WooCommerce Google Authenticator adds two factor authentication to WooCommerce customer accounts. After the password, the customer enters a six digit code from the Google Authenticator app on their phone.
Customers set it up themselves from a menu on the My Account page. They scan a QR code with the app, or type the site name and secret key by hand. A code confirms the pairing and finishes enrolment. Nothing is required from you beyond turning the feature on.
Two factor is optional per customer, not forced on everyone. Accounts that have enrolled must supply a code at login. Accounts that have not can log in with a password as before. You can also exclude specific users from 2FA entirely.
WooCommerce Google Authenticator is a WordPress plugin that adds two factor authentication (2FA) to WooCommerce customer accounts. Customers enrol from their My Account page by scanning a QR code with the Google Authenticator app. They then enter a six digit code at every login.
Stored addresses, order history, saved payment methods, and wallet or store credit balances all sit behind a customer password. Passwords get reused across sites, and a credential dump elsewhere becomes an account takeover on your store.
A time based code changes every thirty seconds and lives on the customer’s phone. A stolen password on its own no longer opens the account.
The Google Authenticator app is free on both Android and iOS, so there is nothing for customers to buy.
Stores holding store credit, wallet balances, or subscription billing, where a compromised account has direct financial value. Membership sites and B2B portals with account-only pricing. Any store that has already dealt with a customer account takeover.
Enter your purchase code and email to activate the license before use.
Turn 2FA on or off for the store. Customers who have not enrolled keep logging in with a password, so switching it on locks nobody out.
Exclude named accounts that should never be asked for an authentication code.
Place the Google Authenticator enrolment form anywhere in the store with this shortcode. By default it also appears on the My Account page.
Set the endpoint slug for the two factor menu on the My Account page.
Set the title shown on that menu.
Show or hide the sidebar widgets on that menu.
The users list shows every account with its two factor status, whether it is active or inactive, and when it was last changed. Use it to check adoption before you promote the feature.
Customers open the two factor menu on the My Account page and pair the store with their Google Authenticator app. They scan the QR code, or type the site name and secret key by hand. Entering the current code from the app confirms the pairing.
The store then appears in the app as shown below, generating a fresh six digit code every thirty seconds.
The login form gains an authentication code field. Customers who have enrolled enter the current code from their app to sign in. Customers who have not enrolled leave it empty and log in with a password as before.
That is what makes 2FA safe to enable on a live store. A stolen password no longer opens an enrolled account, and no existing customer is locked out.
No. Customers enrol themselves from the My Account page. Anyone who has not enrolled logs in with a password as usual, so no one is locked out when you activate the plugin.
Any app that supports standard time based codes, including Google Authenticator on Android and iOS. Customers pair by scanning the QR code or entering the secret key manually.
Yes. Add them to the excluded users list and the two factor prompt will not apply to their account.
On a menu added to the WooCommerce My Account page. You control both the endpoint slug and the title shown on that menu.
Yes. A shortcode places the registration form on any page you choose.
Yes. The users list shows every account, whether two factor is active, and when it was last changed.
Only logged in customers who have purchased this product may leave a review.
Show customers a clear visual tracker for every order stage, from payment through to delivery.
Raise funds for products and projects right from your store, with goals, backers, and live progress.
Sell in person and online from one screen, with real-time stock sync for every WCFM marketplace vendor.
There are no reviews yet.