Google Authenticator – WordPress Two Factor Authentication (2FA) - Version 5.4.40

Version Description

  • Google Authenticator - Two factor Authentication (2FA, OTP) :
  • XSS Vulnerability fix
  • Added video link for miniOrange Authenticator
Download this release

Release Info

Developer twofactorauthentication
Plugin Icon 128x128 Google Authenticator – WordPress Two Factor Authentication (2FA)
Version 5.4.40
Comparing to
See all releases

Code changes from version 5.4.39 to 5.4.40

Files changed (4) hide show
  1. handler/twofa/setup_twofa.php +18 -2
  2. helper/curl.php +0 -1
  3. miniorange_2_factor_settings.php +12 -9
  4. readme.txt +227 -160
handler/twofa/setup_twofa.php CHANGED
@@ -120,7 +120,6 @@
120
  $two_factor_methods_doc = array(
121
  "Security Questions" => "https://developers.miniorange.com/docs/security/wordpress/wp-security/step-by-setup-guide-to-set-up-security-question",
122
  "Google Authenticator" => "https://developers.miniorange.com/docs/security/wordpress/wp-security/google-authenticator",
123
- "miniOrange Authenticator" => "https://developers.miniorange.com/docs/security/wordpress/wp-security/step-by-setup-guide-to-set-up-miniorange-QR-code",
124
  "Email Verification" => "https://developers.miniorange.com/docs/security/wordpress/wp-security/email_verification",
125
  "miniOrange Soft Token" => "https://developers.miniorange.com/docs/security/wordpress/wp-security/step-by-setup-guide-to-set-up-miniorange-soft-token",
126
  "miniOrange Push Notification" => "https://developers.miniorange.com/docs/security/wordpress/wp-security/step-by-setup-guide-to-set-up-miniorange-push-notification",
@@ -135,7 +134,7 @@
135
  $two_factor_methods_video = array(
136
  "Security Questions" => "https://www.youtube.com/watch?v=pXPqQ047o-0",
137
  "Google Authenticator" => "https://www.youtube.com/watch?v=BS6tY-Goa1Q",
138
- "miniOrange Authenticator" => "https://www.youtube.com/watch?v=IPYizmgzTd8",
139
  "Email Verification" => "https://www.youtube.com/watch?v=OacJWBYx_AE",
140
  "miniOrange Soft Token" => "https://www.youtube.com/watch?v=9HV8V4f80k8",
141
  "miniOrange Push Notification" => "https://www.youtube.com/watch?v=it_dAhFcxvw",
@@ -313,6 +312,23 @@
313
 
314
  break;
315
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
316
  case 'miniOrange QR Code Authentication':
317
  $form .=' <span style="float:right">
318
  <a href='.$two_factor_methods_doc[$auth_method].' target="_blank">
120
  $two_factor_methods_doc = array(
121
  "Security Questions" => "https://developers.miniorange.com/docs/security/wordpress/wp-security/step-by-setup-guide-to-set-up-security-question",
122
  "Google Authenticator" => "https://developers.miniorange.com/docs/security/wordpress/wp-security/google-authenticator",
 
123
  "Email Verification" => "https://developers.miniorange.com/docs/security/wordpress/wp-security/email_verification",
124
  "miniOrange Soft Token" => "https://developers.miniorange.com/docs/security/wordpress/wp-security/step-by-setup-guide-to-set-up-miniorange-soft-token",
125
  "miniOrange Push Notification" => "https://developers.miniorange.com/docs/security/wordpress/wp-security/step-by-setup-guide-to-set-up-miniorange-push-notification",
134
  $two_factor_methods_video = array(
135
  "Security Questions" => "https://www.youtube.com/watch?v=pXPqQ047o-0",
136
  "Google Authenticator" => "https://www.youtube.com/watch?v=BS6tY-Goa1Q",
137
+ "miniOrange Authenticator" => "https://www.youtube.com/watch?v=oRaGtKxouiI",
138
  "Email Verification" => "https://www.youtube.com/watch?v=OacJWBYx_AE",
139
  "miniOrange Soft Token" => "https://www.youtube.com/watch?v=9HV8V4f80k8",
140
  "miniOrange Push Notification" => "https://www.youtube.com/watch?v=it_dAhFcxvw",
312
 
313
  break;
314
 
315
+ case 'miniOrange Authenticator':
316
+ $form .=' <span style="float:right">';
317
+ if(isset($two_factor_methods_doc[$auth_method])){
318
+ $form .='<a href='.$two_factor_methods_doc[$auth_method].' target="_blank">
319
+ <span title="View Setup Guide" class="dashicons dashicons-text-page" style="font-size:19px;color:#413c69;float: right;"></span>
320
+ </a>';
321
+ }
322
+
323
+ if(isset($two_factor_methods_video[$auth_method])){
324
+ $form .='<a href='.$two_factor_methods_video[$auth_method].' target="_blank">
325
+ <span title="Watch Setup Video" class="dashicons dashicons-video-alt3" style="font-size:18px;color:red;float: right;margin-right: 5px;"></span>
326
+ </a>';
327
+ }
328
+
329
+ $form .='</span>';
330
+ break;
331
+
332
  case 'miniOrange QR Code Authentication':
333
  $form .=' <span style="float:right">
334
  <a href='.$two_factor_methods_doc[$auth_method].' target="_blank">
helper/curl.php CHANGED
@@ -291,7 +291,6 @@ class MocURL
291
  curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
292
  curl_setopt($ch, CURLOPT_AUTOREFERER, true);
293
  curl_setopt( $ch, CURLOPT_SSL_VERIFYHOST, $sslhost );
294
-
295
  curl_setopt( $ch, CURLOPT_SSL_VERIFYPEER, $sslpeer );
296
  curl_setopt($ch, CURLOPT_MAXREDIRS, 10);
297
  if(!is_null($headers)) curl_setopt($ch, CURLOPT_HTTPHEADER, $headers);
291
  curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
292
  curl_setopt($ch, CURLOPT_AUTOREFERER, true);
293
  curl_setopt( $ch, CURLOPT_SSL_VERIFYHOST, $sslhost );
 
294
  curl_setopt( $ch, CURLOPT_SSL_VERIFYPEER, $sslpeer );
295
  curl_setopt($ch, CURLOPT_MAXREDIRS, 10);
296
  if(!is_null($headers)) curl_setopt($ch, CURLOPT_HTTPHEADER, $headers);
miniorange_2_factor_settings.php CHANGED
@@ -3,7 +3,7 @@
3
  * Plugin Name: miniOrange 2 Factor Authentication
4
  * Plugin URI: https://miniorange.com
5
  * Description: This TFA plugin provides various two-factor authentication methods as an additional layer of security after the default wordpress login. We Support Google/Authy/LastPass Authenticator, QR Code, Push Notification, Soft Token and Security Questions(KBA) for 3 User in the free version of the plugin.
6
- * Version: 5.4.39
7
  * Author: miniOrange
8
  * Author URI: https://miniorange.com
9
  * Text Domain: miniorange-2-factor-authentication
@@ -15,7 +15,7 @@
15
 
16
  define( 'MO_HOST_NAME', 'https://login.xecurify.com' );
17
 
18
- define( 'MO2F_VERSION', '5.4.39' );
19
  define('MO2F_PLUGIN_URL', (plugin_dir_url(__FILE__)));
20
  define( 'MO2F_TEST_MODE', false );
21
  define( 'MO2F_IS_ONPREM', get_option('is_onprem'));
@@ -553,13 +553,15 @@
553
  function mo_reset_2fa_for_users_by_admin(){
554
  $nonce = wp_create_nonce('ResetTwoFnonce');
555
  if(isset($_GET['action']) && $_GET['action']== 'reset_edit'){
556
- $user_id = $_GET['user'];
557
- $user_info = get_userdata($user_id);
558
- ?>
559
- <form method="post" name="reset2fa" id="reset2fa" action="<?php echo esc_url('users.php'); ?>">
560
-
561
- <div class="wrap">
562
- <h1>Reset 2nd Factor</h1>
 
 
563
 
564
  <p>You have specified this user for reset:</p>
565
 
@@ -573,6 +575,7 @@
573
  </div>
574
  </form>
575
  <?php
 
576
  }
577
  }
578
 
3
  * Plugin Name: miniOrange 2 Factor Authentication
4
  * Plugin URI: https://miniorange.com
5
  * Description: This TFA plugin provides various two-factor authentication methods as an additional layer of security after the default wordpress login. We Support Google/Authy/LastPass Authenticator, QR Code, Push Notification, Soft Token and Security Questions(KBA) for 3 User in the free version of the plugin.
6
+ * Version: 5.4.40
7
  * Author: miniOrange
8
  * Author URI: https://miniorange.com
9
  * Text Domain: miniorange-2-factor-authentication
15
 
16
  define( 'MO_HOST_NAME', 'https://login.xecurify.com' );
17
 
18
+ define( 'MO2F_VERSION', '5.4.40' );
19
  define('MO2F_PLUGIN_URL', (plugin_dir_url(__FILE__)));
20
  define( 'MO2F_TEST_MODE', false );
21
  define( 'MO2F_IS_ONPREM', get_option('is_onprem'));
553
  function mo_reset_2fa_for_users_by_admin(){
554
  $nonce = wp_create_nonce('ResetTwoFnonce');
555
  if(isset($_GET['action']) && $_GET['action']== 'reset_edit'){
556
+ $user_id = sanitize_text_field($_GET['user']);
557
+ if(is_numeric($user_id))
558
+ {
559
+ $user_info = get_userdata($user_id);
560
+ ?>
561
+ <form method="post" name="reset2fa" id="reset2fa" action="<?php echo esc_url('users.php'); ?>">
562
+
563
+ <div class="wrap">
564
+ <h1>Reset 2nd Factor</h1>
565
 
566
  <p>You have specified this user for reset:</p>
567
 
575
  </div>
576
  </form>
577
  <?php
578
+ }
579
  }
580
  }
581
 
readme.txt CHANGED
@@ -1,33 +1,33 @@
1
  === miniOrange's Google Authenticator - WordPress Two Factor Authentication (2FA , MFA, OTP SMS and Email) | Passwordless login ===
2
 
3
  Contributors: twofactor, twofactorauthentication, hsn97
4
- Tags: google authenticator, two factor authentication, 2FA, OTP , two factor, 2-factor authentication, multi factor authentication , MFA ,two-step verification, wp 2fa, two-factor, mobile verification, TFA, MFA, 2 factor authentication, Remember Device, WordPress otp, Clef,SMS, email, TFA, signup security, two factor auth, Mobile Authentication, strong authentication, 2 step authentication, passwordless login, one time passcode, soft token Authentication, QR Code Authentication, email verification, KBA, Security Questions, login OTP, login with SMS, mobile login, phone login, OTP login, knowledge based authentication, authy, authy two factor , yubico, security, user security, ​Twilio WordPress, SMS gateway, Solutions Infini, FIDO, FIDO2, FIDO 2, Webauthn, Usernameless login ,Clickatell, BulkSMS, MSG91, Nexmo, SMS Country, message, woocommerce, website security, login security, multi factor, wordfence, IP Blocking, IP Whitelisting, login Audits, woocommerce, SMS login, passwordless login, auth, Two step verification, login with OTP WordPress, OTP Over SMS and Email, two-step authentication, login without password, secure login, temporary login, temporary access, multi-factor authentication, woocommerce, smartphone, register with OTP, user OTP verification, SMS OTP, OTP Email, registration with OTP verification, registration verification, smartphone authentication, Login with fingerprint, faceID, touchID, session restriction, device restriction, password free authentication, Duo Authenticator, LastPass authenticator
5
  Donate link: https://miniorange.com/
6
  Requires at least: 3.0.1
7
  Tested up to: 5.8
8
  Requires PHP: 5.3.0
9
- Stable tag: 5.4.39
10
  License: GPLv2 or later
11
  License URI: http://www.gnu.org/licenses/gpl-2.0.html
12
 
13
- **Google Authenticator - multi factor authentication**, Two Factor Authentication (2 Factor) supports many Two step verification methods like OTP verificaion - SMS and Email , Apps like Microsoft authenticator, Duo Authenticator, LastPass Authenticator & more on login and Registration for all forms. Google Authenticator also Supports QR Code authentication, Push Notification and Security Questions along with the Google Authenticator itself.
14
 
15
  == Description ==
16
 
17
- **Google Authenticator - Two Factor (2FA)** - Two Factor Authentication plugin provides a completely Secure login to your WordPress website. Google Authenticator is a FREE, Simple & very easy to setup plugin for securing your website from unauthoriged logins. This plugin can be configured for any TOTP based Authentication Method like Google authenticator, Microsoft authenticator, etc. This plugin also supports OTP Over SMS, OTP Over EMail, Duo Authenticaor, OTP Over whatsapp, OTP Over telegram and many more authentication methods.
18
 
19
- You can checkout the following video to configure google authenticator and other two factor methods for your website:
20
 
21
  [youtube https://www.youtube.com/watch?v=BS6tY-Goa1Q]
22
 
23
 
24
- = User Identity Verification or multi factor authentication With google authenticator =
25
- Login and Registration: Verify users on login as well as at Registration with different authentication methods like OTP over SMS, OTP Over Email, Google Authenticator, SMS Verification, Email, Authy Authenticator, Duo Authenticator, Microsoft Authenticator, TOTP Based Authenticator, Security Questions and many others.
26
- Users will recieve an OTP at the time of regsitration/login which will be used to verify their identity.
27
 
28
 
29
- = Sync same 2-factor authentication for multiple websites with the same google authenticator OTP using multi factor authentication =
30
- You would not need to configure **Google Authenticator** and other Two Factor Authentication ( 2FA ) methods from second site onword. Just login with miniOrange account and your 2FA will automatically get set. This is available for Google Authenticator, Duo Authenticator, Microsoft Authenticator, Securty Questions, LastPass, Authy, miniOrange methods, OTP over SMS, OTP over Email. It is supported only if you are using our cloud services of 2 Factor.
31
 
32
  == Plugin Integrations and Support for all methods of two factor authentication ( 2fa ) like **Google Authenticator** ==
33
  * [Woocommerce](https://wordpress.org/plugins/woocommerce/)
@@ -57,7 +57,7 @@ You would not need to configure **Google Authenticator** and other Two Factor Au
57
  * And many more
58
 
59
  = Third Party Custom SMS Gateway for OTP Over SMS (two factor authentication / 2FA ) =
60
- Premium plugin supports any third party custom SMS Gateway. If you don't have your own SMS gateway you can use miniOrange gateway. Send SMS all over the world.
61
  * Some Famous Gateways Supported for two factor ( 2FA ):
62
  * Twilio : [Twilio](https://www.twilio.com/)
63
  * Clickatell : [Clickatell](https://www.clickatell.com/)
@@ -68,48 +68,49 @@ Premium plugin supports any third party custom SMS Gateway. If you don't have yo
68
 
69
  Others not listed gateway can be tested on our site, Test your Gateway: [Custom Gateway](https://login.xecurify.com/moas/login?redirectUrl=https://login.xecurify.com/moas/admin/customer/smsconfig)
70
 
71
- = [google authenticator - Two step verification] FREE Plugin Features =
72
- * Simplified & easy user interface to setup Google Authenticator and other Two Factor Authentication ( 2FA ) methods.
73
  * [Google Authenticator](https://plugins.miniorange.com/2-factor-authentication-for-wordpress) - Two Factor Authentication (2FA) for **3 User** forever FREE!
74
- * **Variety of Two Factor Authentication Methods:** Any App supporting TOTP algorithm like Google Authenticator, Authy Authenticator, LastPass Authenticator, Microsoft Authenticator, QR Code, Push Notification, Soft Token and Security Questions(KBA) are supported in the plugin for multi factor authentication.
75
  * Includes Language Translation Support. Supports a wide variety of languages for all methods of 2 factor like Google Authenticator
76
- * Passwordless login or login with phone number, supported for Google Authenticator and other 2 Factor authentication methods.
77
- * This plugin Supports standard TOTP + HOTP protocols for Authentication Methods. Any TOTP protocol based authenticator app can be configured using Google Authenticator option in the plugin for two factor authentication.
78
- * Two Factor Authentication (2FA) allows authentication on login page itself for Google Authenticator & miniOrange Soft Token.
79
  * Brute force attack prevention & IP Blocking along with two factor authentication.
80
- * User login Monitorning with and without two-factor authentication(2FA)
81
- * RCP Login and Registration Suppport with all login 2 factor methods like Google Authenticator, OTP Over SMS, QR code Authentication, login with Email for Login.
82
- * OTP Verification of Ulimate Member Registartion form with methods like OTP Over SMS and Email, QR code Authentication.
83
- * Recovery codes in case you are locked out for all Two Factor Authentication (TFA) methods like Google Authenticator, SMS verification.
 
84
  * Supports multi factor authentication for methods such as Google authenticator, OTP over Email, OTP over SMS, QR code authentication and many more.
85
- * Mobile verification - two step verification using user's mobile phone with authentication method like google authenticator, QR code authentication, etc.
86
 
87
 
88
  = google authenticator ( 2FA - two factor authentication ) Premium Lite Plugin Features =
89
 
90
  * Google Authenticator - Two Factor Authentication (2FA) for all users and all user roles *( Site-based pricing )*
91
  * **Available Two Factor Authentication Methods:** Google Authenticator, Authy Authenticator, Microsoft Authenticator, LastPass Authenticator, Security Questions(KBA), OTP Over Email, OTP Over SMS, Email Verification, Mobile Verification. *( SMS credits need to be purchased as per the need)*
92
- * Includes language Translation Support. Supports wide variety of languages for two factor auhthentication.
93
  * **Multiple Login Options:** Username + password + two-factor (or) Username + two-factor i.e. Passwordless login. [Guide](https://docs.miniorange.com/documentation/login-username-2nd-factor-2)
94
- * **Unlimitted Email transactions:** Unlimitted Email transactions with your SMTP server.
95
- * **Backup Method:** KBA(Security Questions) , OTP Over Email, Backup codes For all Two Factor Authentication ( TFA ) methods like Google Authenticator, etc.
96
  * Multisite compatible for all WordPress 2FA methods.
97
- * Two Factor Authentication ( TFA ) for Custom login forms like User Pro, login with ajax, Theme my login, etc with all authentication methods like Google Authenticator, mobile Verification with SMS, etc.
98
  * User role based redirection after Login [Guide](https://docs.miniorange.com/documentation/custom-redirect-login-url), Customize account name in Google Authenticator app [Guide](https://docs.miniorange.com/documentation/google-authenticator-app-name)
99
  * Custom Security Questions (KBA) [Guide](https://docs.miniorange.com/documentation/custom-security-questions)
100
  * Role based 2 Factor - Different 2 factor like Google Authenticator, OTP Over SMS and Email, Authy Authenticator, etc based on your role [Guide](https://docs.miniorange.com/documentation/specific-set-authentication-methods-based-role)*
101
  * Force Two factor for users [Guide](https://docs.miniorange.com/documentation/enforce-2fa-users)
102
  * Email notification to users asking them to set up Two Factor Authentication (2FA) [Guide](https://docs.miniorange.com/documentation/want-send-email-notification-users-setting-2-factor)
103
  * Set Privacy Policy for users [Guide](https://docs.miniorange.com/documentation/privacy-policy-site)
104
- * App Specific Password to login from mobile Apps
105
  * Remember Device for all methods like Google Authenticator, Mobile verification with SMS, etc [Guide](https://docs.miniorange.com/documentation/remember-my-device)
106
- * **Add-Ons Included:** RBA & Trusted Devices Management Add-on, Personalization Add-on and Short Codes Add-on
107
 
108
  = google authenticator ( 2FA - two factor authentication ) Premium Plugin Features =
109
 
110
- * Google Authenticator - Two Factor Authentication (2FA) for Users as per the upgrade *( User-based pricing )*
111
  * **Available Authentication Methods:** Google Authenticator, Authy Authenticator, Microsoft Authenticator, LastPass Authenticator, QR Code, Push Notification, Soft Token, Security Questions(KBA), OTP Over Email, OTP Over SMS, OTP Over SMS and Email, Email Verification, Hardware Token, Whatsapp based 2fa(Add-on), Telegram Based 2fa. *( SMS and Email credits need to be purchased as per the need)*
112
- * Language Translation Support for two factor auhthentication.
113
  * **Multiple Login Options:** Username + password + two-factor (or) Username + two-factor i.e. Passwordless login [Guide](https://docs.miniorange.com/documentation/login-username-2nd-factor-2)
114
  * **Backup Methods:** KBA(Security Questions), OTP Over Email, Backup Codes [Guide](https://docs.miniorange.com/documentation/want-configure-backup-methods-users-can-configure-case-locked-site-not-able-log)
115
  * Multisite compatible for all WordPress 2FA methods.
@@ -120,14 +121,14 @@ Others not listed gateway can be tested on our site, Test your Gateway: [Custom
120
  * Choose specific two factor authentication methods for Users [Guide](https://docs.miniorange.com/documentation/specific-set-authentication-methods-based-role)
121
  * Set Privacy Policy for users [Guide](https://docs.miniorange.com/documentation/privacy-policy-site)
122
  * App Specific Password to login from mobile Apps
123
- * Remember Device to skip the two factor authentication( 2FA ) for trusted devices [Guide](https://docs.miniorange.com/documentation/remember-my-device)
124
  * **Add-Ons Included:** RBA & Trusted Devices Management Add-on, Personalization Add-on and Short Codes Add-on
125
 
126
  = google authenticator ( 2FA ) Enterprise Plugin Features =
127
 
128
  * [Google Authenticator - Two Factor Authentication] (https://plugins.miniorange.com/2-factor-authentication-for-wordpress) - 2FA for Users as per the upgrade *( User-based pricing )*
129
  * **Available Authentication Methods:** Google Authenticator, Authy Authenticator, Microsoft Authenticator, LastPass Authenticator, QR Code, Push Notification, Soft Token, Security Questions(KBA), OTP Over Email, OTP Over SMS, OTP Over SMS and Email, Email Verification, Hardware Token. *( SMS and Email credits need to be purchased as per the need)*
130
- * Language Translation Support for two factor authenticaion.
131
  * **Multiple Login Options:** Username + password + two factor Authentication (or) Username + two factor authentication i.e. Passwordless login.
132
  * **Backup Methods:** KBA(Security Questions), OTP Over Email, Backup Codes
133
  * Multisite compatible for all WordPress 2FA methods.
@@ -137,12 +138,12 @@ Others not listed gateway can be tested on our site, Test your Gateway: [Custom
137
  * Choose specific two factor authentication methods for Users
138
  * App Specific Password to login from mobile Apps
139
  * **Add-Ons Included:** RBA & Trusted Devices Management Add-on, Personalization Add-on and Short Codes Add-on
140
- * **Brute force attack prevention, IP Blocking & User login Monitorning. **
141
  * File protection & strong password
142
- * Monitorning current two factor authentication (2 Factor) method of all the users in the plugin.
143
 
144
  == PASSWORDLESS LOGIN ( login without password ) for all two factor methods like google authenticator ==
145
- Passwordless login (Login without password) is a new way of login in which you and your users can login without entering the password. The login can be done by username and 2 factor or only username which can be decided based on the user role. If a role is not allowed for passwordless login they will login with password and username. miniOrange supports many two factor authentication methods for passwordless login. You can use google authenticator, webauthn, fingerprint login, otp over sms and email for login without password.
146
 
147
  = WebAuthn (FIDO2) Passwordless login ( Login without password by using FIDO 2 WebAuthn ) =
148
  WebAuthn is a browser-based API that allows for web applications to simplify and secure user authentication by using registered devices (phones, laptops, etc) as factors. It uses public key cryptography to protect users from advanced phishing attacks. It will allow you to provide your users an option for usernameless login. With the help of webauthn your users can login with fingerprint, FaceID, TouchID, etc.
@@ -152,19 +153,19 @@ Webauthn allows you to restrict the number of devices per user. You can allow a
152
 
153
 
154
  = Session restriction and Device restriction using two factor authentication =
155
- Two factor authentication plugin allows you to restrict the number of devices as well as number of active sessions for a particular user. Session restriction and device restriction allows you to stop account sharing with multiple device as well. Session restriction stops users to login or maintain multiple session in the same laptop also, but in case of device restriction you can control the number of devices a user can use for accessing the website. In this way both session restriction and device restriction can be helpful for controlling user access to an account.
156
 
157
- == Multi factor authentication ( MFA ) ==
158
- You can configure multiple WordPress 2FA methods like google authenticator, OTP over Email, OTP over SMS, etc and choose which method do you want to login to your website from a list of configured methods. Multi factor authentication is helpful for cases such as when you do not have your phone and cannot access your TOTP app for login. You can then use other method like OTP over Email to login.
159
 
160
 
161
  == login without password with webauthn and two step verification ( 2FA / MFA ) ==
162
- Google authenticato - two step verification along with webauthn allows you to login to your website without using username and password for login. You can login with your device's password or by using any other authentication method like google authenticator, OTP Over SMS, OTP Over Email, etc.
163
 
164
 
165
  == Prevent Account Sharing Between Users by two factor authentication ( 2FA / MFA ) ==
166
- Many video sharing and E-learning platforms want to prevent sharing of account between the users. This can be done using miniOrange Two factor plugin (TFA) with WordPress 2FA methods like QR code Authentication , Mobile Verification, etc. Also, e-learning portals can use this to their advantage. It can be used on any websites which create and sell courses. It can be integrated with plugins like Learndash.
167
- Other sites like premium video content or any premium content where you want users not to share passwords between friends and Family then you can go for this solution. Multiple two factor authentication methods are supported to achieve prevent account sharing.
168
 
169
  == [google authenticator - Two step verification] Customize two factor authentication ( Two step verification ) screen as per your website ==
170
  You can customize the 2fa screen as per your website's design.
@@ -178,7 +179,7 @@ You can customize the 2fa screen as per your website's design.
178
  * **Backup: Taking Encrypted Backup with local storage and cloud storage**
179
  * **Two Factor Authentication : 2FA and MFA**
180
  * **Limit Login Attempts to stop password guessing**
181
- * **Realtime Global IP Blocing**
182
  * **Limit Rate of Request : Protecting resources from any security hole exploit**
183
  * **Crawler Detection and blocking**
184
  * **Blocking IP and Attacks**
@@ -196,8 +197,8 @@ Check all the features other than two factor authentication ( Two step verificat
196
 
197
  = Why do you need to register for google authenticator? =
198
 
199
- google authentiactor uses miniOrange APIs to communicate between your WP and miniOrange. To keep this communication secure, we ask you to register and assign you API keys specific to your account. This way your account and users calls can be only accessed by API keys assigned to you.
200
- Adding to this, you can also use the same account on multiple applications and your users do not have to maintain multiple accounts or WordPress 2FA like Google Authenticator. Single code generated in Google Authenticator will be enough to login to all sites. With this you can also achieve sync of two factor authentication on multiple sites. This helps to provide a secure 2fa cloud solution,
201
 
202
 
203
  = Add Ons [Applicable for Free and Standard Plans, Inclusive in the Premium Plan] for two factor authentication ( 2FA ) =
@@ -207,19 +208,19 @@ Adding to this, you can also use the same account on multiple applications and y
207
  * Set Device Limit for the users to login
208
  * IP Restriction: Limit users to login from specific IPs
209
  * Personalization Add-on Features to customize your two factor authentication pages
210
- * Custom UI of Two Factor Authentication (2FA) popups
211
  * Custom Email and SMS Templates
212
  * Customize 'Powered by' Logo on two factor authentication page
213
  * Customize Plugin Icon
214
  * Customize Plugin Name
215
 
216
- * Short Codes Add-on Features for two factor authentication ( 2FA )
217
  * Option to turn on/off 2 factor (two factor authentication) by user
218
  * Option to configure the Google Authenticator and Security Questions by user
219
  * Option to 'Enable Remember Device' from a custom login form to skip 2 factor for trusted devices.
220
  * On-Demand ShortCodes for specific functionalities ( like for enabling WordPress 2FA (Two Factor authentication) for specific pages)
221
 
222
- = [google authenticator - Two step verification] Apps Supported by the two factor authentication ( 2FA ) plugin =
223
  * Google Authenticator
224
  * miniOrange Authenticator
225
  * Duo Authenticator
@@ -230,20 +231,20 @@ Adding to this, you can also use the same account on multiple applications and y
230
  * Duo Authenticator push notification
231
  * Authy push notification
232
 
233
- <h4>Useful blog posts about two factor authenticaion ( 2FA ) plugin </h4>
234
  *[Beginner’s Guide: How to Add Two Factor Authentication to WordPress](https://themeisle.com/blog/how-to-add-two-factor-authentication-to-wordpress/)
235
  *[How to Add WordPress Two Factor Authentication (2FA)](https://phppot.com/wordpress/how-to-add-wordpress-two-factor-authentication-2fa-using-google-authenticator-plugin/)
236
 
237
- Customized solutions and Active support is available. Email us at info@xecurify.com or call us at +1 9786589387.
238
 
239
- **Note: The plugin is GDPR Compliant and supports wide variety of Language Translation**
240
 
241
  == Installation ==
242
 
243
  = From your WordPress dashboard =
244
  1. Navigate to `Plugins > Add New` from your WP Admin dashboard.
245
- 2. Search for `miniOrange 2 Factor Authentication or google authenticator`.
246
- 3. Install `miniOrange 2 Factor Authentication` and Activate the plugin.
247
 
248
  = From WordPress.org =
249
  1. Search for `miniOrange 2 Factor Authentication` and download it.
@@ -252,7 +253,7 @@ Customized solutions and Active support is available. Email us at info@xecurify.
252
 
253
  = Once Activated [google authenticator - Two step verification]=
254
  1. Select miniOrange 2-Factor ( 2 factor authentication ) from the left menu and follow the instructions.
255
- 2. Once, you complete your setup. Click on Log Out button.
256
  3. Enter the username and password. After the initial validation, you will be prompted for the 2-factor method you had set up.
257
  4. Validate yourself with the 2-factor authentication method you configured.
258
 
@@ -267,10 +268,10 @@ Customized solutions and Active support is available. Email us at info@xecurify.
267
  You can obtain access to your website by one of the below options:
268
 
269
  1. If you have an additional administrator account whose Two Factor is not enabled yet, you can login with it.
270
- 2. If you had setup KBA questions earlier, you can use them as an alternate method to login to your website.
271
- 3. Rename the plugin from FTP - this disables the Two-Factor (2FA) plugin and you will be able to login with your Wordpress username and password.
272
 
273
- For detailed information, Please check on our website. <a href="https://faq.miniorange.com/knowledgebase/gain-access-to-website-if-locked-out/" target="_blank">Locked Out</a>.<br>
274
  You can also check our video Tutorial:
275
  <iframe width="560" height="315" src="https://www.youtube.com/embed/wLFKakQkpk8" frameborder="0" allow="accelerometer; autoplay; encrypted-media; gyroscope; picture-in-picture" allowfullscreen></iframe>
276
 
@@ -278,108 +279,108 @@ You can also check our video Tutorial:
278
 
279
  You can use google authenticator as the backup method for your specific user or all users in the premium version of the two factor authentication. [PREMIUM FEATURE]
280
 
281
- = I want to enable Two Factor Authentication (2FA) role wise ? =
282
 
283
- You can select the roles under Login Settings tab to enable the plugin role wise. [PREMIUM FEATURE]
284
 
285
- = I have enabled Two-Factor Authentication (2FA) for all users, what happens if an end user tries to login but has not yet registered ? =
286
 
287
- If a user has not setup Two-Factor yet, user has to register by inline registration that will be invoked during the login.
288
 
289
- = I want to enable only one authentication method for my users. What shloud I do? =
290
 
291
- You can select the two factor authentication methods under Login Settings tab. The selected authentication methods will be shown to the user during inline registration for example if you select Google Authenticator it will be shown on login. [PREMIUM FEATURE]
292
 
293
- = I am getting the fatal error of call to undefined function json_last_error(). What should I do? =
294
 
295
- Please check your php version. The plugin is supported in php version 5.3.0 or above. You need to upgrade your php version to 5.3.0 or above to use the plugin.
296
 
297
- = I did not recieve OTP while trying to register with miniOrange. What should I do? =
298
 
299
- The OTP is sent to your email address with which you have registered with miniOrange. If you can't see the email from miniOrange in your mails, please make sure to check your SPAM folder. If you don't see an email even in SPAM folder, please submit a query in our Support Section in the plugin or you can contact us at info@xecurify.com.
300
 
301
- = I want to configure 2nd factor by Google Authenticator. =
302
 
303
- Select the radio button next to Google Authenticator/Authy App and select the phone type and then scan the QR Code by Google Authenticator App. Enter the 6 digit code in the textbox and click on Save and verify buuton.
304
 
305
- = I want to configure 2nd factor by Authy 2-Factor Authentication App. =
306
 
307
- Select the radio button next to Google Authenticator/Authy App and select the phone type and then scan the QR Code by Authy 2-Factor Authentication App. Enter the 6 digit code from the Authy App into the textbox available and click on Save and Verifiy button.
308
 
309
  = I forgot the password of my miniOrange account. How can I reset it? =
310
 
311
  There are two cases according to the page you see -<br>
312
- 1. Login with miniOrange screen: You should click on forgot password link. You will get a new password on your email address with which you have registered with miniOrange . Now you can login with the new password.
313
 
314
- 2. Register with miniOrange screen: Enter your email ID and any random password in password and confirm password input box. This will redirect you to Login with miniOrange screen. Now follow first step.
315
 
316
- = I have a custom / front-end login page on my site and I want the look and feel to remain the same when I add 2 factor ? =
317
 
318
- If you have a custom login form other than wp-login.php then we will provide you the shortcode. Shortcode will work only for the customized login page created from wordpress plugins. We are not claiming that it will work with all the customized login page. In such case, custom work is needed to integrate two factor with your customized login page. You can submit a query in our <b>Support Section</b> in the plugin or you can contact us at info@xecurify.com for more details.
319
 
320
- = I have Woocommerce theme login page on my site. How can I enable Two Factor ? =
321
 
322
  If you have Woocommerce theme login then go to Advanced Options Tab and check Enable Two-Factor for Woocommerce Front End Login. If you need any help setting up 2-Factor for your Woocommerce theme login form, please submit a query in our Support Section in the plugin or you can contact us at info@xecurify.com.
323
 
324
- = I have installed plugins which limit the login attempts like Limit Login Attempt, Loginizer, Wordfence etc. Is there any incompatibilities with these kind of plugins? =
325
 
326
- The limit login attempt kind of plugins limit the number of login attempts and block the IP temporarily. So if you are using 2 factor along with these kind of plugins then you should increase the login attempts (minimum 5) so that you dont get locked out yourself.
327
 
328
  = If you are using any Security Plugin in WordPress like Simple Security Firewall, All in One WP Security Plugin and you are not able to login with Two-Factor. =
329
 
330
  Our Two-Factor plugin is compatible with most of the security plugins, but if it is not working for you. Please submit a query in our Support Section in the plugin or you can contact us at info@xecurify.com.
331
 
332
- = If you are using any render blocking javascript and css plugin like Async JS and CSS Plugin and you are not able to login with Two-Factor or your screen got blank. =
333
 
334
- If you are using Async JS and CSS Plugin. Please go to its settings and add jquery in the list of exceptions and save settings. It will work. If you are still not able to get it right, Please submit a query in our Support Section in the plugin or you can contact us at info@xecurify.com.
335
 
336
  = My users have different types of phones. What phones are supported? =
337
 
338
- We support all types of phones. Smart Phones, Basic Phones, Landlines, etc. Go to Setup Two-Factor Tab and select Two-Factor method of your choice from a range of 8 different options.
339
 
340
- = What if a user does not have a smart phone? =
341
 
342
- You can select OTP over SMS, Phone Call Verification or Email Verification as your Two-Factor method. All these methods are supported on basic phones.
343
 
344
- = What if a user does not have any phone? =
345
 
346
  You can select Email Verification or Security Questions (KBA) as your Two-Factor method.
347
 
348
- = What if I am trying to login from my phone ? =
349
 
350
  If your Security Questions (KBA) are configured then you will be asked to answer them when you are logging in from your phone.
351
 
352
- = I want to hide default login form and just want to show login with phone? =
353
 
354
  You should go to <b>Login Settings Tab</b> and check <b>Login with Phone Only</b> checkbox to hide the default login form.
355
 
356
- = I want to hide default login form and just want to Google Authenticator OTP field? =
357
 
358
  You should go to <b>Login Settings Tab</b>
359
 
360
- = My phone has no internet connectivity and configured 2nd factor with miniOrange App, how can I login? =
361
 
362
- You can login using our alternate login method. Please follow below steps to login:
363
 
364
  * Enter your username and click on login with your phone.
365
  * Click on <b>Phone is Offline?</b> button below QR Code.
366
  * You will see a textbox to enter one time passcode.
367
  * Open miniOrange Authenticator App and Go to Soft Token Tab.
368
- * Enter the one time passcode shown in miniOrange Authenticator App in textbox, just like Google authenticator.
369
- * Click on submit button to validate the otp.
370
  * Once you are authenticated, you will be logged in.
371
 
372
- = My phone is lost, stolen or discharged. How can I login? =
373
 
374
- You can login using our alternate login method. Click on the Forgot Phone link and you will get 2 alternate methods to login. Select "Send a one time passcode to my registered email" to authenticate by OTP over EMAIL or Select "Answer your Security Questions (KBA)" to authenticate by knowledge based authenticaion.
375
 
376
- = My phone has no internet connectivity and i am entering the one time passcode from miniOrange Authenticator App, it says Invalid OTP?
377
 
378
  Click on the <b>Settings Icon</b> on top right corner in <b>miniOrange Authenticator App</b> and then press <b>Sync button</b> under 'Time correction for codes' to sync your time with miniOrange Servers. If you still can't logged in then please email us at info@xecurify.com or <a href="https://miniorange.com/contact" target="_blank">Contact us</a>.Soft Token method is just like google authenticator method.
379
 
380
  = I want to go back to default login with password? =
381
 
382
- You should go to <b>Login Settings Tab</b> and uncheck <b>Enable Two-Factor plugin</b> checkbox. This will disable 2-Factor and you can login using wordpress default login.
383
 
384
  = I am upgrading my phone. =
385
 
@@ -387,7 +388,8 @@ You should go to <b>Setup Two Factor</b> Tab and click on <b>Reconfigure</b> to
387
 
388
  = What If I want to use any other second factor like OTP Over SMS, Security Questions, Device Id, etc ? =
389
 
390
- miniOrange authentication service has 15+ authentication methods.One time passcodes (OTP) over SMS, OTP over Email, OTP over SMS and Email, Out of Band SMS, Out of Band Email, Soft Token, Push Notification, USB based Hardware token (yubico), Security Questions, Mobile Authentication (QR Code Authentication), Voice Authentication (Biometrics), Phone Verification, Device Identification, Location, Time of Access User Behavior. To know more about authentication methods, please visit <a href="https://miniorange.com/strong_auth" target="_blank">https://miniorange.com/strong_auth </a>. If you want to have any other 2-factor for your WordPress site, please email us at info@xecurify.com or <a href="https://miniorange.com/contact" target="_blank">Contact us</a>.
 
391
 
392
  == Screenshots ==
393
 
@@ -402,7 +404,12 @@ miniOrange authentication service has 15+ authentication methods.One time passco
402
 
403
  == Changelog ==
404
 
405
- = 5.4.39=
 
 
 
 
 
406
  * Google Authenticator - Two factor Authentication (2FA, OTP) :
407
  * Added 2FA setup using user profile option
408
  * Support Form UI
@@ -410,15 +417,16 @@ miniOrange authentication service has 15+ authentication methods.One time passco
410
  * Minor bug fixes
411
 
412
  = 5.4.38 =
413
- * Minor bug fixes
414
-
415
- = 5.4.37 =
416
  * Google Authenticator - Two factor Authentication (2FA, OTP) :
417
  * Added 2FA setup using user profile option
418
  * Setup Wizard for configuring 2FA
419
  * 2FA Form support for login with ajax, Elementor Pro, UserPro login forms
420
  * Minor bug fixes
421
 
 
 
 
 
422
  = 5.4.36 =
423
  * Google Authenticator - Two Factor Authentication (2FA, OTP) :
424
  * Remove extra comma
@@ -435,7 +443,7 @@ miniOrange authentication service has 15+ authentication methods.One time passco
435
 
436
  = 5.4.33 =
437
  * Google Authenticator – Two Factor Authentication (2FA, TFA) :
438
- * New pricing page for two factor auhthentication
439
  * Added Duo Authenticator push notification method.
440
  * Woocommerce redirect issue fix.
441
 
@@ -491,7 +499,7 @@ miniOrange authentication service has 15+ authentication methods.One time passco
491
  * Email and SMS transaction sync
492
  * Feedback form on network deactivate
493
  * Enable/Disable 2FA fix
494
- * 2FA added for superadmin role
495
 
496
  = 5.4.22 =
497
  * Google Authenticator - Two Factor Authentication (2FA, TFA) :
@@ -514,11 +522,11 @@ miniOrange authentication service has 15+ authentication methods.One time passco
514
  * Google Authenticator - Two Factor Authentication (2FA, OTP) : Google Authenticator cloud fix.
515
 
516
  = 5.4.18 =
517
- * Google Authenticator - Two Factor Authentication (2FA, OTP) :
518
- *Added missing file
519
 
520
  = 5.4.17 =
521
- * Google Authenticator - Two Factor Authentication (2FA, OTP) :
522
  *Digimember Form Support
523
  *Memberpress Form Support
524
  *SMS Verification Support
@@ -530,11 +538,11 @@ miniOrange authentication service has 15+ authentication methods.One time passco
530
  = 5.4.15 =
531
  * Google Authenticator - Two Factor Authentication (2FA, OTP) :
532
  * Theme My Login plugin Support
533
- * Ultimate Memember Registration Support
534
  * Woocommerce Registration Support
535
- * Ultimate Memember Redirect
536
  * Restrict Content Pro Login and Registration
537
-
538
  = 5.4.14 =
539
  * Google Authenticator - Two Factor Authentication (2FA, OTP) : Performance improvement with fixes in Security Questions. And User Email verification and Phone Verification issues resolved.
540
 
@@ -571,7 +579,7 @@ miniOrange authentication service has 15+ authentication methods.One time passco
571
  * Google Authenticator - Two Factor Authentication (2FA) : Headers sent issue is security firewall.
572
 
573
  = 5.4.0 =
574
- * Google Authenticator - Two Factor Authentication (2FA) : Two Factor FAQ Fix and OTP code convinence.
575
 
576
  = 5.3.26 =
577
  * Google Authenticator - Two Factor Authentication (2FA) : Two Factor On-premise FAQ update.
@@ -580,7 +588,7 @@ miniOrange authentication service has 15+ authentication methods.One time passco
580
  * Google Authenticator - Two Factor Authentication (2FA) : Two Factor On-premise support form.
581
 
582
  = 5.3.24 =
583
- * Google Authenticator - Two Factor Authentication (2FA) : On-premise two factor released with multiple users support for some authentication methods.
584
 
585
  = 5.3.23 =
586
  * Google Authenticator - Two Factor Authentication (2FA) : Scanner : Timing and caching issue fix.
@@ -600,7 +608,7 @@ miniOrange authentication service has 15+ authentication methods.One time passco
600
  * Google Authenticator - Two Factor Authentication (2FA) : Security : Giving users choice of two factor.
601
 
602
  = 5.3.18 =
603
- * Google Authenticator - Two Factor Authentication (2FA) : Anti-Virus and Firewall : Fix Scan.
604
 
605
  = 5.3.17 =
606
  * Google Authenticator - Two Factor Authentication (2FA) : Anti-Virus : Improved Stop Scan.
@@ -624,12 +632,11 @@ miniOrange authentication service has 15+ authentication methods.One time passco
624
  * Google Authenticator - Two Factor Authentication (2FA) : Security : Limiting Firewall, Malware, backup and login security for users not needing it.
625
 
626
  = 5.3.10 =
627
- * Google Authenticator - Two Factor Authentication (2FA) : Security : Moved to Old WAF version minor issues.
628
 
629
  = 5.3.9 =
630
  * Google Authenticator - Two Factor Authentication (2FA) : Security : Web application Firewall Sql Injections report and monitoring.
631
 
632
-
633
  = 5.3.8 =
634
  * Google Authenticator - Two Factor Authentication (2FA) : Security : Malware Scanner Fix.
635
 
@@ -661,10 +668,10 @@ miniOrange authentication service has 15+ authentication methods.One time passco
661
  * Google Authenticator - Two Factor Authentication (2FA) : Fixed conflict and filter issues.
662
 
663
  = 5.2.5 =
664
- * Google Authenticator - Two Factor Authentication (2FA) : Some warnings in remote post.
665
 
666
  = 5.2.4 =
667
- * Google Authenticator - Two Factor Authentication (2FA) : Removed curl calls and unncessary files.
668
 
669
  = 5.2.3 =
670
  * Google Authenticator - Two Factor Authentication (2FA) : Fix for some users facing issues in api calls.
@@ -688,7 +695,7 @@ miniOrange authentication service has 15+ authentication methods.One time passco
688
  * Google Authenticator - Two Factor Authentication (2FA) : Minor Bug fix.
689
 
690
  = 5.1.19 =
691
- * Google Authenticator - Two Factor Authentication (2FA) : Adding basic Security Features Monitorning, IP blocking and login transaction report.
692
 
693
  = 5.1.18 =
694
  * Google Authenticator - Two Factor Authentication (2FA) : Object access error for lower PHP versions.
@@ -742,7 +749,7 @@ miniOrange authentication service has 15+ authentication methods.One time passco
742
  * Google Authenticator - Two Factor Authentication (2FA) : Minor changes.
743
 
744
  = 5.1.0 =
745
- * Google Authenticator - Two Factor Authentication (2FA) : Added new user plans.
746
 
747
  = 5.0.17 =
748
  * Google Authenticator - Two Factor Authentication (2FA) : Minor Bug fix.
@@ -754,7 +761,7 @@ miniOrange authentication service has 15+ authentication methods.One time passco
754
  * Google Authenticator - Two Factor Authentication (2FA) : Added Google Authenticator option in the WP login page itself.
755
 
756
  = 5.0.14 =
757
- * Google Authenticator - Two Factor Authentication (2FA) : Bug Fixs.
758
 
759
  = 5.0.13 =
760
  * Google Authenticator - Two Factor Authentication (2FA) : Bug Fix and code optimization.
@@ -796,7 +803,7 @@ miniOrange authentication service has 15+ authentication methods.One time passco
796
  * Google Authenticator - Two Factor Authentication (2FA) : Bug fix.
797
 
798
  = 5.0.0 =
799
- * Google Authenticator - Two Factor Authentication (2FA) : New UI Interface, 2 factor authentication for Unlimited Users.
800
  * This is a major release.
801
 
802
  = 4.6.2 =
@@ -809,19 +816,19 @@ miniOrange authentication service has 15+ authentication methods.One time passco
809
  * Google Authenticator - Two Factor Authentication (2FA) : Bug fixes for customers who were getting redirected to the login page after the two factor authentication.
810
 
811
  = 4.5.8 =
812
- * Google Authenticator - Two Factor Authentication (2FA) : Tested upto 4.9.4 and Removed External links.
813
 
814
  = 4.5.7 =
815
  * Google Authenticator - Two Factor Authentication (2FA) : Minor bug fixes.
816
 
817
  = 4.5.6 =
818
- * Google Authenticator - Two Factor Authentication (2FA) : Tested upto Wordpress 4.9.
819
 
820
  = 4.5.5 =
821
  * Google Authenticator - Two Factor Authentication (2FA) : 404 bug fixes.
822
 
823
  = 4.5.4 =
824
- * Google Authenticator - Two Factor Authentication (2FA) : Better UI of Login Pages, Fixed Redirection issue. Fixed the error in the last version (4.5.3) for the customers who were getting undefined action error.
825
 
826
  = 4.5.3 =
827
  * Google Authenticator - Two Factor Authentication (2FA) : Changed UI of the Login Pages, Redirect to Login Page bug fixes.
@@ -847,7 +854,6 @@ miniOrange authentication service has 15+ authentication methods.One time passco
847
  = 4.4.6 =
848
  * Google Authenticator - Two Factor Authentication (2FA) : Instructions for login in case user get locked out.
849
 
850
-
851
  = 4.4.5 =
852
  * Google Authenticator - Two Factor Authentication (2FA) : Fixed the issue of session variable on the login with username page.
853
 
@@ -859,9 +865,13 @@ miniOrange authentication service has 15+ authentication methods.One time passco
859
 
860
  = 4.4 =
861
  * Google Authenticator - Two Factor Authentication (2FA):
 
862
  * Compatibility with Limit Login Attempts.
863
  * New User Interface for login.
864
 
 
 
 
865
  = 4.3.1 =
866
  * Google Authenticator - Two Factor Authentication (2FA, MFA): Compatible upto 4.7
867
 
@@ -869,10 +879,10 @@ miniOrange authentication service has 15+ authentication methods.One time passco
869
  * Google Authenticator - Two Factor Authentication (2FA, MFA): Updated miniOrange APIs.
870
 
871
  = 4.2.9 =
872
- * Google Authenticator - Two Factor Authentication (2FA, MFA): Tested upto WordPress 4.6.
873
 
874
  = 4.2.7 =
875
- * Google Authenticator - Two Factor Authentication (2FA, MFA): Session Warnig fix in the last version for some of the users.
876
 
877
  = 4.2.6 =
878
  * Google Authenticator - Two Factor Authentication (2FA, MFA): Compatible with wordpress caching.
@@ -901,21 +911,21 @@ miniOrange authentication service has 15+ authentication methods.One time passco
901
 
902
  = 4.1.8 =
903
  * Google Authenticator - Two Factor Authentication ( 2FA ):
904
- * Changed the location of images used for demo. Now being loaded from the site having SSL certificate.
905
 
906
  = 4.1.7 =
907
  * Google Authenticator - Two Factor Authentication ( 2FA ):
908
  * Improved Error Handling for Remember Device.
909
 
910
  = 4.1.6 =
911
- * Google Authenticator - Two Factor Authentication ( 2FA ):
912
  * Licensing Plan Updated.
913
 
914
  = 4.1.5 =
915
  * Google Authenticator - Two Factor Authentication ( 2FA ):
916
  * Added Forgot Password functionality for miniOrange customer admin.
917
  * Added warning message for the users who are using lower version of php.
918
- * Added functionlity to change the customer email.
919
 
920
  = 4.1.4 =
921
  * Google Authenticator - Two Factor Authentication ( 2FA ):
@@ -926,7 +936,7 @@ miniOrange authentication service has 15+ authentication methods.One time passco
926
  * Fixed CSS Conflict with the plugins in the admin dashboard.
927
  * More intuitive UI for woocommerce login.
928
  * Tested front-end login with themes like wordpress default theme,
929
- customizr theme,zerif-lite theme,accesspress store theme,ishop theme and many more.
930
 
931
  = 4.1.2 =
932
  * Google Authenticator - Two Factor Authentication ( 2FA ): Google Authenticator for Windows phone
@@ -941,6 +951,8 @@ miniOrange authentication service has 15+ authentication methods.One time passco
941
  Custom login redirection
942
  Authy 2-Factor Authentication as separate authentication method
943
 
 
 
944
  = 4.0.5 = Google Authenticator - Two Factor Authentication ( 2 Factor) : Login into third party apps which support XML-RPC.
945
 
946
  = 4.0.4 = Google Authenticator - Two Factor Authentication ( 2 Factor) : Added a check of KBA configuration from mobile login.
@@ -953,7 +965,7 @@ miniOrange authentication service has 15+ authentication methods.One time passco
953
 
954
  = 4.0 =
955
  * Google Authenticator - Two Factor Authentication ( 2FA ): Features added.
956
- * KBA as backup method.
957
  * mobile browser support.
958
  * more intuitive UI for woocommerce login.
959
 
@@ -1041,40 +1053,63 @@ More descriptive setup messages and UI changes.
1041
  * Google Authenticator - Two Factor Authentication ( 2FA ): Added email ID verification during registration.
1042
 
1043
  = 1.0.0 =
1044
- * First version of Google Authenticator - Two Factor Authentication ( 2FA ) plugin supported with mobile auhthentication for admin only.
1045
 
1046
  == Upgrade Notice ==
1047
 
1048
- = 5.4.39=
 
 
 
 
 
1049
  * Google Authenticator - Two factor Authentication (2FA, OTP) :
1050
  * Added 2FA setup using user profile option
1051
  * Support Form UI
1052
  * 2FA Form support for login with ajax, Elementor Pro, UserPro login forms
1053
  * Minor bug fixes
1054
 
1055
- = 5.4.38=
1056
  * Google Authenticator - Two factor Authentication (2FA, OTP) :
1057
  * Added 2FA setup using user profile option
1058
  * Setup Wizard for configuring 2FA
1059
  * 2FA Form support for login with ajax, Elementor Pro, UserPro login forms
1060
  * Minor bug fixes
1061
 
1062
- = 5.4.33=
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
1063
  * Google Authenticator – Two Factor Authentication (2FA, TFA) :
1064
- * New pricing page for two factor auhthentication
1065
  * Added Duo Authenticator push notification method.
1066
  * Woocommerce redirect issue fix.
1067
 
1068
- = 5.4.32=
1069
  * Google Authenticator – Two Factor Authentication (2FA, TFA) :
1070
  * Replaced sessions with transient.
1071
 
1072
- = 5.4.31=
1073
  * Google Authenticator - Two Factor Authentication (2FA, OTP) :
1074
  * OTP over Email as two factor fix
1075
  * Low Email transaction alert fix
1076
 
1077
- = 5.4.30=
1078
  * Google Authenticator - Two Factor Authentication (2FA, OTP) :
1079
  * Feedback changes
1080
 
@@ -1117,7 +1152,7 @@ More descriptive setup messages and UI changes.
1117
  * Email and SMS transaction sync
1118
  * Feedback form on network deactivate
1119
  * Enable/Disable 2FA fix
1120
- * 2FA added for superadmin role
1121
 
1122
  = 5.4.22 =
1123
  * Google Authenticator - Two Factor Authentication (2FA, OTP) :
@@ -1156,9 +1191,9 @@ More descriptive setup messages and UI changes.
1156
  = 5.4.15 =
1157
  * Google Authenticator - Two Factor Authentication (2FA, OTP) :
1158
  * Theme My Login plugin Support
1159
- * Ultimate Memember Registration Support
1160
  * Woocommerce Registration Support
1161
- * Ultimate Memember Redirect
1162
  * Restrict Content Pro Login and Registration
1163
 
1164
  = 5.4.14 =
@@ -1183,19 +1218,22 @@ More descriptive setup messages and UI changes.
1183
  * Google Authenticator - Two Factor Authentication (2FA) : Improving Google Authenticator and adding Payment options.
1184
 
1185
  = 5.4.5 =
1186
- * Google Authenticator - Two Factor Authentication (2FA) : Security and MFA UI updates.
1187
 
1188
  = 5.4.4 =
1189
- * Google Authenticator - Two Factor Authentication (2FA) : Two Factor : Woocommerce login page integration.
1190
 
1191
  = 5.4.3 =
1192
- * Google Authenticator - Two Factor Authentication (2FA) : Session issue fix for customers using Two Factor.
1193
 
1194
  = 5.4.2 =
1195
- * Google Authenticator - Two Factor Authentication (2FA) : Warning for cloud customer moving to on-premise Two factor
 
 
 
1196
 
1197
  = 5.4.0 =
1198
- * Google Authenticator - Two Factor Authentication (2FA) : Two Factor FAQ Fix and OTP code convinence.
1199
 
1200
  = 5.3.26 =
1201
  * Google Authenticator - Two Factor Authentication (2FA) : Two Factor On-premise FAQ update.
@@ -1224,7 +1262,7 @@ More descriptive setup messages and UI changes.
1224
  * Google Authenticator - Two Factor Authentication (2FA) : Security : Giving users choice of two factor.
1225
 
1226
  = 5.3.18 =
1227
- * Google Authenticator - Two Factor Authentication (2FA) : Anti-Virus and Firewall : Fix Scan.
1228
 
1229
  = 5.3.17 =
1230
  * Google Authenticator - Two Factor Authentication (2FA) : Anti-Virus : Improved Stop Scan.
@@ -1253,7 +1291,6 @@ More descriptive setup messages and UI changes.
1253
  = 5.3.9 =
1254
  * Google Authenticator - Two Factor Authentication (2FA) : Security : Web application Firewall Sql Injections report and monitoring.
1255
 
1256
-
1257
  = 5.3.8 =
1258
  * Google Authenticator - Two Factor Authentication (2FA) : Security : Malware Scanner Fix.
1259
 
@@ -1285,10 +1322,10 @@ More descriptive setup messages and UI changes.
1285
  * Google Authenticator - Two Factor Authentication (2FA) : Fixed conflict and filter issues.
1286
 
1287
  = 5.2.5 =
1288
- * Google Authenticator - Two Factor Authentication (2FA) : Some warnings in remote post.
1289
 
1290
  = 5.2.4 =
1291
- * Google Authenticator - Two Factor Authentication (2FA) : Removed curl calls and unncessary files.
1292
 
1293
  = 5.2.3 =
1294
  * Google Authenticator - Two Factor Authentication (2FA) : Fix for some users facing issues in api calls.
@@ -1312,7 +1349,7 @@ More descriptive setup messages and UI changes.
1312
  * Google Authenticator - Two Factor Authentication (2FA) : Minor Bug fix.
1313
 
1314
  = 5.1.19 =
1315
- * Google Authenticator - Two Factor Authentication (2FA) : Adding basic Security Features Monitorning, IP blocking and login transaction report.
1316
 
1317
  = 5.1.18 =
1318
  * Google Authenticator - Two Factor Authentication (2FA) : Object access error for lower PHP versions.
@@ -1378,7 +1415,7 @@ More descriptive setup messages and UI changes.
1378
  * Google Authenticator - Two Factor Authentication (2FA) : Added Google Authenticator option in the WP login page itself.
1379
 
1380
  = 5.0.14 =
1381
- * Google Authenticator - Two Factor Authentication (2FA) : Bug Fixs.
1382
 
1383
  = 5.0.13 =
1384
  * Google Authenticator - Two Factor Authentication (2FA) : Bug Fix and code optimization.
@@ -1433,26 +1470,56 @@ More descriptive setup messages and UI changes.
1433
  * Google Authenticator - Two Factor Authentication (2FA) : Bug fixes for customers who were getting redirected to the login page after the two factor authentication.
1434
 
1435
  = 4.5.8 =
1436
- * Google Authenticator - Two Factor Authentication (2FA) : Tested upto 4.9.4 and Removed External links.
1437
 
1438
  = 4.5.7 =
1439
  * Google Authenticator - Two Factor Authentication (2FA) : Minor bug fixes.
1440
 
1441
  = 4.5.6 =
1442
- * Google Authenticator - Two Factor Authentication (2FA) : Tested upto Wordpress 4.9.
1443
 
1444
  = 4.5.5 =
1445
  * Google Authenticator - Two Factor Authentication (2FA) : 404 bug fixes.
1446
 
1447
  = 4.5.4 =
1448
- * Google Authenticator - Two Factor Authentication (2FA) : Better UI of Login Pages, Fixed Redirection issue. Fixed the error in the last version (4.5.3) for the customers who were getting undefined action error.
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
1449
 
1450
  = 4.4.3 =
1451
  * Google Authenticator - Two Factor Authentication (2FA) : Fixed the login flow for third party Apps that supports XML-RPC.
1452
 
1453
  = 4.4 =
1454
  * Google Authenticator - Two Factor Authentication (2FA):
1455
- * Note: This is very important update having altogether new UI and compatibility with Limit Login Attempts. After updating, please do not logout from your admin dashboard. Try to login from another browser and if you face any issue , please contact us at info@xecurify.com
1456
  * Compatibility with Limit Login Attempts.
1457
  * New User Interface for login.
1458
 
@@ -1466,10 +1533,10 @@ More descriptive setup messages and UI changes.
1466
  * Google Authenticator - Two Factor Authentication (2FA, MFA): Updated miniOrange APIs.
1467
 
1468
  = 4.2.9 =
1469
- * Google Authenticator - Two Factor Authentication (2FA, MFA): Tested upto WordPress 4.6.
1470
 
1471
  = 4.2.7 =
1472
- * Google Authenticator - Two Factor Authentication (2FA, MFA): Session Warnig fix in the last version for some of the users.
1473
 
1474
  = 4.2.6 =
1475
  * Google Authenticator - Two Factor Authentication (2FA, MFA): Compatible with wordpress caching.
@@ -1498,7 +1565,7 @@ More descriptive setup messages and UI changes.
1498
 
1499
  = 4.1.8 =
1500
  * Google Authenticator - Two Factor Authentication ( 2FA ):
1501
- * Changed the location of images used for demo. Now being loaded from the site having SSL certificate.
1502
 
1503
  = 4.1.7 =
1504
  * Google Authenticator - Two Factor Authentication ( 2FA ):
@@ -1523,7 +1590,7 @@ More descriptive setup messages and UI changes.
1523
  * Fixed CSS Conflict with the plugins in the admin dashboard.
1524
  * More intuitive UI for woocommerce login.
1525
  * Tested front-end login with themes like wordpress default theme,
1526
- customizr theme,zerif-lite theme,accesspress store theme,ishop theme and many more.
1527
 
1528
  = 4.1.2 =
1529
  * Google Authenticator - Two Factor Authentication ( 2FA ): Google Authenticator for Windows phone
@@ -1640,4 +1707,4 @@ More descriptive setup messages and UI changes.
1640
  * Google Authenticator - Two Factor Authentication ( 2FA ): Added email ID verification during registration.
1641
 
1642
  = 1.0.0 =
1643
- First version of Two Factor Authentication ( 2FA ) plugin.
1
  === miniOrange's Google Authenticator - WordPress Two Factor Authentication (2FA , MFA, OTP SMS and Email) | Passwordless login ===
2
 
3
  Contributors: twofactor, twofactorauthentication, hsn97
4
+ Tags: google authenticator, two factor authentication, 2FA, OTP , two factor, 2-factor authentication, multi factor authentication , MFA ,two-step verification, wp 2fa, TFA, two-factor, mobile verification, TFA, MFA, 2 factor authentication, Remember Device, WordPress otp, Clef,SMS, email, TFA, signup security, two factor auth, Mobile Authentication, strong authentication, 2 step authentication, passwordless login, one time passcode, soft token Authentication, QR Code Authentication, email verification, KBA, Security Questions, login OTP, login with SMS, mobile login, phone login, OTP login, Knowledge based authentication, Authy, Authy two factor , Yubico, security, user security, ​Twilio WordPress, SMS gateway, Solutions Infini, FIDO, FIDO2, FIDO 2, Webauthn, Usernameless login ,Clickatell, BulkSMS, MSG91, Nexmo, SMS Country, message, woocommerce, website security, login security, multi factor, wordfence, IP Blocking, IP Whitelisting, login Audits, woocommerce, SMS login, passwordless login, auth, Two step verification, login with OTP WordPress, OTP Over SMS and Email, two-step authentication, login without password, secure login, temporary login, temporary access, multi-factor authentication, woocommerce, smartphone, register with OTP, user OTP verification, SMS OTP, OTP Email, registration with OTP verification, registration verification, smartphone authentication, Login with fingerprint, faceID, touchID, session restriction, device restriction, password free authentication, Duo Authenticator, LastPass authenticator
5
  Donate link: https://miniorange.com/
6
  Requires at least: 3.0.1
7
  Tested up to: 5.8
8
  Requires PHP: 5.3.0
9
+ Stable tag: 5.4.40
10
  License: GPLv2 or later
11
  License URI: http://www.gnu.org/licenses/gpl-2.0.html
12
 
13
+ **Google Authenticator - multi factor authentication**Two Factor Authentication (2 Factor/2FA) supports many Two step verification methods like OTP verification - SMS and Email , Apps like Microsoft authenticator, Duo Authenticator, LastPass Authenticator & more on login and Registration for all forms. Google Authenticator also Supports QR Code authentication, Push Notification and Security Questions along with the Google Authenticator itself.
14
 
15
  == Description ==
16
 
17
+ **Google Authenticator - Two Factor (2FA)** - Two Factor Authentication plugin provides a completely Secure login to your WordPress website. Google Authenticator is a FREE, Simple & very easy to setup plugin for securing your website from unauthorized logins. This plugin can be configured for any TOTP-based authentication method like Google Authenticator, Microsoft Authenticator, etc. This plugin also supports OTP Over SMS, OTP Over Email, Duo Authenticator, OTP Over WhatsApp, OTP Over Telegram, and many more authentication methods.
18
 
19
+ You can check out the following video to configure google authenticator and other two factor methods for your website:
20
 
21
  [youtube https://www.youtube.com/watch?v=BS6tY-Goa1Q]
22
 
23
 
24
+ = User Identity Verification or multi-factor authentication With google authenticator =
25
+ Login and Registration: Verify users on login as well as at Registration with different authentication methods like OTP over SMS, OTP Over Email, Google Authenticator, SMS Verification, Email, Authy Authenticator, Duo Authenticator, Microsoft Authenticator, TOTP Based Authenticator, Security Questions, and many others.
26
+ Users will receive an OTP at the time of registration/log in which will be used to verify their identity. OTP can be received either via Email or via OTP.
27
 
28
 
29
+ = Sync same 2-factor authentication for multiple websites with the same google authenticator OTP using multi-factor authentication =
30
+ You would not need to configure **Google Authenticator** and other Two Factor Authentication ( 2FA ) methods from the second site onward. You just need to log in with a miniOrange account and your 2FA will automatically get set. This is available for Google Authenticator, Duo Authenticator, Microsoft Authenticator, Security Questions, LastPass Authenticator, Authy Authenticator, miniOrange methods, OTP Over SMS, OTP Over Email. It is supported only if you are using our cloud services of 2 Factor.
31
 
32
  == Plugin Integrations and Support for all methods of two factor authentication ( 2fa ) like **Google Authenticator** ==
33
  * [Woocommerce](https://wordpress.org/plugins/woocommerce/)
57
  * And many more
58
 
59
  = Third Party Custom SMS Gateway for OTP Over SMS (two factor authentication / 2FA ) =
60
+ The premium plugin supports any third-party custom SMS Gateway. If you don't have your SMS gateway you can use miniOrange gateway. Send SMS all over the world.
61
  * Some Famous Gateways Supported for two factor ( 2FA ):
62
  * Twilio : [Twilio](https://www.twilio.com/)
63
  * Clickatell : [Clickatell](https://www.clickatell.com/)
68
 
69
  Others not listed gateway can be tested on our site, Test your Gateway: [Custom Gateway](https://login.xecurify.com/moas/login?redirectUrl=https://login.xecurify.com/moas/admin/customer/smsconfig)
70
 
71
+ = [google authenticator - Two step verification/ 2 Factor Authentication/ 2FA] FREE Plugin Features =
72
+ * Simplified & easy user interface to set up Google Authenticator and other Two-Factor Authentication ( 2FA ) methods.
73
  * [Google Authenticator](https://plugins.miniorange.com/2-factor-authentication-for-wordpress) - Two Factor Authentication (2FA) for **3 User** forever FREE!
74
+ * **Variety of Two Factor Authentication Methods:** Any App supporting TOTP algorithms like Google Authenticator, Authy Authenticator, LastPass Authenticator, Microsoft Authenticator, QR Code, Push Notification, Soft Token and Security Questions(KBA) are supported in the plugin for multi factor authentication.
75
  * Includes Language Translation Support. Supports a wide variety of languages for all methods of 2 factor like Google Authenticator
76
+ * Passwordless login or login with phone number, support for Google Authenticator and other 2 Factor authentication methods.
77
+ * This plugin Supports standard TOTP + HOTP protocols for Authentication Methods. Any TOTP protocol based authenticator app can be configured using the Google Authenticator option in the plugin for two factor authentication.
78
+ * Two Factor Authentication (2FA) allows authentication on the login page itself for Google Authenticator & miniOrange Soft Token.
79
  * Brute force attack prevention & IP Blocking along with two factor authentication.
80
+ * **Multiple Login Options:** Username + password + two-factor (or) Username + two-factor i.e. Passwordless login. [Guide](https://docs.miniorange.com/documentation/login-username-2nd-factor-2)
81
+ * User login Monitoring with and without two-factor authentication(2FA)
82
+ * RCP Login and Registration Support with all login 2 factor methods like Google Authenticator, OTP Over SMS, QR code Authentication, login with Email for Login.
83
+ * OTP Verification of Ultimate Member Registration form with methods like OTP Over SMS and Email, QR code Authentication.
84
+ * Recovery codes in case you are locked out for all Two Factor Authentication (2FA/TFA) methods like Google Authenticator, SMS verification.
85
  * Supports multi factor authentication for methods such as Google authenticator, OTP over Email, OTP over SMS, QR code authentication and many more.
86
+ * Mobile verification - two step verification (2FA) using a user's mobile phone with authentication method like google authenticator, QR code authentication, etc.
87
 
88
 
89
  = google authenticator ( 2FA - two factor authentication ) Premium Lite Plugin Features =
90
 
91
  * Google Authenticator - Two Factor Authentication (2FA) for all users and all user roles *( Site-based pricing )*
92
  * **Available Two Factor Authentication Methods:** Google Authenticator, Authy Authenticator, Microsoft Authenticator, LastPass Authenticator, Security Questions(KBA), OTP Over Email, OTP Over SMS, Email Verification, Mobile Verification. *( SMS credits need to be purchased as per the need)*
93
+ * Includes language Translation Support. Supports a wide variety of languages for two factor authentication.
94
  * **Multiple Login Options:** Username + password + two-factor (or) Username + two-factor i.e. Passwordless login. [Guide](https://docs.miniorange.com/documentation/login-username-2nd-factor-2)
95
+ * **Unlimited Email transactions:** Unlimited Email transactions with your SMTP server.
96
+ * **Backup Method:** KBA(Security Questions), OTP Over Email, Backup codes For all Two Factor Authentication ( TFA ) methods like Google Authenticator, etc.
97
  * Multisite compatible for all WordPress 2FA methods.
98
+ * Two Factor Authentication ( TFA/2FA ) for Custom login forms like User Pro, login with ajax, Theme my login, etc with all authentication methods like Google Authenticator, mobile Verification with SMS, etc.
99
  * User role based redirection after Login [Guide](https://docs.miniorange.com/documentation/custom-redirect-login-url), Customize account name in Google Authenticator app [Guide](https://docs.miniorange.com/documentation/google-authenticator-app-name)
100
  * Custom Security Questions (KBA) [Guide](https://docs.miniorange.com/documentation/custom-security-questions)
101
  * Role based 2 Factor - Different 2 factor like Google Authenticator, OTP Over SMS and Email, Authy Authenticator, etc based on your role [Guide](https://docs.miniorange.com/documentation/specific-set-authentication-methods-based-role)*
102
  * Force Two factor for users [Guide](https://docs.miniorange.com/documentation/enforce-2fa-users)
103
  * Email notification to users asking them to set up Two Factor Authentication (2FA) [Guide](https://docs.miniorange.com/documentation/want-send-email-notification-users-setting-2-factor)
104
  * Set Privacy Policy for users [Guide](https://docs.miniorange.com/documentation/privacy-policy-site)
105
+ * App-Specific Password to login from mobile Apps
106
  * Remember Device for all methods like Google Authenticator, Mobile verification with SMS, etc [Guide](https://docs.miniorange.com/documentation/remember-my-device)
107
+ * **Add-Ons Included:** RBA & Trusted Devices Management Add-on, Personalization Add-on, and Short Codes Add-on
108
 
109
  = google authenticator ( 2FA - two factor authentication ) Premium Plugin Features =
110
 
111
+ * Google Authenticator - Two Factor Authentication (2FA / MFA) for Users as per the upgrade *( User-based pricing )*
112
  * **Available Authentication Methods:** Google Authenticator, Authy Authenticator, Microsoft Authenticator, LastPass Authenticator, QR Code, Push Notification, Soft Token, Security Questions(KBA), OTP Over Email, OTP Over SMS, OTP Over SMS and Email, Email Verification, Hardware Token, Whatsapp based 2fa(Add-on), Telegram Based 2fa. *( SMS and Email credits need to be purchased as per the need)*
113
+ * Language Translation Support for two factor authentication.
114
  * **Multiple Login Options:** Username + password + two-factor (or) Username + two-factor i.e. Passwordless login [Guide](https://docs.miniorange.com/documentation/login-username-2nd-factor-2)
115
  * **Backup Methods:** KBA(Security Questions), OTP Over Email, Backup Codes [Guide](https://docs.miniorange.com/documentation/want-configure-backup-methods-users-can-configure-case-locked-site-not-able-log)
116
  * Multisite compatible for all WordPress 2FA methods.
121
  * Choose specific two factor authentication methods for Users [Guide](https://docs.miniorange.com/documentation/specific-set-authentication-methods-based-role)
122
  * Set Privacy Policy for users [Guide](https://docs.miniorange.com/documentation/privacy-policy-site)
123
  * App Specific Password to login from mobile Apps
124
+ * Remember Device to skip the two factor authentication( 2FA/MFA ) for trusted devices [Guide](https://docs.miniorange.com/documentation/remember-my-device)
125
  * **Add-Ons Included:** RBA & Trusted Devices Management Add-on, Personalization Add-on and Short Codes Add-on
126
 
127
  = google authenticator ( 2FA ) Enterprise Plugin Features =
128
 
129
  * [Google Authenticator - Two Factor Authentication] (https://plugins.miniorange.com/2-factor-authentication-for-wordpress) - 2FA for Users as per the upgrade *( User-based pricing )*
130
  * **Available Authentication Methods:** Google Authenticator, Authy Authenticator, Microsoft Authenticator, LastPass Authenticator, QR Code, Push Notification, Soft Token, Security Questions(KBA), OTP Over Email, OTP Over SMS, OTP Over SMS and Email, Email Verification, Hardware Token. *( SMS and Email credits need to be purchased as per the need)*
131
+ * Language Translation Support for two factor authentication.
132
  * **Multiple Login Options:** Username + password + two factor Authentication (or) Username + two factor authentication i.e. Passwordless login.
133
  * **Backup Methods:** KBA(Security Questions), OTP Over Email, Backup Codes
134
  * Multisite compatible for all WordPress 2FA methods.
138
  * Choose specific two factor authentication methods for Users
139
  * App Specific Password to login from mobile Apps
140
  * **Add-Ons Included:** RBA & Trusted Devices Management Add-on, Personalization Add-on and Short Codes Add-on
141
+ * **Brute force attack prevention, IP Blocking & User login Monitoring. **
142
  * File protection & strong password
143
+ * Monitoring current Google Authenticator and other two factor authentication (2 Factor) method of all the users in the plugin.
144
 
145
  == PASSWORDLESS LOGIN ( login without password ) for all two factor methods like google authenticator ==
146
+ Passwordless login (Login without password) is a new way of login in which you and your users can login without entering the password. The login can be done by username and 2 factor or only username which can be decided based on the user role. If a role is not allowed for passwordless login they will login with password and username. miniOrange supports many two factor authentication methods for passwordless login. You can use google authenticator, webauthn, fingerprint login, OTP over SMS, and email for login without a password.
147
 
148
  = WebAuthn (FIDO2) Passwordless login ( Login without password by using FIDO 2 WebAuthn ) =
149
  WebAuthn is a browser-based API that allows for web applications to simplify and secure user authentication by using registered devices (phones, laptops, etc) as factors. It uses public key cryptography to protect users from advanced phishing attacks. It will allow you to provide your users an option for usernameless login. With the help of webauthn your users can login with fingerprint, FaceID, TouchID, etc.
153
 
154
 
155
  = Session restriction and Device restriction using two factor authentication =
156
+ Two factor authentication plugin allows you to restrict the number of devices as well as number of active sessions for a particular user. Session restriction and device restriction allows you to stop account sharing with multiple devices as well. Session restriction stops users from logging in or maintaining multiple sessions on the same laptop also, but in case of device restriction you can control the number of devices a user can use for accessing the website. In this way both session restriction and device restriction can help control user access to an account.
157
 
158
+ == Multi factor authentication ( 2FA / MFA ) ==
159
+ You can configure multiple WordPress 2FA methods like google authenticator, OTP over Email, OTP over SMS, etc and choose which method you want to login to your website from a list of configured methods. Multi factor authentication is helpful for cases such as when you do not have your phone and cannot access your TOTP app for login. You can then use other methods like OTP over Email to login.
160
 
161
 
162
  == login without password with webauthn and two step verification ( 2FA / MFA ) ==
163
+ Google authenticator - two step verification along with webauthn allows you to login to your website without using username and password for login. You can login with your device's password or by using any other authentication method like google authenticator, OTP Over SMS, OTP Over Email, etc.
164
 
165
 
166
  == Prevent Account Sharing Between Users by two factor authentication ( 2FA / MFA ) ==
167
+ Many video sharing and E-learning platforms want to prevent sharing of accounts between the users. This can be done using miniOrange Two factor plugin (TFA) with WordPress 2FA methods like QR code Authentication , Mobile Verification, etc. Also, e-learning portals can use this to their advantage. It can be used on any websites which create and sell courses. It can be integrated with plugins like Learndash.
168
+ Other sites like premium video content or any premium content where you want users not to share passwords between friends and Family then you can go for this solution. Multiple two factor authentication methods are supported to prevent account sharing.
169
 
170
  == [google authenticator - Two step verification] Customize two factor authentication ( Two step verification ) screen as per your website ==
171
  You can customize the 2fa screen as per your website's design.
179
  * **Backup: Taking Encrypted Backup with local storage and cloud storage**
180
  * **Two Factor Authentication : 2FA and MFA**
181
  * **Limit Login Attempts to stop password guessing**
182
+ * **Realtime Global IP Blocking**
183
  * **Limit Rate of Request : Protecting resources from any security hole exploit**
184
  * **Crawler Detection and blocking**
185
  * **Blocking IP and Attacks**
197
 
198
  = Why do you need to register for google authenticator? =
199
 
200
+ Google authenticator uses miniOrange APIs to communicate between your WP and miniOrange. To keep this communication secure, we ask you to register and assign API keys specific to your account. This way your account and users' calls can be only accessed by API keys assigned to you.
201
+ Adding to this, you can also use the same account on multiple applications and your users do not have to maintain multiple accounts or WordPress 2FA like Google Authenticator. Single code generated in Google Authenticator will be enough to log in to all sites. With this, you can also achieve sync of two factor authentication on multiple sites. This helps to provide a secure 2fa cloud solution,
202
 
203
 
204
  = Add Ons [Applicable for Free and Standard Plans, Inclusive in the Premium Plan] for two factor authentication ( 2FA ) =
208
  * Set Device Limit for the users to login
209
  * IP Restriction: Limit users to login from specific IPs
210
  * Personalization Add-on Features to customize your two factor authentication pages
211
+ * Custom UI of Two Factor Authentication (2FA) pop-ups
212
  * Custom Email and SMS Templates
213
  * Customize 'Powered by' Logo on two factor authentication page
214
  * Customize Plugin Icon
215
  * Customize Plugin Name
216
 
217
+ * Short Codes Add-on Features for two factor authentication ( 2FA/MFA )
218
  * Option to turn on/off 2 factor (two factor authentication) by user
219
  * Option to configure the Google Authenticator and Security Questions by user
220
  * Option to 'Enable Remember Device' from a custom login form to skip 2 factor for trusted devices.
221
  * On-Demand ShortCodes for specific functionalities ( like for enabling WordPress 2FA (Two Factor authentication) for specific pages)
222
 
223
+ = [google authenticator - Two step verification] Apps Supported by the two factor authentication ( 2FA/MFA ) plugin =
224
  * Google Authenticator
225
  * miniOrange Authenticator
226
  * Duo Authenticator
231
  * Duo Authenticator push notification
232
  * Authy push notification
233
 
234
+ <h4>Useful blog posts about two factor authentication ( 2FA/MFA ) plugin </h4>
235
  *[Beginner’s Guide: How to Add Two Factor Authentication to WordPress](https://themeisle.com/blog/how-to-add-two-factor-authentication-to-wordpress/)
236
  *[How to Add WordPress Two Factor Authentication (2FA)](https://phppot.com/wordpress/how-to-add-wordpress-two-factor-authentication-2fa-using-google-authenticator-plugin/)
237
 
238
+ Customized solutions and Active support are available. Email us at info@xecurify.com or call us at +1 9786589387.
239
 
240
+ **Note: The plugin is GDPR Compliant and supports a wide variety of Language Translation**
241
 
242
  == Installation ==
243
 
244
  = From your WordPress dashboard =
245
  1. Navigate to `Plugins > Add New` from your WP Admin dashboard.
246
+ 2. Search for `miniOrange 2 Factor Authentication`or `Google Authenticator.`
247
+ 3. Install `miniOrange 2 Factor Authentication` and activate the plugin.
248
 
249
  = From WordPress.org =
250
  1. Search for `miniOrange 2 Factor Authentication` and download it.
253
 
254
  = Once Activated [google authenticator - Two step verification]=
255
  1. Select miniOrange 2-Factor ( 2 factor authentication ) from the left menu and follow the instructions.
256
+ 2. Once, you complete your setup. Click on the Log Out button.
257
  3. Enter the username and password. After the initial validation, you will be prompted for the 2-factor method you had set up.
258
  4. Validate yourself with the 2-factor authentication method you configured.
259
 
268
  You can obtain access to your website by one of the below options:
269
 
270
  1. If you have an additional administrator account whose Two Factor is not enabled yet, you can login with it.
271
+ 2. If you had set up KBA questions earlier, you can use them as an alternate method to login to your website.
272
+ 3. Rename the plugin from FTP - this disables the Two-Factor (2FA) plugin and you will be able to login with your WordPress username and password.
273
 
274
+ For detailed information, Please check on our website. <a href="https://faq.miniorange.com/knowledgebase/how-to-gain-access-to-my-website-if-i-get-locked-out/" target="_blank">Locked Out</a>.<br>
275
  You can also check our video Tutorial:
276
  <iframe width="560" height="315" src="https://www.youtube.com/embed/wLFKakQkpk8" frameborder="0" allow="accelerometer; autoplay; encrypted-media; gyroscope; picture-in-picture" allowfullscreen></iframe>
277
 
279
 
280
  You can use google authenticator as the backup method for your specific user or all users in the premium version of the two factor authentication. [PREMIUM FEATURE]
281
 
282
+ = I want to enable Two Factor Authentication (2FA) role-wise? =
283
 
284
+ You can select the roles under the Login Settings tab to enable the plugin role-wise. [PREMIUM FEATURE]
285
 
286
+ = I have enabled Two-Factor Authentication (2FA) for all users, what happens if an end-user tries to login but has not yet registered? =
287
 
288
+ If a user has not set up Two-Factor yet, the user has to register by inline registration that will be invoked during the login.
289
 
290
+ = I want to enable only one authentication method for my users. What should I do? =
291
 
292
+ You can select the two factor authentication methods under the Login Settings tab. The selected authentication methods will be shown to the user during inline registration for example if you select Google Authenticator it will be shown on login. [PREMIUM FEATURE]
293
 
294
+ = I am getting the fatal error of a call to undefined function json_last_error(). What should I do? =
295
 
296
+ Please check your PHP version. The plugin is supported in PHP version 5.3.0 or above. You need to upgrade your PHP version to 5.3.0 or above to use the plugin.
297
 
298
+ = I did not receive OTP while trying to register with miniOrange. What should I do? =
299
 
300
+ The OTP is sent to the email address with which you have registered with miniOrange. If you can't see the email from miniOrange in your emails, please make sure to check your SPAM folder. If you don't see an email even in the SPAM folder, please submit a query in our Support Section in the plugin or you can contact us at info@xecurify.com.
301
 
302
+ = I want to configure the 2nd factor by Google Authenticator. =
303
 
304
+ Select the radio button next to Google Authenticator/Authy App and select the phone type and then scan the QR Code by Google Authenticator App. Enter the 6 digit code in the textbox and click on Save and verify button.
305
 
306
+ = I want to configure the 2nd factor by the Authy 2-Factor Authentication App. =
307
 
308
+ Select the radio button next to Google Authenticator/Authy App and select the phone type and then scan the QR Code by Authy 2-Factor Authentication App. Enter the 6 digit code from the Authy App into the textbox available and click on Save and Verify button.
309
 
310
  = I forgot the password of my miniOrange account. How can I reset it? =
311
 
312
  There are two cases according to the page you see -<br>
313
+ 1. Login with miniOrange screen: You should click on the forgot password link. You will get a new password on your email address with which you have registered with miniOrange. Now you can login with the new password.
314
 
315
+ 2. Register with miniOrange screen: Enter your email ID and any random password in the password and confirm the password input box. This will redirect you to log in with a miniOrange screen. Now follow the first step.
316
 
317
+ = I have a custom/front-end login page on my site and I want the look and feel to remain the same when I add 2 factor ? =
318
 
319
+ If you have a custom login form other than wp-login.php then we will provide you the shortcode. Shortcode will work only for the customized login page created from WordPress plugins. We are not claiming that it will work with all the customized login pages. In such a case, custom work is needed to integrate two factor with your customized login page. You can submit a query in our <b>Support Section</b> in the plugin or you can contact us at info@xecurify.com for more details.
320
 
321
+ = I have a Woocommerce theme login page on my site. How can I enable Two Factor? =
322
 
323
  If you have Woocommerce theme login then go to Advanced Options Tab and check Enable Two-Factor for Woocommerce Front End Login. If you need any help setting up 2-Factor for your Woocommerce theme login form, please submit a query in our Support Section in the plugin or you can contact us at info@xecurify.com.
324
 
325
+ = I have installed plugins that limit the login attempts like Limit Login Attempt, Loginizer, Wordfence, etc. Are there any incompatibilities with these kinds of plugins? =
326
 
327
+ The limit login attempt kind of plugins limit the number of login attempts and block the IP temporarily. So if you are using 2 factor along with these kinds of plugins then you should increase the login attempts (minimum 5) so that you don't get locked out yourself.
328
 
329
  = If you are using any Security Plugin in WordPress like Simple Security Firewall, All in One WP Security Plugin and you are not able to login with Two-Factor. =
330
 
331
  Our Two-Factor plugin is compatible with most of the security plugins, but if it is not working for you. Please submit a query in our Support Section in the plugin or you can contact us at info@xecurify.com.
332
 
333
+ = If you are using any render-blocking javascript and CSS plugin like Async JS and CSS Plugin and you are not able to login with Two-Factor or your screen got blank. =
334
 
335
+ If you are using Async JS and CSS Plugin. Please go to its settings and add jquery to the list of exceptions and save settings. It will work. If you are still not able to get it right, Please submit a query in our Support Section in the plugin or you can contact us at info@xecurify.com.
336
 
337
  = My users have different types of phones. What phones are supported? =
338
 
339
+ We support all types of phones. Smart Phones, Basic Phones, Landlines, etc. Go to Setup Two-Factor Tab and select the Two-Factor method of your choice from a range of 8 different options.
340
 
341
+ = What if a user does not have a smartphone? =
342
 
343
+ You can select OTP over SMS, Phone Call Verification, or Email Verification as your Two-Factor method. All these methods are supported on basic phones.
344
 
345
+ = What if a user does not have a phone? =
346
 
347
  You can select Email Verification or Security Questions (KBA) as your Two-Factor method.
348
 
349
+ = What if I am trying to login from my phone? =
350
 
351
  If your Security Questions (KBA) are configured then you will be asked to answer them when you are logging in from your phone.
352
 
353
+ = I want to hide the default login form and just want to show login with my phone? =
354
 
355
  You should go to <b>Login Settings Tab</b> and check <b>Login with Phone Only</b> checkbox to hide the default login form.
356
 
357
+ = I want to hide the default login form and just want to Google Authenticator OTP field? =
358
 
359
  You should go to <b>Login Settings Tab</b>
360
 
361
+ = My phone has no internet connectivity and is configured 2nd factor with miniOrange App, how can I log in? =
362
 
363
+ You can login using our alternate login method. Please follow the below steps to login:
364
 
365
  * Enter your username and click on login with your phone.
366
  * Click on <b>Phone is Offline?</b> button below QR Code.
367
  * You will see a textbox to enter one time passcode.
368
  * Open miniOrange Authenticator App and Go to Soft Token Tab.
369
+ * Enter the one time passcode shown in miniOrange Authenticator App in the textbox, just like Google authenticator.
370
+ * Click on submit button to validate the OTP.
371
  * Once you are authenticated, you will be logged in.
372
 
373
+ = My phone is lost, stolen, or discharged. How can I login? =
374
 
375
+ You can login using our alternate login method. Click on the Forgot Phone link and you will get 2 alternate methods to login. Select "Send a one time passcode to my registered email" to authenticate by OTP Over Email or Select "Answer your Security Questions (KBA)" to authenticate by knowledge-based authentication.
376
 
377
+ = My phone has no internet connectivity and I am entering the one time passcode from miniOrange Authenticator App, it says Invalid OTP?
378
 
379
  Click on the <b>Settings Icon</b> on top right corner in <b>miniOrange Authenticator App</b> and then press <b>Sync button</b> under 'Time correction for codes' to sync your time with miniOrange Servers. If you still can't logged in then please email us at info@xecurify.com or <a href="https://miniorange.com/contact" target="_blank">Contact us</a>.Soft Token method is just like google authenticator method.
380
 
381
  = I want to go back to default login with password? =
382
 
383
+ You should go to <b>Login Settings Tab</b> and uncheck <b>Enable Two-Factor plugin</b> checkbox. This will disable 2-Factor and you can login using WordPress default login.
384
 
385
  = I am upgrading my phone. =
386
 
388
 
389
  = What If I want to use any other second factor like OTP Over SMS, Security Questions, Device Id, etc ? =
390
 
391
+ miniOrange authentication service has 15+ authentication methods. One time passcodes (OTP) over SMS, OTP over Email, OTP over SMS and Email, Out of Band SMS, Out of Band Email, Soft Token, Push Notification, USB based Hardware token (Yubico), Security Questions, Mobile Authentication (QR Code Authentication), Voice Authentication (Biometrics), Phone Verification, Device Identification, Location, Time of Access User Behavior. To know more about authentication methods, please visit <a href="https://miniorange.com/strong_auth" target="_blank">https://miniorange.com/strong_auth </a>. If you want to have any other 2-factor for your WordPress site, please email us at info@xecurify.com or <a href="https://miniorange.com/contact" target="_blank">Contact us</a>.
392
+
393
 
394
  == Screenshots ==
395
 
404
 
405
  == Changelog ==
406
 
407
+ = 5.4.40 =
408
+ * Google Authenticator - Two factor Authentication (2FA, OTP) :
409
+ * XSS Vulnerability fix
410
+ * Added video link for miniOrange Authenticator
411
+
412
+ = 5.4.39 =
413
  * Google Authenticator - Two factor Authentication (2FA, OTP) :
414
  * Added 2FA setup using user profile option
415
  * Support Form UI
417
  * Minor bug fixes
418
 
419
  = 5.4.38 =
 
 
 
420
  * Google Authenticator - Two factor Authentication (2FA, OTP) :
421
  * Added 2FA setup using user profile option
422
  * Setup Wizard for configuring 2FA
423
  * 2FA Form support for login with ajax, Elementor Pro, UserPro login forms
424
  * Minor bug fixes
425
 
426
+ = 5.4.37 =
427
+ * Google Authenticator - Two factor Authentication (2FA, OTP) :
428
+ * Minor bug fixes
429
+
430
  = 5.4.36 =
431
  * Google Authenticator - Two Factor Authentication (2FA, OTP) :
432
  * Remove extra comma
443
 
444
  = 5.4.33 =
445
  * Google Authenticator – Two Factor Authentication (2FA, TFA) :
446
+ * New pricing page for two factor authentication
447
  * Added Duo Authenticator push notification method.
448
  * Woocommerce redirect issue fix.
449
 
499
  * Email and SMS transaction sync
500
  * Feedback form on network deactivate
501
  * Enable/Disable 2FA fix
502
+ * 2FA added for super admin role
503
 
504
  = 5.4.22 =
505
  * Google Authenticator - Two Factor Authentication (2FA, TFA) :
522
  * Google Authenticator - Two Factor Authentication (2FA, OTP) : Google Authenticator cloud fix.
523
 
524
  = 5.4.18 =
525
+ * Google Authenticator - Two Factor Authentication (2FA, OTP) :
526
+ * Added missing file
527
 
528
  = 5.4.17 =
529
+ * Google Authenticator - Two Factor Authentication (2FA, OTP) :
530
  *Digimember Form Support
531
  *Memberpress Form Support
532
  *SMS Verification Support
538
  = 5.4.15 =
539
  * Google Authenticator - Two Factor Authentication (2FA, OTP) :
540
  * Theme My Login plugin Support
541
+ * Ultimate Member Registration Support
542
  * Woocommerce Registration Support
543
+ * Ultimate Member Redirect
544
  * Restrict Content Pro Login and Registration
545
+
546
  = 5.4.14 =
547
  * Google Authenticator - Two Factor Authentication (2FA, OTP) : Performance improvement with fixes in Security Questions. And User Email verification and Phone Verification issues resolved.
548
 
579
  * Google Authenticator - Two Factor Authentication (2FA) : Headers sent issue is security firewall.
580
 
581
  = 5.4.0 =
582
+ * Google Authenticator - Two Factor Authentication (2FA) : Two Factor FAQ Fix and OTP code convenience.
583
 
584
  = 5.3.26 =
585
  * Google Authenticator - Two Factor Authentication (2FA) : Two Factor On-premise FAQ update.
588
  * Google Authenticator - Two Factor Authentication (2FA) : Two Factor On-premise support form.
589
 
590
  = 5.3.24 =
591
+ * Google Authenticator - Two Factor Authentication (2FA) : On-premise two factor released with multiple user support for some authentication methods.
592
 
593
  = 5.3.23 =
594
  * Google Authenticator - Two Factor Authentication (2FA) : Scanner : Timing and caching issue fix.
608
  * Google Authenticator - Two Factor Authentication (2FA) : Security : Giving users choice of two factor.
609
 
610
  = 5.3.18 =
611
+ * Google Authenticator - Two Factor Authentication (2FA) : Antivirus and Firewall : Fix Scan.
612
 
613
  = 5.3.17 =
614
  * Google Authenticator - Two Factor Authentication (2FA) : Anti-Virus : Improved Stop Scan.
632
  * Google Authenticator - Two Factor Authentication (2FA) : Security : Limiting Firewall, Malware, backup and login security for users not needing it.
633
 
634
  = 5.3.10 =
635
+ * Google Authenticator - Two Factor Authentication (2FA) : Security : Moved to Old WAF version minor issues..
636
 
637
  = 5.3.9 =
638
  * Google Authenticator - Two Factor Authentication (2FA) : Security : Web application Firewall Sql Injections report and monitoring.
639
 
 
640
  = 5.3.8 =
641
  * Google Authenticator - Two Factor Authentication (2FA) : Security : Malware Scanner Fix.
642
 
668
  * Google Authenticator - Two Factor Authentication (2FA) : Fixed conflict and filter issues.
669
 
670
  = 5.2.5 =
671
+ * Google Authenticator - Two Factor Authentication (2FA) : Some warnings in remote posts.
672
 
673
  = 5.2.4 =
674
+ * Google Authenticator - Two Factor Authentication (2FA) : Removed curl calls and unnecessary files.
675
 
676
  = 5.2.3 =
677
  * Google Authenticator - Two Factor Authentication (2FA) : Fix for some users facing issues in api calls.
695
  * Google Authenticator - Two Factor Authentication (2FA) : Minor Bug fix.
696
 
697
  = 5.1.19 =
698
+ * Google Authenticator - Two Factor Authentication (2FA) : Adding basic Security Features Monitoring, IP blocking and login transaction report.
699
 
700
  = 5.1.18 =
701
  * Google Authenticator - Two Factor Authentication (2FA) : Object access error for lower PHP versions.
749
  * Google Authenticator - Two Factor Authentication (2FA) : Minor changes.
750
 
751
  = 5.1.0 =
752
+ * Google Authenticator - Two Factor Authentication (2FA) : Added new user plans
753
 
754
  = 5.0.17 =
755
  * Google Authenticator - Two Factor Authentication (2FA) : Minor Bug fix.
761
  * Google Authenticator - Two Factor Authentication (2FA) : Added Google Authenticator option in the WP login page itself.
762
 
763
  = 5.0.14 =
764
+ * Google Authenticator - Two Factor Authentication (2FA) : Bug Fixes.
765
 
766
  = 5.0.13 =
767
  * Google Authenticator - Two Factor Authentication (2FA) : Bug Fix and code optimization.
803
  * Google Authenticator - Two Factor Authentication (2FA) : Bug fix.
804
 
805
  = 5.0.0 =
806
+ * Google Authenticator - Two Factor Authentication (2FA) : New UI Interface, 2-factor authentication for Unlimited Users.
807
  * This is a major release.
808
 
809
  = 4.6.2 =
816
  * Google Authenticator - Two Factor Authentication (2FA) : Bug fixes for customers who were getting redirected to the login page after the two factor authentication.
817
 
818
  = 4.5.8 =
819
+ * Google Authenticator - Two Factor Authentication (2FA) : Tested up to 4.9.4 and Removed External links.
820
 
821
  = 4.5.7 =
822
  * Google Authenticator - Two Factor Authentication (2FA) : Minor bug fixes.
823
 
824
  = 4.5.6 =
825
+ * Google Authenticator - Two Factor Authentication (2FA) : Tested up to Wordpress 4.9.
826
 
827
  = 4.5.5 =
828
  * Google Authenticator - Two Factor Authentication (2FA) : 404 bug fixes.
829
 
830
  = 4.5.4 =
831
+ * Google Authenticator - Two Factor Authentication (2FA) : Better UI of Login Pages, Fixed Redirection issue. Fixed the error in the last version (4.5.3) for the customers who were getting undefined action errors.
832
 
833
  = 4.5.3 =
834
  * Google Authenticator - Two Factor Authentication (2FA) : Changed UI of the Login Pages, Redirect to Login Page bug fixes.
854
  = 4.4.6 =
855
  * Google Authenticator - Two Factor Authentication (2FA) : Instructions for login in case user get locked out.
856
 
 
857
  = 4.4.5 =
858
  * Google Authenticator - Two Factor Authentication (2FA) : Fixed the issue of session variable on the login with username page.
859
 
865
 
866
  = 4.4 =
867
  * Google Authenticator - Two Factor Authentication (2FA):
868
+ * Note: This is a very important update having altogether a new UI and compatibility with Limit Login Attempts. After updating, please do not logout from your admin dashboard. Try to login from another browser and if you face any issue , please contact us at info@xecurify.com
869
  * Compatibility with Limit Login Attempts.
870
  * New User Interface for login.
871
 
872
+ = 4.3.2 =
873
+ * Google Authenticator - Two Factor Authentication (2FA, MFA): Revised licensing cost for users.
874
+
875
  = 4.3.1 =
876
  * Google Authenticator - Two Factor Authentication (2FA, MFA): Compatible upto 4.7
877
 
879
  * Google Authenticator - Two Factor Authentication (2FA, MFA): Updated miniOrange APIs.
880
 
881
  = 4.2.9 =
882
+ * Google Authenticator - Two Factor Authentication (2FA, MFA): Tested up to WordPress 4.6.
883
 
884
  = 4.2.7 =
885
+ * Google Authenticator - Two Factor Authentication (2FA, MFA): Session Warning fix in the last version for some of the users.
886
 
887
  = 4.2.6 =
888
  * Google Authenticator - Two Factor Authentication (2FA, MFA): Compatible with wordpress caching.
911
 
912
  = 4.1.8 =
913
  * Google Authenticator - Two Factor Authentication ( 2FA ):
914
+ * Changed the location of images used for the demo. Now being loaded from the site having SSL certificate.
915
 
916
  = 4.1.7 =
917
  * Google Authenticator - Two Factor Authentication ( 2FA ):
918
  * Improved Error Handling for Remember Device.
919
 
920
  = 4.1.6 =
921
+ * Google Authenticator - Two Factor Authentication ( 2 Factor ):
922
  * Licensing Plan Updated.
923
 
924
  = 4.1.5 =
925
  * Google Authenticator - Two Factor Authentication ( 2FA ):
926
  * Added Forgot Password functionality for miniOrange customer admin.
927
  * Added warning message for the users who are using lower version of php.
928
+ * Added functionality to change the customer email.
929
 
930
  = 4.1.4 =
931
  * Google Authenticator - Two Factor Authentication ( 2FA ):
936
  * Fixed CSS Conflict with the plugins in the admin dashboard.
937
  * More intuitive UI for woocommerce login.
938
  * Tested front-end login with themes like wordpress default theme,
939
+ customize theme,zerif-lite theme,accesspress store theme,ishop theme and many more.
940
 
941
  = 4.1.2 =
942
  * Google Authenticator - Two Factor Authentication ( 2FA ): Google Authenticator for Windows phone
951
  Custom login redirection
952
  Authy 2-Factor Authentication as separate authentication method
953
 
954
+ = 4.0.6 = Google Authenticator - Two Factor Authentication ( 2 Factor) : Two Factor Authentication Added multisite support and custom redirection after login feature.
955
+
956
  = 4.0.5 = Google Authenticator - Two Factor Authentication ( 2 Factor) : Login into third party apps which support XML-RPC.
957
 
958
  = 4.0.4 = Google Authenticator - Two Factor Authentication ( 2 Factor) : Added a check of KBA configuration from mobile login.
965
 
966
  = 4.0 =
967
  * Google Authenticator - Two Factor Authentication ( 2FA ): Features added.
968
+ * KBA as a backup method.
969
  * mobile browser support.
970
  * more intuitive UI for woocommerce login.
971
 
1053
  * Google Authenticator - Two Factor Authentication ( 2FA ): Added email ID verification during registration.
1054
 
1055
  = 1.0.0 =
1056
+ * First version of Google Authenticator - Two Factor Authentication ( 2FA ) plugin supported with mobile authentication for admins only.
1057
 
1058
  == Upgrade Notice ==
1059
 
1060
+ = 5.4.40 =
1061
+ * Google Authenticator - Two factor Authentication (2FA, OTP) :
1062
+ * XSS Vulnerability fix
1063
+ * Added video link for miniOrange Authenticator
1064
+
1065
+ = 5.4.39 =
1066
  * Google Authenticator - Two factor Authentication (2FA, OTP) :
1067
  * Added 2FA setup using user profile option
1068
  * Support Form UI
1069
  * 2FA Form support for login with ajax, Elementor Pro, UserPro login forms
1070
  * Minor bug fixes
1071
 
1072
+ = 5.4.38 =
1073
  * Google Authenticator - Two factor Authentication (2FA, OTP) :
1074
  * Added 2FA setup using user profile option
1075
  * Setup Wizard for configuring 2FA
1076
  * 2FA Form support for login with ajax, Elementor Pro, UserPro login forms
1077
  * Minor bug fixes
1078
 
1079
+ = 5.4.37 =
1080
+ * Google Authenticator - Two factor Authentication (2FA, OTP) :
1081
+ * Minor bug fixes
1082
+
1083
+ = 5.4.36 =
1084
+ * Google Authenticator - Two Factor Authentication (2FA, OTP) :
1085
+ * Remove extra comma
1086
+
1087
+ = 5.4.35 =
1088
+ * Google Authenticator - Two Factor Authentication (2FA, OTP) :
1089
+ * Minor bug fixes
1090
+
1091
+ = 5.4.34 =
1092
+ * Google Authenticator - Two Factor Authentication (2FA, OTP) :
1093
+ * New User Interface for easy setup
1094
+ * Added developers logs
1095
+ * Minor fixes
1096
+
1097
+ = 5.4.33 =
1098
  * Google Authenticator – Two Factor Authentication (2FA, TFA) :
1099
+ * New pricing page for two factor authentication
1100
  * Added Duo Authenticator push notification method.
1101
  * Woocommerce redirect issue fix.
1102
 
1103
+ = 5.4.32 =
1104
  * Google Authenticator – Two Factor Authentication (2FA, TFA) :
1105
  * Replaced sessions with transient.
1106
 
1107
+ = 5.4.31 =
1108
  * Google Authenticator - Two Factor Authentication (2FA, OTP) :
1109
  * OTP over Email as two factor fix
1110
  * Low Email transaction alert fix
1111
 
1112
+ = 5.4.30 =
1113
  * Google Authenticator - Two Factor Authentication (2FA, OTP) :
1114
  * Feedback changes
1115
 
1152
  * Email and SMS transaction sync
1153
  * Feedback form on network deactivate
1154
  * Enable/Disable 2FA fix
1155
+ * 2FA added for super admin role
1156
 
1157
  = 5.4.22 =
1158
  * Google Authenticator - Two Factor Authentication (2FA, OTP) :
1191
  = 5.4.15 =
1192
  * Google Authenticator - Two Factor Authentication (2FA, OTP) :
1193
  * Theme My Login plugin Support
1194
+ * Ultimate Member Registration Support
1195
  * Woocommerce Registration Support
1196
+ * Ultimate Member Redirect
1197
  * Restrict Content Pro Login and Registration
1198
 
1199
  = 5.4.14 =
1218
  * Google Authenticator - Two Factor Authentication (2FA) : Improving Google Authenticator and adding Payment options.
1219
 
1220
  = 5.4.5 =
1221
+ * Google Authenticator - Two Factor Authentication (2FA, OTP) : Security and MFA UI updates.
1222
 
1223
  = 5.4.4 =
1224
+ * Google Authenticator - Two Factor Authentication (2FA, TFA) : Two Factor : Woocommerce login page integration.
1225
 
1226
  = 5.4.3 =
1227
+ * Google Authenticator - Two Factor Authentication (2FA, MFA) : Session issue fix for customers using Two Factor.
1228
 
1229
  = 5.4.2 =
1230
+ * Google Authenticator - Two Factor Authentication (2FA, MFA) : Warning for cloud customer moving to on-premise Two factor
1231
+
1232
+ = 5.4.1 =
1233
+ * Google Authenticator - Two Factor Authentication (2FA) : Headers sent issue is security firewall.
1234
 
1235
  = 5.4.0 =
1236
+ * Google Authenticator - Two Factor Authentication (2FA) : Two Factor FAQ Fix and OTP code convenience.
1237
 
1238
  = 5.3.26 =
1239
  * Google Authenticator - Two Factor Authentication (2FA) : Two Factor On-premise FAQ update.
1262
  * Google Authenticator - Two Factor Authentication (2FA) : Security : Giving users choice of two factor.
1263
 
1264
  = 5.3.18 =
1265
+ * Google Authenticator - Two Factor Authentication (2FA) : Antivirus and Firewall : Fix Scan.
1266
 
1267
  = 5.3.17 =
1268
  * Google Authenticator - Two Factor Authentication (2FA) : Anti-Virus : Improved Stop Scan.
1291
  = 5.3.9 =
1292
  * Google Authenticator - Two Factor Authentication (2FA) : Security : Web application Firewall Sql Injections report and monitoring.
1293
 
 
1294
  = 5.3.8 =
1295
  * Google Authenticator - Two Factor Authentication (2FA) : Security : Malware Scanner Fix.
1296
 
1322
  * Google Authenticator - Two Factor Authentication (2FA) : Fixed conflict and filter issues.
1323
 
1324
  = 5.2.5 =
1325
+ * Google Authenticator - Two Factor Authentication (2FA) : Some warnings in remote posts.
1326
 
1327
  = 5.2.4 =
1328
+ * Google Authenticator - Two Factor Authentication (2FA) : Removed curl calls and unnecessary files.
1329
 
1330
  = 5.2.3 =
1331
  * Google Authenticator - Two Factor Authentication (2FA) : Fix for some users facing issues in api calls.
1349
  * Google Authenticator - Two Factor Authentication (2FA) : Minor Bug fix.
1350
 
1351
  = 5.1.19 =
1352
+ * Google Authenticator - Two Factor Authentication (2FA) : Adding basic Security Features Monitoring, IP blocking and login transaction report.
1353
 
1354
  = 5.1.18 =
1355
  * Google Authenticator - Two Factor Authentication (2FA) : Object access error for lower PHP versions.
1415
  * Google Authenticator - Two Factor Authentication (2FA) : Added Google Authenticator option in the WP login page itself.
1416
 
1417
  = 5.0.14 =
1418
+ * Google Authenticator - Two Factor Authentication (2FA) : Bug Fixes.
1419
 
1420
  = 5.0.13 =
1421
  * Google Authenticator - Two Factor Authentication (2FA) : Bug Fix and code optimization.
1470
  * Google Authenticator - Two Factor Authentication (2FA) : Bug fixes for customers who were getting redirected to the login page after the two factor authentication.
1471
 
1472
  = 4.5.8 =
1473
+ * Google Authenticator - Two Factor Authentication (2FA) : Tested up to 4.9.4 and Removed External links.
1474
 
1475
  = 4.5.7 =
1476
  * Google Authenticator - Two Factor Authentication (2FA) : Minor bug fixes.
1477
 
1478
  = 4.5.6 =
1479
+ * Google Authenticator - Two Factor Authentication (2FA) : Tested up to Wordpress 4.9.
1480
 
1481
  = 4.5.5 =
1482
  * Google Authenticator - Two Factor Authentication (2FA) : 404 bug fixes.
1483
 
1484
  = 4.5.4 =
1485
+ * Google Authenticator - Two Factor Authentication (2FA) : Better UI of Login Pages, Fixed Redirection issue. Fixed the error in the last version (4.5.3) for the customers who were getting undefined action errors.
1486
+
1487
+ = 4.5.3 =
1488
+ * Google Authenticator - Two Factor Authentication (2FA) : Changed UI of the Login Pages, Redirect to Login Page bug fixes.
1489
+
1490
+ = 4.5.2 =
1491
+ * Google Authenticator - Two Factor Authentication (2FA) : Readme Update: Description Update
1492
+
1493
+ = 4.5.1 =
1494
+ * Google Authenticator - Two Factor Authentication (2FA) : Updated the new Authenticator App's link and the 'How to Setup Tab' tab.
1495
+
1496
+ = 4.5.0 =
1497
+ * Google Authenticator - Two Factor Authentication (2FA) : Fix Google Authenticator configuration issue.
1498
+
1499
+ = 4.4.9 =
1500
+ * Google Authenticator - Two Factor Authentication (2FA) : Added Alert Message for SMS Transactions only when authentication method is OTP over SMS.
1501
+
1502
+ = 4.4.8 =
1503
+ * Google Authenticator - Two Factor Authentication (2FA) : Added Alert Message for SMS Transactions. Fixed Remember Device flow and confliction with themes. Added support for multiple instances of wordpress.
1504
+
1505
+ = 4.4.7 =
1506
+ * Google Authenticator - Two Factor Authentication (2FA) : Updated the error message for 2 factor configuration.
1507
+
1508
+ = 4.4.6 =
1509
+ * Google Authenticator - Two Factor Authentication (2FA) : Instructions for login in case user get locked out.
1510
+
1511
+ = 4.4.5 =
1512
+ * Google Authenticator - Two Factor Authentication (2FA) : Fixed the issue of session variable on the login with username page.
1513
+
1514
+ = 4.4.4 =
1515
+ * Google Authenticator - Two Factor Authentication (2FA) : Added alert messages for OTP over SMS usages.
1516
 
1517
  = 4.4.3 =
1518
  * Google Authenticator - Two Factor Authentication (2FA) : Fixed the login flow for third party Apps that supports XML-RPC.
1519
 
1520
  = 4.4 =
1521
  * Google Authenticator - Two Factor Authentication (2FA):
1522
+ * Note: This is a very important update having altogether a new UI and compatibility with Limit Login Attempts. After updating, please do not logout from your admin dashboard. Try to login from another browser and if you face any issue , please contact us at info@xecurify.com
1523
  * Compatibility with Limit Login Attempts.
1524
  * New User Interface for login.
1525
 
1533
  * Google Authenticator - Two Factor Authentication (2FA, MFA): Updated miniOrange APIs.
1534
 
1535
  = 4.2.9 =
1536
+ * Google Authenticator - Two Factor Authentication (2FA, MFA): Tested up to WordPress 4.6.
1537
 
1538
  = 4.2.7 =
1539
+ * Google Authenticator - Two Factor Authentication (2FA, MFA): Session Warning fix in the last version for some of the users.
1540
 
1541
  = 4.2.6 =
1542
  * Google Authenticator - Two Factor Authentication (2FA, MFA): Compatible with wordpress caching.
1565
 
1566
  = 4.1.8 =
1567
  * Google Authenticator - Two Factor Authentication ( 2FA ):
1568
+ * Changed the location of images used for the demo. Now being loaded from the site having SSL certificate.
1569
 
1570
  = 4.1.7 =
1571
  * Google Authenticator - Two Factor Authentication ( 2FA ):
1590
  * Fixed CSS Conflict with the plugins in the admin dashboard.
1591
  * More intuitive UI for woocommerce login.
1592
  * Tested front-end login with themes like wordpress default theme,
1593
+ customize theme,zerif-lite theme,accesspress store theme,ishop theme and many more.
1594
 
1595
  = 4.1.2 =
1596
  * Google Authenticator - Two Factor Authentication ( 2FA ): Google Authenticator for Windows phone
1707
  * Google Authenticator - Two Factor Authentication ( 2FA ): Added email ID verification during registration.
1708
 
1709
  = 1.0.0 =
1710
+ * First version of Google Authenticator - Two Factor Authentication ( 2FA ) plugin supported with mobile authentication for admins only.