Skip to content
  • Log In
  • Register
WordPress.org
  • News
  • Download & Extend
    • Get WordPress
    • Themes
    • Patterns
    • Plugins
    • Mobile
    • Hosting
    • Openverse ↗︎
  • Learn
    • Learn WordPress
    • Documentation
    • Forums
    • Developers
    • WordPress.tv ↗︎
  • Community
    • Make WordPress
    • Photo Directory
    • Five for the Future
    • WordCamp ↗︎
    • Meetups ↗︎
    • Job Board ↗︎
  • About
    • About WordPress
    • Showcase
    • Enterprise
    • Gutenberg ↗︎
    • WordPress Swag Store ↗︎
  • Get WordPress
Get WordPress

Plugins

  • My Favorites
  • Beta Testing
  • Developers
Download

Senpai Software – Two-factor authentication (2FA) with a key file

By Senpai Software
  • Details
  • Reviews
  • Development
Support

Description

THE MOST UNIQUE TWO-FACTOR AUTHENTICATION METHOD

This plugin gives you the ability to turn any file on your computer into a unique key which you will use to access the admin area.

The plugin only works using HTTPS!

Properties

  • File is not downloaded or stored physically on the site.
  • The plugin does not create additional security risks.
  • Plugin code does not create additional load on the site.
  • Intuitive interface.
  • Provides the maximum level of protection against brute force attacks. Even if a hacker has access to your computer, it will be extremely difficult for him to guess which file is the key.
  • Any file can be used as a key, for example: photo, video, text document, song, operating system system file, whatever…
  • File size up to 1 GB.
  • Limit Login Attempts.
  • Disable XML-RPC.

Keep in mind that if you change the contents of the file selected as a key, you will not be able to access the admin area.

Screenshots

  • This is what the login page will look like
  • This is how the section in the profile settings will look like
  • 2FA Settings page

FAQ

Where are the settings?

Settings are located in the edit section of your profile

What should I do if I have lost my key file?

If you are not an administrator.
Ask your site administrator to turn off two-factor authentication for your profile. After that, you will be able to log in using only your login and password, and then select a new file.

If you are administrator.
* Go to your website database.
* Find usermeta table.
* Find the row where ‘user_id’ = your user ID, and ‘meta_key’ = ‘senpai_software_2fa_status’.
* Change the value of the ‘meta_value’ field to ‘disable’.
* Now you can use only login and password, and then choose a new key file.

Reviews

Invalid key with no reason – access blocked – UPDATED

bluelee22 April 18, 2023 1 reply
All was good until I got with no reason the Invalid Key error message. I manage many websites and it was really painful to fix this error through all the websites. I have not changed the file nor open it, so I really don't understand what I got this error message. This was exactly why I wanted to try this plugin because it different from the others WP2FA. I will update my review if this problem is fixed in the next update. Update: As promised I updated my review and gave you 5 stars. I hope this bug will not occur in the future.

Great solution

alexrazor777 April 5, 2023 1 reply
Good alternative to captcha

Действительно удобный плагин

Victoribus March 23, 2023 1 reply
Обычно двуфакторка всегда напрягает потому что не удобно. А тут просто файл выбрал на компе и не нужно все время телефон искать...
Read all 3 reviews

Contributors & Developers

“Senpai Software – Two-factor authentication (2FA) with a key file” is open source software. The following people have contributed to this plugin.

Contributors
  • Serhii Kolomiitsev

“Senpai Software – Two-factor authentication (2FA) with a key file” has been translated into 1 locale. Thank you to the translators for their contributions.

Translate “Senpai Software – Two-factor authentication (2FA) with a key file” into your language.

Interested in development?

Browse the code, check out the SVN repository, or subscribe to the development log by RSS.

Changelog

2.0.0

  • Added ability to disable XML-RPC.
  • Added ability to set restrictions for login attempts.

1.0.2

  • Misc: Add deactivation function.

1.0.1

  • Bug Fix: Fixed an issue where an admin couldn’t change another user’s settings.
  • Misc: Replaced wp_hash with sha1.

1.0

  • Release this plugin to the masses!

Meta

  • Version: 2.0.0
  • Last updated: 2 months ago
  • Active installations: 10+
  • WordPress Version: 5.0 or higher
  • Tested up to: 6.3.1
  • PHP Version: 5.6 or higher
  • Languages:

    English (US) and Ukrainian.

    Translate into your language

  • Tags:
    2FABrute Forcedisable xml-rpclimit login attemptstwo factor authentication
  • Advanced View

Ratings

See all
  • 5 stars 3
  • 4 stars 0
  • 3 stars 0
  • 2 stars 0
  • 1 star 0
Log in to submit a review.

Contributors

  • Serhii Kolomiitsev

Support

Got something to say? Need help?

View support forum

Donate

Would you like to support the advancement of this plugin?

Donate to this plugin

  • About
  • News
  • Hosting
  • Donate
  • Swag
  • Documentation
  • Developers
  • Get Involved
  • Learn
  • Showcase
  • Plugins
  • Themes
  • Patterns
  • WordCamp
  • WordPress.TV
  • BuddyPress
  • bbPress
  • WordPress.com
  • Matt
  • Privacy
  • Public Code
WordPress.org
WordPress.org
  • Visit our Facebook page
  • Visit our Twitter account
  • Visit our Instagram account
  • Visit our LinkedIn account
  • Visit our YouTube channel
Code is Poetry