User Registration Two Factor Authentication Addon
Antivirus scan
Powered by ClamAV
✅ Verified clean
This product file has passed our security filters.
Want to run a fresh ClamAV scan right now? Takes a few seconds and shows scanner version, signature DB and live result.
This can take 5 to 30 seconds.
Clean file Threat detected
No threats detected in this file.
- File
- Size
- Scanned
- ClamAV
- Signature database
⚡ Powered by ClamAV
Scan could not be completed
Report product
If you detected an issue (broken file, malware, inappropriate content, etc.) let us know and we'll review it ASAP.
Sign in to report
About User Registration Two Factor Authentication Addon
A shared password is a subscription given away
On a membership site, the password is the key to paid content. It gets reused on other services, written on paper and, sometimes, lent to a friend. With only a username and password, anyone who has them gets in as if they were the member.
User Registration Two Factor Authentication Addon adds a second step to login: after entering the usual details, the member must type a one-time code (OTP) received separately. It does not replace the password, it complements it. And it acts on login, not on the sign-up form.
Code by email or by SMS: two paths with different setups
- Email OTP: you enable two-factor authentication in the settings and the member receives the code at the email address they registered with.
- SMS OTP: first you must activate the SMS integration addon and set up Twilio. Then the code arrives on the user's registered mobile and approves their access.
SMS requires a Twilio account and members who have a mobile number saved in their profile.
Choose who must use it and how long each code lasts
The settings live in the plugin's security section and are split into three blocks:
- General: you enable the feature and decide whether it applies to all users or only to certain roles. That way you can protect administrators or editors first without bothering everyone else.
- Codes: length, expiry time, resend limit, incorrect-code limit and login hold periods.
- Messages: the text users see during verification can be edited so it fits the tone of your site.
Is it worth requiring two-step verification from all your members?
It depends on what an improper login would cost you. If you have courses, exclusive content or profile data, an extra login step usually pays off. If your community is free and the content is not sensitive, requiring it only from roles with management permissions may be enough. Keep in mind that every login will be slightly slower for the member, and that if their email or phone is no longer accessible, they will have trouble getting in.
Does it work on its own?
No. It is an addon for User Registration & Membership in its Pro version and is activated from that plugin's security settings.
Do I need Twilio?
Only if you want to send codes by SMS. It is not needed for email delivery.
Can I require it only from some users?
Yes. You can choose specific roles or apply it to all users.
Does it protect the registration form?
No: it protects login. Sign-up of new users is handled by the plugin's other features.
Which verification methods does it offer?
Code by email and code by SMS. Check in the demo whether the flow suits what your members expect.
Topics
Version history
-
v
1.2.0 Current 5 Sep 2026
-
v
1.1.8 26 Jun 2026
-
v
1.1.7 8 Apr 2026
Customer reviews
Sign in to leave a review. Only people who have the product can review it.
No reviews for this product yet.
Frequently asked questions
-
GPL (General Public License) is the license under which WordPress and most premium plugins/themes are distributed. It grants you the right to use, modify and redistribute the software in as many projects as you want, with no domain restrictions.
-
Yes. With membership you get automatic updates via our GPLClub Updater plugin (installed on your WP, detects new versions and applies them). With individual purchase, you get one year of manual updates from your account.
-
Depends on the plan. Monthly: 3 domains. Semi-annual: 7. Annual and Lifetime: 15. Individual purchase: 1 domain.
-
GPLClub offers its own support for installation, configuration and compatibility. For direct support from the original author (feature requests, product-specific bugs), a license purchased from the author is required.
