Two Factor (2FA) Authentication via Email

A lightweight plugin to allow the use of two-factor authentication (2FA) through email. One-click login with this Two-Factor (2FA) Authentication plug …

A simple, lightweight, yet effective plugin to enable two factor (2FA) authentication via email.

WordPress is the world’s most popular content management system (CMS), with over 40% of all websites running on it. As such, it has become a prime target for hackers looking to exploit vulnerabilities to gain unauthorized access to websites. One of the best ways to enhance the security of a WordPress site is to enable two-factor authentication (2FA) for administrators.

  • Simply enable the plugin then edit a user account to enable 2FA for that individual user.
  • Please make sure your WordPress website sends and receives emails correctly. The best way is to use a SMTP plugin.

Use the automatic installer via WordPress or download the plugin and:

  1. Upload the plugin files to the /wp-content/plugins/two-factor-2fa-via-email directory.
  2. Activate the plugin through the ‘Plugins’ screen in WordPress.
  3. Navigate to your profile or any other users and enable to toggle 2FA to enable per account.
Help! I’m locked out!

If you are not receiving the email to login then in order to regain access to your account, you’ll have to disable the plugin. The only way to do this is by renaming the plugin folder from two-factor-2fa-via-email to two-factor-2fa-via-email.backup or equivalent.

15 minutes is too long/short for me. Can this be changed?

At the moment, this cannot be changed however, we do have this feature planned.


  • Fix openssl key
  • Fix echo’ing


  • Initial release.