I've been working on AuthPress, a comprehensive two-factor authentication plugin for WordPress that started as a simple Telegram-based 2FA solution and has evolved into a flexible multi-provider authentication system.

  What makes AuthPress different:

  • Multiple Auth Providers: Telegram, Email, TOTP (Google Authenticator, Authy, etc.), Recovery codes, plus extensible support for SMS, Passkeys, and custom implementations

  • Developer-Friendly Architecture: Clean API for creating custom 2FA providers - you can integrate with any authentication service (Twilio SMS, Push notifications, Hardware tokens, etc.)

  • Professional Admin Interface: Comprehensive logging, user management, and monitoring tools built with WordPress best practices

  • Security-First: Rate limiting, encrypted storage, activity monitoring, and protection against brute force attacks

  The Journey:
  Started as a Telegram-only plugin (because who doesn't want 2FA codes via Telegram bot?), but realized the WordPress ecosystem needed something more flexible. Instead of just adding more providers, I built an extensible system
  where developers can create their own 2FA methods as separate plugins.

  Technical Highlights:
  - WordPress 5.0+ compatibility
  - Database-backed (moved away from WordPress options for performance)
  - Proper internationalization
  - Uses WordPress standards (hooks, filters, WP_List_Table)
  - Clean separation between core and providers

  The plugin is GPL-licensed and available on WordPress.org. Perfect for anyone securing WordPress sites or developers wanting to build custom 2FA solutions.

  Demo/Screenshots: Available in the WordPress plugin directory
  GitHub: https://github.com/dueclic/authpress

  Would love feedback from the community, especially on the extensibility aspects and any custom providers you'd like to see!