外掛說明

前往 [使用者]→[個人資料] 中的 [兩步驟驗證選項]，便能為網站帳號啟用及設定一或多個兩步驟驗證方式：

透過電子郵件傳送驗證碼
TOTP 驗證碼 (Time Based One-Time Passwords，以時間為基礎、最通用的演算法)
FIDO U2F 安全金鑰 (Universal 2nd Factor，通用第二因素)
備用驗證碼
測試模式 (僅供測試目的使用)

如需進一步了解這個外掛的開發沿革，請參閱這篇文章。

動作及篩選器

以下所列為這個外掛提供的動作及篩選器勾點：

two_factor_providers 篩選器：這個篩選器會覆寫如電子郵件及 TOTP 等兩步驟驗證功能提供程式。陣列值為兩步驟驗證功能提供程式的 PHP 類別名稱。
two_factor_enabled_providers_for_user 篩選器：這個篩選器會覆寫已為使用者啟用的兩步驟驗證功能提供程式清單。第一個引數是已啟用的功能提供程式類別名稱值陣列，第二個引數為使用者 ID。
two_factor_user_authenticated 動作：這個動作會接收已登入的 WP_User 物件作為第一個引數，用於完成驗證工作流程後立即確定已登入的使用者。
two_factor_token_ttl 篩選器：這個篩選器會覆寫電子郵件權杖產生後的使用期限 (以秒為單位)。接受第一個引數為以秒為單位的時間間隔設定後，才能驗證 WP_User 物件的 ID。

螢幕擷圖

[個人資料] 頁面中的 [兩步驟驗證選項]
[個人資料] 頁面中的 U2F 安全金鑰設定
登入 WordPress 後，使用電子郵件傳送驗證碼進行驗證

常見問題集

如何針對程式碼錯誤進行意見反應或取得協助？

Two Factor 的GitHub 待解問題頁面，是回報外掛程式碼錯誤、功能建議及任何 (非安全性相關) 意見反應的最佳集中地。在提交新問題前，請先搜尋現有待解問題中，是否已有其他人回報過類似的問題。

在何處可以回報安全性程式碼錯誤？

外掛參與者及 WordPress 社群對安全性程式碼錯誤一向嚴陣以待，我們非常感謝使用者披露相關發現所付出的心力，並會盡全力解決使用者提出的問題。

如需回報安全性問題，請參考 WordPress HackerOne 計畫。

使用者評論

Arslan Kalwar 2023 年 5 月 24 日

As a contributor to the Two-Factor WordPress Plugin, I'm excited to present my review of this exceptional security solution. This plugin operates flawlessly, delivering a streamlined and user-friendly interface for configuring two-factor authentication (2FA) with minimal effort. One of the aspects I'm particularly fond of is its commitment to focusing on a single function while excelling at it, providing users with a reliable and efficient solution. In this review, I will delve deeper into the plugin's impressive features and highlight its effectiveness in enhancing WordPress security. Impressive Simplicity: The Two-Factor WordPress Plugin truly shines in its simplicity. Configuring 2FA is a breeze, thanks to its straightforward and intuitive interface. Even users with minimal technical knowledge can easily set up the plugin without any hassle. By focusing on the core functionality of two-factor authentication, the plugin avoids overwhelming users with unnecessary features, ensuring a smooth and uncomplicated experience. User-Centric Design: The plugin's user-centric design is a testament to its effectiveness. It prioritizes the needs and preferences of users, providing them with a seamless and efficient 2FA setup process. Whether users opt for time-based one-time passwords (TOTP), QR code scanning, or other authentication methods, the plugin caters to their diverse requirements, enhancing security without compromising convenience. The straightforward configuration options empower users to strengthen their WordPress logins with just a few clicks. Contributor Involvement: As a proud contributor to the Two-Factor WordPress Plugin, I'm grateful for the opportunity to be part of a project that prioritizes user security. Collaborating with the dedicated development team has been an enriching experience, and I've witnessed firsthand their commitment to excellence and attention to detail. Contributing to this plugin has allowed me to play a role in providing users with a reliable and effective security solution for their WordPress websites. Conclusion: In conclusion, the Two-Factor WordPress Plugin stands out as a remarkable tool for enhancing WordPress security. Its flawless performance, coupled with a user-friendly interface, makes it a top choice for configuring two-factor authentication with ease. The plugin's simplicity is commendable, offering users a focused and streamlined solution without overwhelming them with unnecessary features. As a contributor to this exceptional project, I take great pride in recommending the Two-Factor WordPress Plugin to WordPress users who value simplicity, security, and reliability.

fahimmurshed 2023 年 5 月 24 日

This plugin functions flawlessly! It provides users with a straightforward and straightforward interface for configuring two-factor authentication (2FA), requiring minimal configuration, if any. What I appreciate most is that it focuses on doing one thing exceptionally well, as opposed to overwhelming users with a multiplicity of unrelated features.