內容簡介
```html
<!DOCTYPE html>
<html lang="zh-tw">
<head>
<title>AV 2FA WordPress 外掛介紹</title>
</head>
<body>
<h3>總結：</h3>
<p>AV 2FA 給您的 WordPress 登入過程增加了一個關鍵的安全層。用戶成功輸入密碼後，此外掛會將一個獨特、有時效性的驗證碼發送到其註冊的電子郵件地址。用戶必須輸入此驗證碼才能完成登錄，即使密码被破解也可以有效保護帳戶。</p>
<h3>主要特點：</h3>
<ul>
<li>Email-Based 2FA：向用戶的電子郵件發送 6 位數字的驗證碼。</li>
<li>可自訂驗證碼有效期：管理員可設定驗證碼的有效時間（默認為 60 秒）。</li>
<li>用戶排除清單：通過將用戶 ID 添加到排除清單，輕鬆為特定用戶（例如管理員或整合帳戶）繞過 2FA。</li>
<li>倒數計時器：驗證畫面顯示倒數計時器，以顯示用戶剩餘時間。</li>
<li>安全可靠：使用 WordPress 內建的郵件服務器以及安全做法進行驗證碼生成和驗證。</li>
</ul>
</body>
</html>
```
```html
<!DOCTYPE html>
<html lang="zh-tw">
<head>
<title>AV 2FA WordPress 外掛問與答</title>
</head>
<body>
<h3>問與答：</h3>
<h4>問：AV 2FA 外掛是如何增加 WordPress 登入過程的安全性？</h4>
<p>答：當用戶成功輸入密碼後，此外掛會向其註冊的電子郵件地址發送一個獨特、有時效性的驗證碼，用戶必須輸入此驗證碼才能完成登錄，即使密码被破解也可以有效保護帳戶。</p>
<h4>問：AV 2FA 外掛的主要特點有哪些？</h4>
<p>答：主要特點包括：
<ul>
<li>Email-Based 2FA：向用戶的電子郵件發送 6 位數字的驗證碼。</li>
<li>可自訂驗證碼有效期：管理員可設定驗證碼的有效時間（默認為 60 秒）。</li>
<li>用戶排除清單：通過將用戶 ID 添加到排除清單，輕鬆為特定用戶（例如管理員或整合帳戶）繞過 2FA。</li>
<li>倒數計時器：驗證畫面顯示倒數計時器，以顯示用戶剩餘時間。</li>
<li>安全可靠：使用 WordPress 內建的郵件服務器以及安全做法進行驗證碼生成和驗證。</li>
</ul></p>
</body>
</html>
```
外掛標籤
開發者團隊
原文外掛簡介
AV 2FA adds a crucial layer of security to your WordPress login process. After a user successfully enters their password, this plugin sends a unique, time-sensitive verification code to their registered email address. The user must then enter this code to complete the login, effectively protecting their account even if their password is compromised.
The plugin is designed to be lightweight, easy to use, and seamlessly integrated into the WordPress experience.
Key Features:
Email-Based 2FA: Sends a 6-digit verification code to the user’s email.
Custom Login URL: Hide your login page by setting a custom login slug. The default wp-login.php becomes inaccessible, protecting against brute force attacks and bots.
Rate Limiting & Account Lockout: Protects against brute force attacks on 2FA codes with configurable thresholds and temporary lockouts.
Progressive Lockout: Automatically increases lockout duration for repeat offenders (2x, 4x, 8x multiplier).
IP-Based Protection: Tracks failed attempts by IP address to prevent distributed attacks.
Email Notifications: Alerts users when their account is locked due to suspicious activity.
Admin Controls: View and manually unlock locked accounts from the settings page.
Customizable Code Validity: Admin can set how long the code is valid for (default is 60 seconds).
User Exclusion List: Easily bypass 2FA for specific users (e.g., admin or integration accounts) by adding their User ID to an exclusion list.
Countdown Timer: The verification screen displays a countdown timer to show the user how much time is left.
Secure & Reliable: Uses WordPress’s built-in mailer and secure practices for code generation and verification.
