=== Wordpress 2-step verification === Contributors: as247 Donate link: http://as247.vui360.com/blog/ Tags: two-factor authentication, login, password, two-factor, authentication, security, login verification, two-step verification, two-step authentication, 2-step authentication, 2-factor authentication, 2-factor, 2FA, wordpress security, mobile, mobile phone, cell phone, smartphone, login protection, qr code, admin, javascript, plugin, multi-factor authentication, MFA, login approval, two-factor verification, 2-Step Verification, Bảo mật, Code, Google, Password, Securiry ,Username, Wordpress, Xác thực 2 bước, Xác minh 2 bước Requires at least: 3.3 Tested up to: 5.0 License: GPLv2 or later License URI: http://www.gnu.org/licenses/gpl-2.0.html Adds an extra layer of security to your Wordpress Account. Same as Google 2-step verification. == Description == = Wordpress 2-Step Verification (Wp2sv) adds an extra layer of security to your Wordpress Account. = In addition to your username and password, you'll enter a code that generated by Android/iPhone/Blackberry app or Plugin will send you via email upon signing in. = Features = * Easy setup * Multisite supported * Option to use application or email * Backup codes * Protect XML-RPC with app password == Installation == 1. Download the plugin and extract its content 2. Upload the extracted folder to the `/wp-content/plugins/` directory 2. Activate the plugin through the 'Plugins' menu in WordPress 3. Set up 2-step verification through the 'Users->2-Step Verification' menu == Frequently asked questions == = I cannot complete the first set up step, verification code is incorrect = Codes are time-dependent. Make sure your phone is set to the correct local time. If your server time is incorrect, click *Sync now* at top right of *overview page* = I don't received email = The plugin uses wordpress built-in function to send email. If email function not work you can try some plugin to help sending email over SMTP like `WP Mail Bank`,`WP Mail SMTP`, `WP SMTP`,... = Does the plugin support multisites? = *Yes*, it does. You can `network active` it, it work with all users no matter if your site is multisite or not If an user turn it `ON` that mean he will be asked for code once login on all sites whole the network. == Screenshots == 1. Overview page 2. Set up instruction 3. Enter code after login 4. App passwords list 5. New App password == Changelog == = 1.0 = * Initial release. = 1.1 = * Fix some issues * Add translation for vietnamese * Compatible with Wordpress 4.1 = 1.1.1 = * Add Some missing icon = 1.1.2 = * Fix sync time issue = 1.1.3 = * Compatible with Wordpress 4.3 = 1.2 = * New feature Backup codes * New feature App passwords * Compatible with Wordpress 4.4.2 = 1.2.1 = * Fix some small issues * Fully Vietnamese translation = 1.2.2 = * Improve security = 1.2.3 = * Fix app login * Fix other issues = 1.3 = * Skip 2 step verification on rest api, we can't implement this on api. Api will use oAuth for authentication and it's secure enough * Allow login on browser with app password (for compatible with embed browser in Wordpress app) * Wordpress 4.5 = 1.3.1 = Fix `rest_api_register_rewrites` undefined error came in 1.3 if Wordpress version < 4.4.0 = 1.5 = * New design for enter code screen * Recovery option for admin by upload verification file * Fix bug empty page after enter a valid code = 1.5.1 = * Fix fatal error on php < 5.4 = 1.5.2 = * Fix conflict with wp-mail-bank plugin * Fix some small issues = 1.5.3 = * Fix small issues * Add Russian translation = 1.5.4 = * Fix issue with rest request = 1.5.5 = Add filter 'wp2sv_trusted_request' to allow third-party plugins bypass 2-step verification = 1.5.6 = Enable responsive on enter code screen