Plugin Directory

Clef Two-Factor Authentication

Secure two-factor that people love to use: strong authentication without passwords or tokens; single sign on/off; magical user experience.

Clef provides easy-to-use strong two-factor authentication using smartphones. It replaces insecure passwords and cumbersome one-time codes with the beautiful Clef Wave.

To log in with Clef, simply open the mobile app and sync with the Clef Wave. Watch our 30-sec. demo.

Our Users’ Favorite Features

  • The “magical” Clef Wave: login securely without passwords, and enjoy two-factor protection without one-time codes.

  • Convenience: use your smartphone for strong authentication instead of a “third device” such as a USB drive or extra security key.

  • Single sign on/off: Sync with the Clef Wave once, then enjoy one-click sign ins for all subsequent sites. Also, you are automatically logged out when you’re done working.

Security Features

  • Strong authentication: Clef replaces passwords with highly secure two-factor logins using the tried-and-true RSA public-key cryptosystem.

    • Clef stores your encrypted private key on your phone rather than in a central database. Thus even in the unlikely event of a catastrophic security breach on Clef’s servers, your login credentials remain secure on your phone.
    • Every Clef login requires two identification factors: your phone and a fingerprint or PIN. So even if your phone is lost or stolen, you’ll be safe.
  • Comprehensive protection: Clef disables passwords for all three WordPress authentication vectors: Dashboard access, API access, and automatic password resets via email. Thus it protects against the full spectrum of password-based attacks:

    • brute-force and botnet login attacks
    • weak, reused, and recycled passwords
    • sending login credentials via an insecure (non-ssl) connection
    • password phishing attempts
    • account takeovers via email account breaches

Configuration Features

  • Flexible password settings

  • Shortcode support: insert Clef’s “login with your phone” button or the Clef Wave in any post, page, or text widget using the clef_render_login_button shortcode.

  • Standards-based compatibility: Clef’s WordPress plugin adheres to WordPress coding guidelines and is thus compatible with most mainstream plugins.

  • Internationalization and localization support: Arabic, Danish, Dutch, French, German, Greek, Japanese, Latvian, Portuguese, Russian, Spanish. More translations on the way. Help translate Clef into your language.

  • Multisite network support

  • Helpful documentation

  • Free email and chat support

Requires: 3.5 or higher
Compatible up to: 4.2.4
Last Updated: 2015-6-18
Active Installs: 500,000+


4.8 out of 5 stars


2 of 10 support threads in the last two months have been resolved.

Got something to say? Need help?


Not enough data

0 people say it works.
0 people say it's broken.

100,1,1 0,1,0
100,1,1 100,2,2
100,2,2 100,3,3
100,3,3 100,1,1 100,1,1
100,3,3 100,3,3
100,1,1 100,3,3 100,1,1
100,2,2 100,1,1