Description
Vonage Two-Factor Authentication Plugin for WordPress
This plugin enables your WordPress site to use Two-Factor Authentication
using Vonage’s Verify API service.
Requirements:
WordPress Version 5.9 and up (i.e. the current supported version of WordPress).
An account with Vonage (with credit). You can sign up here.
Setting up:
Install this plugin in your WordPress plugins directory.
Active the plugin under your administrator account.
Your 2FA admin menu should now be accessible from the WordPress menu
Populate your API Key and Secret in order to connect to Vonage’s Verify API that
this plugin uses. You can get these credentials from your Vonage Dashboard.
Each user of your WordPress site can now enable 2 Factor Authentication from their
user settings. A new section is available in the Profile screen.
Please note that this phone number must contain the full international dialling code
complete with + symbol.
For users with 2FA enabled, the first login attempt will ask for the PIN sent out
to the phone number entered.
Once the user has entered a valid PIN, login will finish.
Under the hood, WordPress stores a unique
request_id
from Vonage in the user’s
session with the key
vonage_2fa_request_id
. On each login, WordPress
will use the Verify API to make sure this key is still valid. When it expires, the 2FA
workflow will be repeated.
Feedback and Support
Got any questions? Fire me an email or DM. You can find me here on Twitter,
or by email you can reach me at jim.seconde at vonage.com. Alternatively, you
can email the Developer Relations team at devrel at vonage.com.