Brightery Secure 2FA adds a strong second login step for WordPress accounts while staying lightweight in runtime. Features: Authenticator app (TOTP) support. Passkeys / WebAuthn support for Touch ID, Face ID, Windows Hello, fingerprint readers, and device PIN. Role-based enforcement: require selecte
Trusted devices so users can skip 2FA on approved browsers for a limited period.
CSV export for security logs.
Advanced log filters and search.
Custom labels for trusted devices and passkeys.
Optional revocation of other sessions after security changes.
Optional blocking of WordPress application passwords for protected / 2FA-enabled users.
Lightweight runtime: the plugin mostly runs on login, profile, AJAX, settings pages, WooCommerce account pages, and authenticated REST requests.
Important Notes
HTTPS is required for passkeys in production.
This build is optimized for normal interactive WordPress logins and admin access enforcement.
Passkey attestation trust-chain validation is intentionally not enforced in order to remain lightweight and dependency-free. The plugin still validates challenge, origin, RP ID hash, user presence, optional user verification, signature, and signature counter.
TOTP setup includes a local QR-code renderer so the setup secret stays on your own WordPress site during enrollment.
The plugin stores account-security data such as trusted-device records, passkey metadata, security logs, and a limited recent login-context history.
A privacy-policy suggestion plus WordPress personal-data exporter and eraser integrations are included.
There are no non-GPL third-party runtime libraries bundled with this plugin; the distributed JavaScript and CSS files are included as human-readable source.
Security Model
TOTP secrets are encrypted before storing in user meta.
Backup codes are stored hashed.
Passkeys verify origin, RP ID hash, challenge, signature, and signature counter.
Rate limiting helps slow repeated login and 2FA guessing attempts.
The plugin can require passkey user verification for biometric/PIN-backed sign-in.
Privacy
Brightery Secure 2FA stores security-related account data so it can protect logins and help administrators investigate suspicious access. The plugin adds suggested privacy-policy text to WordPress and registers personal-data exporter/eraser callbacks for the data it stores.
Source Code and Licensing
All distributed plugin PHP, JS, and CSS files are included as human-readable source.
The local QR renderer is bundled directly in assets/js/bs2fa-qr.js as readable source code.
No non-GPL runtime libraries are required for normal plugin operation.
02 / Source details
Getting started.
01Upload the ZIP in WordPress Plugins > Add New > Upload Plugin.
02Activate “Brightery Secure 2FA”.
03Go to Settings > Brightery Secure 2FA.
04Select allowed methods and the user roles that must use 2FA.
05Ask each protected user to finish setup from Profile or 2FA Setup.
Website LLMs.txt and LLMs-Full.txt Generator is an LLMs.txt generator and llms-full.txt generator for WordPress. It helps site owners generate, manage, preview, validate, and serve AI discovery files from published public content. Use it to create structured /llms.txt and optional /llms-full.txt end
EngageDock AI is a customizable floating contact widget for WordPress websites that want more leads and faster visitor communication. It helps small businesses turn website traffic into calls, texts, emails, and callback requests from one clean contact panel. Key Features: Click-to-Call – One tap ca
Altify AI is an auto ALT text and AI ALT text plugin for WordPress images. It helps generate descriptive image ALT text for accessibility and image SEO. Use bulk image ALT text tools for your Media Library, generate featured image ALT text automatically, and scale WooCommerce image ALT updates with
The Accepted Payment Methods plugin is a straightforward, lightweight solution that enhances your website by displaying visually appealing icons of the payment methods you accept. This plugin is ideal for a variety of websites, including e-commerce platforms, service-oriented websites, and informati
