描述

通过“用户”→“个人资料”下的“双重身份验证选项”部分，为您的账户启用和配置一个或多个双重身份验证方式：

邮件验证码
基于时间的一次性密码（TOTP）
FIDO 通用第二因素（U2F）
备用验证码
虚拟方式（仅用于测试目的）

有关更多历史，请参阅这篇文章。

动作和过滤器

以下列出该插件提供的动作和过滤器钩子：

two_factor_providers 过滤器：将覆盖可用的双重身份验证提供方式，例如电子邮件和基于时间的一次性密码。数组值为双重身份验证方式的 PHP 类名。
two_factor_enabled_providers_for_user 过滤器：将覆盖提供给用户启用的双重身份验证方式清单。第一个参数为启用的方式提供类名数组作为值，第二个参数为用户 ID。
two_factor_user_authenticated 动作：接收已登录的 WP_User 对象作为第一个参数，用在身份验证工作流之后确定登录的用户。
two_factor_token_ttl 过滤器：将覆盖生成电子邮件验证码后的过期时间（以秒为单位）。第一个参数接受以秒为单位的时间，并用于验证正在验证的 WP_User 对象的 ID。

屏幕截图

用户个人资料下的双因素选项。
用户个人资料下的U2F安全密钥部分。
登陆 WordPress 时使用邮件发送验证码进行验证。

常见问题

我该如何发送反馈或获取有关错误的帮助？

报告漏洞、功能建议或任何其他（非安全相关）的反馈最佳途径是在 GitHub Two Factor 的 issues 页面。在提交新问题之前，请搜索现有问题以检查是否有其他人报告了相同的反馈。

我应该在哪里报告安全漏洞？

插件贡献者和 WordPress 社区非常重视安全漏洞。我们感谢您负责任地披露您发现的漏洞，并将竭尽全力解决您的贡献。

要报告安全问题，请访问 WordPress HackerOne 网站。

评价

Arslan Kalwar 2023年5月24日

As a contributor to the Two-Factor WordPress Plugin, I'm excited to present my review of this exceptional security solution. This plugin operates flawlessly, delivering a streamlined and user-friendly interface for configuring two-factor authentication (2FA) with minimal effort. One of the aspects I'm particularly fond of is its commitment to focusing on a single function while excelling at it, providing users with a reliable and efficient solution. In this review, I will delve deeper into the plugin's impressive features and highlight its effectiveness in enhancing WordPress security. Impressive Simplicity: The Two-Factor WordPress Plugin truly shines in its simplicity. Configuring 2FA is a breeze, thanks to its straightforward and intuitive interface. Even users with minimal technical knowledge can easily set up the plugin without any hassle. By focusing on the core functionality of two-factor authentication, the plugin avoids overwhelming users with unnecessary features, ensuring a smooth and uncomplicated experience. User-Centric Design: The plugin's user-centric design is a testament to its effectiveness. It prioritizes the needs and preferences of users, providing them with a seamless and efficient 2FA setup process. Whether users opt for time-based one-time passwords (TOTP), QR code scanning, or other authentication methods, the plugin caters to their diverse requirements, enhancing security without compromising convenience. The straightforward configuration options empower users to strengthen their WordPress logins with just a few clicks. Contributor Involvement: As a proud contributor to the Two-Factor WordPress Plugin, I'm grateful for the opportunity to be part of a project that prioritizes user security. Collaborating with the dedicated development team has been an enriching experience, and I've witnessed firsthand their commitment to excellence and attention to detail. Contributing to this plugin has allowed me to play a role in providing users with a reliable and effective security solution for their WordPress websites. Conclusion: In conclusion, the Two-Factor WordPress Plugin stands out as a remarkable tool for enhancing WordPress security. Its flawless performance, coupled with a user-friendly interface, makes it a top choice for configuring two-factor authentication with ease. The plugin's simplicity is commendable, offering users a focused and streamlined solution without overwhelming them with unnecessary features. As a contributor to this exceptional project, I take great pride in recommending the Two-Factor WordPress Plugin to WordPress users who value simplicity, security, and reliability.

fahimmurshed 2023年5月24日

This plugin functions flawlessly! It provides users with a straightforward and straightforward interface for configuring two-factor authentication (2FA), requiring minimal configuration, if any. What I appreciate most is that it focuses on doing one thing exceptionally well, as opposed to overwhelming users with a multiplicity of unrelated features.