內容簡介
Rad 2FA 是一款為選定用戶角色添加雙重身份驗證的外掛，提供額外的安全保障。用戶在輸入正確的用戶名和密碼後，需再輸入一次性代碼，這可以通過電子郵件或身份驗證器應用程式獲得。
【主要功能】
• 支援按用戶角色啟用雙重身份驗證
• 提供電子郵件代碼或身份驗證器應用程式（TOTP）兩種驗證方式
• 可設定電子郵件代碼的長度、有效期及嘗試次數限制
• 管理介面和電子郵件代碼遵循每位用戶的 WordPress 語言設定
• 電子郵件代碼以哈希形式儲存，TOTP 密鑰則以 AES-256-CBC 加密儲存
• QR 碼完全在瀏覽器中生成，密鑰不會傳送至第三方服務
外掛標籤
開發者團隊
② 後台搜尋「Rad 2FA — Two-Factor Login (Email & Authenticator App)」→ 直接安裝（推薦）
原文外掛簡介
This plugin adds a second authentication factor for the user roles you choose. After a correct username and password, an extra code is required — the site admin picks the method:
Email — a one-time numeric code sent to the user’s email address.
Authenticator app (TOTP) — a standard 6-digit code from an app such as Google Authenticator, Authy, or Microsoft Authenticator (this plugin is not affiliated with or endorsed by Google). Each user connects the app in their own profile: scan the QR code or enter the secret key manually.
If the site uses TOTP but a specific user hasn’t connected the app yet, they temporarily get an email code at login instead — so nobody gets locked out.
Features:
Enable 2FA per user role
Two verification methods: email code or authenticator app (TOTP)
Configurable email code length, lifetime, and attempt limit
Admin screens and email codes follow each user’s own WordPress language setting (Users → Profile → Language) — no site-wide language switch needed
Email codes are stored only as a hash; the TOTP secret is stored encrypted (AES-256-CBC)
The QR code is generated entirely in the browser — the secret is never sent to a third-party service
Credits
The QR code on the authenticator app setup screen is rendered client-side using QRCode.js by davidshimjs (MIT license). This plugin bundles the minified build; the unminified source is available at https://github.com/davidshimjs/qrcodejs
Donate
If you find this plugin useful, please consider supporting its development.
https://buymeacoffee.com/rad181
