I've been working on AuthPress, a comprehensive two-factor authentication plugin for WordPress that started as a simple Telegram-based 2FA solution and has evolved into a flexible multi-provider authentication system. What makes AuthPress different:
• Multiple Auth Providers: Telegram, Email, TOTP (Google Authenticator, Authy, etc.), Recovery codes, plus extensible support for SMS, Passkeys, and custom implementations
• Developer-Friendly Architecture: Clean API for creating custom 2FA providers - you can integrate with any authentication service (Twilio SMS, Push notifications, Hardware tokens, etc.)
• Professional Admin Interface: Comprehensive logging, user management, and monitoring tools built with WordPress best practices
• Security-First: Rate limiting, encrypted storage, activity monitoring, and protection against brute force attacks
The Journey:
Started as a Telegram-only plugin (because who doesn't want 2FA codes via Telegram bot?), but realized the WordPress ecosystem needed something more flexible. Instead of just adding more providers, I built an extensible system
where developers can create their own 2FA methods as separate plugins.
Technical Highlights:
- WordPress 5.0+ compatibility
- Database-backed (moved away from WordPress options for performance)
- Proper internationalization
- Uses WordPress standards (hooks, filters, WP_List_Table)
- Clean separation between core and providers
The plugin is GPL-licensed and available on WordPress.org. Perfect for anyone securing WordPress sites or developers wanting to build custom 2FA solutions.
Demo/Screenshots: Available in the WordPress plugin directory
GitHub: https://github.com/dueclic/authpress
Would love feedback from the community, especially on the extensibility aspects and any custom providers you'd like to see!