Title: LoginArmor – Email 2FA Author: TechArk Solutions Published: 29 April 2026 Last modified: 7 Agustus 2026 --- Cari plugin ![](https://ps.w.org/loginarmor-email-2fa/assets/banner-772x250.png?rev=3518030) ![](https://ps.w.org/loginarmor-email-2fa/assets/icon-256x256.png?rev=3518040) # LoginArmor – Email 2FA Oleh [TechArk Solutions](https://profiles.wordpress.org/gotechark/) [Unduh](https://downloads.wordpress.org/plugin/loginarmor-email-2fa.1.3.zip) * [Detail](https://id.wordpress.org/plugins/loginarmor-email-2fa/#description) * [Ulasan](https://id.wordpress.org/plugins/loginarmor-email-2fa/#reviews) * [Instalasi](https://id.wordpress.org/plugins/loginarmor-email-2fa/#installation) * [Pengembangan](https://id.wordpress.org/plugins/loginarmor-email-2fa/#developers) [Bantuan](https://wordpress.org/support/plugin/loginarmor-email-2fa/) ## Deskripsi LoginArmor adds an extra layer of protection to WordPress logins by requiring a one-time verification code after a valid username and password are entered. #### Key features * Email-based one-time passcodes for WordPress logins * Apply 2FA to selected user roles * Apply 2FA to specific users * Optional grace period before activation is enforced * Recovery codes for backup access * Customizable email subject and login code email template * Optional debug logging to `wp-content/uploads/loginarmor-email-2fa/loginarmor- debug.log` * Automatic log rotation to prevent unbounded log file growth * Compatible with WordPress application passwords and REST API clients * Dedicated settings screen inside the WordPress admin #### How it works 1. A user enters a valid username and password. 2. LoginArmor sends a one-time code to the user’s email address. 3. The user enters the code to complete login. 4. If needed, the user can use a recovery code instead. #### Recovery codes The plugin includes recovery codes as a backup login option. Codes are stored securely as hashes in user meta. Plaintext codes are shown only temporarily so users can save or download them once. #### Grace period You can optionally set a grace period in days. During the grace period, eligible users can continue signing in while they complete activation. After the grace period ends, 2FA is enforced. #### No external service required LoginArmor uses WordPress email delivery and does not require a third-party 2FA service. #### Developer notes The plugin exposes a filter for sites running behind a reverse proxy (Cloudflare, load balancers, etc.) that need to supply the real visitor IP: ``` add_filter( 'la2fa_get_client_ip', function( $ip ) { return $_SERVER['HTTP_CF_CONNECTING_IP'] ?? $_SERVER['REMOTE_ADDR'] ?? 'unknown'; } ); ``` Without this filter the plugin behaves exactly as before — it reads `REMOTE_ADDR` by default. ### Privacy LoginArmor does not connect to an external third-party verification service. The plugin may process and store the following data on your WordPress site: * Email-based one-time passcodes for login verification * Recovery code hashes stored in user meta * Optional debug log entries in `wp-content/uploads/loginarmor-email-2fa/loginarmor- debug.log` * Temporary transients used for login, cooldown, and verification flow This data stays on your site unless your own email delivery system or hosting stack routes it elsewhere. ## Tangkapan Layar [⌊Configure 2FA Setting⌉⌊Configure 2FA Setting⌉[ Configure 2FA Setting [⌊Configure Email Template⌉⌊Configure Email Template⌉[ Configure Email Template ## Instalasi 1. Upload the plugin files to the `/wp-content/plugins/loginarmor-email-2fa/` directory, or install the plugin through the WordPress plugins screen. 2. Activate the plugin through the **Plugins** screen in WordPress. 3. Go to **LoginArmor** in the WordPress admin menu. 4. Enable two-factor authentication. 5. Choose the user roles and/or specific users who should use 2FA. 6. Configure the grace period if needed. 7. Customize the email subject and email template if desired. 8. Save your settings. ## Tanya Jawab ### Can I apply 2FA to only some users? Yes. You can apply 2FA by user role, by specific users, or both. ### What happens if a user cannot access their email? They can use a recovery code if one has been generated and saved. ### Can I customize the email content? Yes. You can customize the sender email address, subject line, and login code email template from the plugin settings. ### Does the plugin require a third-party account? No. It works with your WordPress site and its email sending setup. ### Where are recovery codes managed? Recovery codes are available from the user profile area and are intended to be saved by the user for emergency access. ### Does 2FA affect REST API access or application passwords? No. WordPress application passwords used for REST API access bypass the OTP flow by design. 2FA applies only to interactive browser-based logins via wp-login.php. ### Does 2FA work with XML-RPC? XML-RPC logins for accounts that have 2FA enabled will be blocked with a clear error message. This is intentional — XML-RPC cannot complete an OTP challenge. If you rely on XML-RPC for a specific integration, either exclude that user from 2FA targeting or switch to application passwords, which are fully supported. ### My site is behind Cloudflare or a load balancer — will rate limiting work correctly? By default the plugin reads `REMOTE_ADDR` for IP-based rate limiting, which may be the proxy’s IP rather than the real visitor’s. Use the `la2fa_get_client_ip` filter (see Developer notes in the Description tab) to supply the correct IP for your hosting environment. ## Ulasan ![](https://secure.gravatar.com/avatar/d76234079f1f4483aa2aa15bc57583d8115e52cbc19fb72802458500c66effde? s=60&d=retro&r=g) ### 󠀁[Good Plugin](https://wordpress.org/support/topic/good-plugin-7349/)󠁿 [Denil Mehta](https://profiles.wordpress.org/denilmehta08/) 18 Juni 2026 Great plugin! Easy to set up, works exactly as expected, and provides a secure email- based 2FA solution for WordPress. Reliable, lightweight, and user-friendly. Highly recommended! [ Baca semua 1 ulasan ](https://wordpress.org/support/plugin/loginarmor-email-2fa/reviews/) ## Kontributor & Pengembang “LoginArmor – Email 2FA” adalah perangkat lunak open source. Berikut ini mereka yang sudah berkontribusi pada plugin ini. Kontributor * [ TechArk Solutions ](https://profiles.wordpress.org/gotechark/) * [ Yogesh Damasiya ](https://profiles.wordpress.org/yogid/) [Terjemahkan “LoginArmor – Email 2FA” dalam bahasa Anda.](https://translate.wordpress.org/projects/wp-plugins/loginarmor-email-2fa) ### Tertarik mengembangkan? [Lihat kode](https://plugins.trac.wordpress.org/browser/loginarmor-email-2fa/), periksa [repositori SVN ](https://plugins.svn.wordpress.org/loginarmor-email-2fa/), atau mendaftar ke [log pengembangan](https://plugins.trac.wordpress.org/log/loginarmor-email-2fa/) melalui [RSS](https://plugins.trac.wordpress.org/log/loginarmor-email-2fa/?limit=100&mode=stop_on_copy&format=rss). ## Log Perubahan #### 1.3 * Minor code optimizations. #### 1.2 * Security: 2FA OTP challenge is now correctly skipped for REST API requests authenticated via WordPress application passwords, preventing broken API integrations. * Security: XML-RPC login attempts for 2FA-protected accounts now return a clear WP_Error instead of issuing a silent broken redirect. * Fix: Recovery code setup redirect now correctly passes the user to their original destination after saving codes (“Continue” button works as expected). * Improvement: Debug log file is now automatically rotated when it exceeds 5 MB, preventing unbounded disk usage on busy sites. * Improvement: Added `la2fa_get_client_ip` filter to allow sites behind reverse proxies (Cloudflare, load balancers) to supply the correct visitor IP for rate limiting. #### 1.1 * Minor code optimizations. #### 1.0 * Initial release * Improved settings handling and login flow stability * Refined admin UI and general plugin behavior ## Meta * Versi **1.3** * Diperbarui **2 bulan yang lalu** * Instalasi Aktif **10+** * Versi WordPress ** 6.0 atau yang terbaru ** * Diuji hingga **7.0.7** * Versi PHP ** 7.4 atau yang terbaru ** * Bahasa * [English (US)](https://wordpress.org/plugins/loginarmor-email-2fa/) * Tag * [2FA](https://id.wordpress.org/plugins/tags/2fa/)[Email OTP](https://id.wordpress.org/plugins/tags/email-otp/) [login security](https://id.wordpress.org/plugins/tags/login-security/)[two factor authentication](https://id.wordpress.org/plugins/tags/two-factor-authentication/) * [Tampilan lanjut](https://id.wordpress.org/plugins/loginarmor-email-2fa/advanced/) ## Rating 5 dari 5 bintang. * [ 1 ulasan 5-bintang ](https://wordpress.org/support/plugin/loginarmor-email-2fa/reviews/?filter=5) * [ 0 ulasan 4-bintang ](https://wordpress.org/support/plugin/loginarmor-email-2fa/reviews/?filter=4) * [ 0 ulasan 3-bintang ](https://wordpress.org/support/plugin/loginarmor-email-2fa/reviews/?filter=3) * [ 0 ulasan 2-bintang ](https://wordpress.org/support/plugin/loginarmor-email-2fa/reviews/?filter=2) * [ 0 ulasan 1-bintang ](https://wordpress.org/support/plugin/loginarmor-email-2fa/reviews/?filter=1) [Your review](https://wordpress.org/support/plugin/loginarmor-email-2fa/reviews/#new-post) [Lihat semua ulasan](https://wordpress.org/support/plugin/loginarmor-email-2fa/reviews/) ## Kontributor * [ TechArk Solutions ](https://profiles.wordpress.org/gotechark/) * [ Yogesh Damasiya ](https://profiles.wordpress.org/yogid/) ## Bantuan Ada yang ingin dikatakan? Butuh bantuan? [Lihat forum bantuan](https://wordpress.org/support/plugin/loginarmor-email-2fa/)