WOOCOMMERCE TWO FACTOR AUTHENTICATION V 2.3

Enhance the security of your online store by adding an essential layer of protection. Our Authentication plugin seamlessly integrates a robust 2FA process directly into your WooCommerce login flow, ensuring that only authorized users can access their accounts.

---

Live Demo – See It in Action​

Experience the plugin firsthand from both the customer and administrator perspectives.

• Shop Administrator Login:
  • URL:
    You do not have permission to view link please Log in or Register
  • Username: demo
  • Password: demo
• Customer Account Login:
  • Username: demo1
  • Password: demo

---

Effortless Automatic Updates​

Keep your plugin secure and up-to-date automatically. Simply install and configure the official Envato Market plugin.

• Download the Updater:
  You do not have permission to view link please Log in or Register
• Setup Guide: Follow the official configuration guide here:
  You do not have permission to view link please Log in or Register

---

How It Works: A Seamless User Journey​

The authentication process is designed for simplicity and security:

1. Enter Credentials: On the login page, the user enters their username/email. The standard login button is initially hidden.
2. Request OTP: The user clicks the new "Send OTP" button. A unique, time-sensitive One-Time Password is immediately generated and sent to their registered email address.
3. Enter OTP: The login button now appears. The user enters the OTP received via email.
4. Secure Login: Upon successful verification, the user is granted access to their account.

---

Key Features & Customization​

Highly Customizable Admin Settings​

Tailor the plugin to fit your store's needs perfectly. Configure:

• OTP code length and validity duration.
• Custom email subject and notification content.
• Error messages and the number of allowed retry attempts.

Flexible Templating System​

Override the default templates by copying them into your active theme folder for complete visual control.

• wc-login-form.php: Customizes the OTP interface on the WooCommerce My Account page.
• wp-login-form.php: Customizes the OTP interface on the standard WordPress admin login.

Robust Security Foundation​

• Strong OTP Generation: Each code is a robust, randomly generated string.
• Time-Based Expiry: OTPs automatically expire after a configurable period (default: 5 minutes) to prevent misuse.
• Brute Force Protection: The system locks out users after a set number of failed attempts (default: 3), expiring the OTP immediately.

Full WPML Compatibility​

Ready for a global audience? The plugin is fully compatible with the WPML plugin, allowing you to translate all front-facing text and messages into any language you support.