Two-Factor Auth for FF User Registration?

By: Russell Guilfoile | Asked: 11/28/2022
ForumsCategory: General questionsTwo-Factor Auth for FF User Registration?
Russell Guilfoile asked 2 years ago
Is it possible to do two-factor authentication with the FF User Registration plugin?
Walter JonesWalter Jones replied 2 years ago

Specifically as related to registering? Or do you mean after registering and then logging on thereafter?

You can create a type of 2FA on the registration form that prior to registering they have to pull a code from their email or text if you have twilio enabled and configured. I have done this before to cut down on spam registrations.

However this will not extend to the login process using only FF.

As Bobby indicated there are several WP 2FA plugins that work well.

Russell Guilfoile replied 2 years ago

Thats good to know but not my intent. I want 2FA for user login.

2 Answers
Bobby Clapp answered 2 years ago
No. After registration you will need to use a third-party plugin to pass MFA.
Russell Guilfoile replied 2 years ago

<p>ok. I'll look into that. Can the 2FA plugin be combined with the FF User Registration where I can continue to use the FF User Registration? If so, any recommendations on 2FA plugins?</p>

Bobby Clapp replied 2 years ago

2FA should be the login experience, not the registration experience, IMO. You should be able to use registration as you always have.

The free version of WMPU defender has 2FA with an authenticator app. https://wpmudev.com/blog/defender-two-factor-authentication/

Russell Guilfoile replied 2 years ago

Thanks for the advice and recommendation.

Rob LeVineRob LeVine answered 1 month ago
@Russell Guilfoile - I'm curious what you chose for your project and the experience you had. I've been asked to implement a 2FA.
Walter JonesWalter Jones replied 1 month ago

Rob I use DUO Mobile. But the client has to pay for the monthly cost due to the number of users. There are many plugins that work out there, but I like the experience with DUO Mobile.

Rob LeVineRob LeVine replied 1 month ago

@Walter Jones - thanks! So do you use DUO's plugin or do you engage the App as an authenticate? I ask because the DUO Security WP plugin says it's wicked old. I also ask because this area (2FA and security in general) are areas I haven't touched in a very long time.

Walter JonesWalter Jones replied 1 month ago

<p>The plugin authenticates with the duo API and you use an app on your phone to enter 2FA.</p>

Making the Best WordPress Plugin even better - Together

Take on bigger projects with confidence knowing you have access to an entire community of Formidable Experts and Professionals who have your back when the going gets tough. You got this!
Join the community
crossarrow-right