/ Plugin Category

/ Security & Privacy

/ Security Scanning & Malware Protection

/ Two Factor (2FA) Authentication via Email

Two Factor (2FA) Authentication via Email

By Sully

Security & Privacy / Security Scanning & Malware Protection

Two Factor (2FA) Authentication via Email Review - In-Depth Analysis

Enhance your WordPress site's security with this Two-Factor Authentication (2FA) plugin using email for verification.

Performance Overview

WPS Score

6.68/10

User Rating

5/5 (based on 4+ reviews)

Active Installations

9,000+

Update Frequency

Below Average It is calculated using the weighted average of same category plugins.

Security Score

5 / 10 (Medium Risk) It is calculated using the weighted average of all versions.

What It Does

This plugin provides a simple and effective way to enable two-factor authentication (2FA) via email for your WordPress site. It is lightweight and can be activated on a per-user basis or for all administrators and editors with just a single line of code in your wp-config.php file.

With WordPress powering over 40% of all websites, it has become a prime target for hackers. Implementing 2FA significantly enhances your site's security by requiring an additional verification step during login.

To use this plugin, simply enable it and edit user accounts to activate 2FA for individual users. Ensure your WordPress site is configured to send and receive emails correctly, preferably using an SMTP plugin for reliable email delivery.

Comparing to Alternatives

Two Factor (2FA) Authentication via Email offers a straightforward approach to two-factor authentication, focusing solely on email verification. Compared to other plugins that provide multiple 2FA methods, this plugin prioritizes simplicity and ease of use.

Top alternatives

Strengths

Extremely simple setup with minimal configuration required.
Lightweight and does not add unnecessary bloat to the site.
Focuses on email-based 2FA, which is familiar to most users.
Quick activation by toggling 2FA on user accounts.
Developer responsiveness to reasonable requests.

Weaknesses

Limited to email-based two-factor authentication only.
Lacks advanced features like SMS or authenticator app support.
No role-based or site-wide enforcement options built into the plugin.
No premium version to unlock additional functionality.

User Sentiment Analysis

Users appreciate the plugin's simplicity and effectiveness, highlighting its ease of use and lightweight nature. However, some note the limited scope of features compared to other 2FA solutions.

Positive highlights

"Easiest way to boost security going, no crazy configuration needs." - bopsbees
"Simple, lightweight and easy to use – should be baked into WordPress IMO." - nathantpc
"Very convenient for personal use or for protecting client websites." - Jeremy Wu
"Simple and lightweight plugin. Love it." - Tapash

Common complaints

Limited to email-based authentication only.
No advanced configuration options for site-wide enforcement.
Lacks support for other 2FA methods like SMS or authenticator apps.

Weaknesses

No premium version means no access to additional features.
May not meet needs of users requiring multi-method 2FA support.
Minimal customization options for user roles or enforcement policies.

Who Should Use This?

Best for

Users seeking a quick and easy way to add email-based two-factor authentication without complex setup or additional features.

Not ideal for

Sites requiring multi-factor options beyond email, advanced role-based enforcement, or premium support and features.

Pricing & Value

Free version includes

The free version provides essential email-based two-factor authentication with simple activation and no configuration complexity.

Final Verdict

Two Factor (2FA) Authentication via Email is an excellent choice for users who want a lightweight, no-fuss solution to enhance login security via email verification. Its simplicity and ease of use make it ideal for personal sites or clients needing basic 2FA protection.

However, users seeking more comprehensive two-factor authentication options, such as SMS or authenticator apps, or advanced enforcement features may find this plugin limited. The absence of a pro version means all users share the same basic feature set.

Other Notable Features

Here are a few other notable features of this free Two Factor (2FA) Authentication via Email plugin.

2FA

Two Factor Authentication

Email Authentication

Screenshots

FAQ

If you are not receiving the email to login then in order to regain access to your account, you’ll have to disable the plugin. The only way to do this is by renaming the plugin folder from two-factor-2fa-via-email to two-factor-2fa-via-email.backup or equivalent.

Yes! As of version 1.5.2 you can now add a defined constant to your wp-config.php file;

define('SS88_2FAVE_LINK_EXPIRES_MINUTES', 10);

Where the number 10 is, change this to whatever value (in minutes) you prefer.

Yes! As of version 1.6 you can now add a defined constant to your wp-config.php file;

define('SS88_2FAVE_ENABLE_ADMINS', true);

Yes! As of version 1.6 you can now add a defined constant to your wp-config.php file;

define('SS88_2FAVE_ENABLE_EDITORS', true);

Yes! As of version 1.9.2 you can now add a defined constant to your wp-config.php file;

define('SS88_2FAVE_ENABLE_CONTRIBUTORS', true);

Yes! As of version 1.7.1 you can now add a defined constant to your wp-config.php file;

define('SS88_2FAVE_ENABLE_SUBSCRIBERS', true);

Yes! As of version 1.6 you can now add a defined constant to your wp-config.php file;

define('SS88_2FAVE_ENABLE_ALL', true);

Yes! As of version 1.6 you can now add a defined constant to your wp-config.php file;

define('SS88_2FAVE_NOTIFICATION_EMAIL', '[email protected]');

Change [email protected] to your preferred email.

Yes! As of version 1.9 you can now add a defined constant to your wp-config.php file;

define('SS88_2FAVE_API_DISABLE_ALL', true);

As of version 1.9.1 you can use the filter SS88_2FAVE_custom_redirect like so:

add_filter('SS88_2FAVE_custom_redirect', function($URL) {      if(current_user_can('editor')) return 'https://custom.com/page/here';     else return $URL;  });

As of version 1.9.1 you can use the filter SS88_2FAVE_isEnabled like so:

add_filter('SS88_2FAVE_isEnabled', function($isEnabled, $UserID, $type) {      // $isEnabled = Prior value     // $UserID = ID of user     // $type = Values are API or LOGIN      return $isEnabled;  }, 10, 3);

Please note that if you have SS88_2FAVE_ENABLE_ALL, SS88_2FAVE_ENABLE_ADMINS, SS88_2FAVE_ENABLE_EDITORS, SS88_2FAVE_ENABLE_CONTRIBUTORS, SS88_2FAVE_ENABLE_SUBSCRIBERS, or SS88_2FAVE_API_DISABLE_ALL set, the filter SS88_2FAVE_isEnabled will not work.