miniOrange 2FA Premium adds an identity check after the WordPress password step. Administrators can set requirements for visitors or roles, helping protect site accounts and the data they can access.

The plugin can be used on WooCommerce stores, membership sites, learning platforms, enterprise portals, educational institutions, government websites and agency-managed environments.

Choose a verification method

The free plan includes Google Authenticator (TOTP), Passkey, Email OTP and Security Questions. Premium adds SMS OTP, WhatsApp OTP, Telegram OTP, push notifications, email verification links, Microsoft Authenticator, Authy, LastPass Authenticator and hardware token authentication.

With push authentication, a visitor approves a login request on their phone instead of entering a six-digit code. Hardware tokens provide an option for sites that use physical authentication devices.

Passkeys can use Face ID, Touch ID, Windows Hello, Android biometrics or security keys such as YubiKey, Titan and SoloKey. Users can use them for passwordless login or as a second step, register multiple passkeys and keep backup codes as a fallback. Passkey and Google Authenticator verification execute entirely on the website without external calls. Some configured methods use miniOrange services to send or verify OTP, SMS, email, push or account-related requests.

Set policies for users and roles

Administrators can apply MFA requirements across the site, assign policies by role and configure options for individual users. Controls include enforcement policies, grace periods, trusted device management, backup authentication, account recovery options and custom redirects after login. Login reports and IP alerts provide information for reviewing authentication activity. Sites that use their own SMS gateway can configure custom SMS gateway integration.

Use multisite, branding and extension integrations

Premium includes multisite 2FA, custom branding and white-labeling for organizations managing multiple WordPress sites or adapting authentication screens to a defined brand.

The plugin works with WooCommerce, Elementor, Ultimate Member, BuddyPress, Theme My Login, LoginPress and custom login forms. On WooCommerce sites, additional login verification can protect customer accounts, order information, payment details and store management accounts. Role-based settings let administrators set various requirements for store staff and other user groups.

Install and configure

1. Install miniOrange 2FA Premium on the WordPress site.
2. Select the authentication methods and policies, then configure user or role requirements, trusted devices, recovery options, redirects and branding.
3. If a selected method needs a miniOrange service connection, configure it for that method.
4. Test the selected login flow before applying enforcement policies to users.