adds two-factor authentication (2FA) to your website's login process using time-based one-time passwords (TOTP). It is designed for site administrators and users who want a significant, user-managed upgrade to their login security beyond just a password.

• Individual User Control: Each user generates and manages their own unique secret key from their profile page. This allows them to use their preferred authenticator app, like Google Authenticator or Authy, and maintain personal responsibility for their account's second factor.
• Stealth Mode Option: An administrator can enable a stealth mode where the one-time password is entered directly after the user's regular password, without displaying a separate field on the login screen. This keeps the login form looking standard while maintaining the added security layer.
• Recovery Code System: During setup, users receive a set of one-time-use recovery codes. These provide a backup method to access an account if the primary authenticator app is lost or unavailable, preventing lockouts.
• Open Source and Extensible: The plugin's code is publicly available. Developers can customize its behavior through provided filters that adjust elements like the QR code generation URI, login form text, code expiration windows, and the number or length of recovery codes.
• Simple Setup Process: Users enable the feature by scanning a QR code or manually entering a provided secret into an authenticator app. After entering a generated code to confirm, the two-factor requirement is active for their account on subsequent logins.