- Sep 10, 2010
- 11,838
- 26,690
From a developer perspective, I would say.. it's good that WP does not have it. It's easy to modify the login page anyway. Not everyone needs 2fa login. It does not make any sense to push this to everyone using wp. Whoever needs it, can modify the login functionality instead.
It does not even have to be on login page. Just do another verification after logging in. It can be a separate page or something. If the user does not enter OTP, don't let him see anything else.
Ricardo R
Banned for Abuse of Staff
- Jan 16, 2021
- 130
- 67
The thing is many of my clients have gotten their sites hacked. I am just a writer but this worries me since millions of websites run on WP.
- Sep 10, 2010
- 11,838
- 26,690
That has nothing to do with the login page TBH. People get hacked because of many reasons. The three biggest reasons in my opinion are:
1) Bad passwords.
2) Using vulnerable and old/hacked/nulled plugins AND/OR themes.
3) Not implementing the file permissions/ownership properly.
Tell your clients to fix these 3 problems, and you won't even need an OTP lol.
- May 8, 2012
- 4,219
- 3,728
hackers use exploits in plugins and wp itself, so they don't need any login. even with 2fa enabled, the site can still be hacked through vulnerable plugins and themes.
Ricardo R
Banned for Abuse of Staff
- Jan 16, 2021
- 130
- 67
K understood.