miniOrange 2FA – Two-Factor Authentication for WordPress (SMS, Email & Google Authenticator)

Anuradha has been great at assisting us with the plugin setup and answering our questions promptly. Everything is working as expected and the customer service is top notch. Thank you again!

My paywalled weblog was hacked and nearly wrecked.  At which point, I realized that I needed to trim down on the paths in (too many different intermediary login options), as well as to prevent “brute force” and to ward off anonymous scumbags and their throwaway/fake email addresses, by way of 2FA. The guys at miniOrange patiently worked with me to integrate 2FA while overcoming the longtime technical debt inherited from my paywall’s creation by a committed but totally non-professional (and long gone) webmaster.  At my request, they created a module (which, somehow, they did not offer previously) to allow for subscriber-initiated changes to an already-selected 2FA OTP delivery method; hopefully this will be of use to many more of their own customers, going forward.  They are clearly eager to work with their customers for a bespoke solution, as needed, at a VERY reasonable rate—which is fortunate, as my guess is that most solutions will require some custom integration over the base service fee.  Also, despite the time zone difference, for a U.S. customer they are quite easy to work with, very flexible and accommodating, in the (U.S. ET) morning or late evening or both.  I am SO GLAD that I found miniOrange, and I wish them continued growth and all possible success!!!

I discussed with the team that there is a hack allowing tokens to be sent without going through the login screen. As long as the user does not accept the login tokens, the overall security has held, but this is a vulnerability. Today Vikas and I hopped on a call to review this activity and he agreed the attackers are bypassing the login process somehow. He confirmed that his team will begin working on this immediately.

I feel their response was slower than necessary but am now convinced they are addressing the right concerns.

• This topic was modified 4 months, 4 weeks ago by awfominaya. Reason: I'm updating my response to indicate a more accurate status

I had purchased premium plugin however for some features I need a support. The support was exceptional.Sandesh , the support guy is a legend. He helped me in all the issues I’ve faced and update the plugin accordingly.

• This topic was modified 10 months, 2 weeks ago by sainiinder08.

I’ve been using this plugin for 2FA for several years. After a recent update, I encountered an issue where I could no longer access my site. Sandesh and team were immediately responsive and available to help resolve the matter quickly.