Key Features

Flexible 2FA Options

• Allow users to set up two-factor authentication with an authenticator app (like Google Authenticator or Authy) using QR code scanning and secure TOTP.
• Enable email verification as an alternative for users who prefer or require one-time codes sent via email.

Smart Role-Based Enforcement

• Choose exactly which roles require 2FA, or enable it globally with one checkbox.
• Support for super admins in multisite environments—ensure network security at the highest level.

• Live Setup Flow
  – Users who haven’t set up 2FA are guided through a setup wizard before accessing the dashboard.
• Session-Based Verification
  – Once authenticated, users are remembered for the duration of their session unless logged out or inactive.
• Admin Reset Tools
  – Easily reset 2FA for individual users from the admin panel.
  – Useful for support cases, device loss, or switching authentication methods.

• Multisite Compatibility
  – Seamless operation across single or multisite installs.
  – Treat super admins as protected users regardless of their assigned site roles.
• Customizable Method Availability
  – Let users choose between email and authenticator setup—or restrict to just one.
• Session-Aware Redirects
  – Automatically return users to their intended destination after verifying 2FA.
  – Includes a JavaScript fallback redirect for multisite edge cases where PHP headers may fail.