Title: Per User Prompt for Google Authenticator
Author: Ian Dunn
Published: <strong>11 ธันวาคม 2013</strong>
Last modified: 23 เมษายน 2021

---

Search plugins

![](https://ps.w.org/google-authenticator-per-user-prompt/assets/banner-772x250.
png?rev=1152546)

This plugin **hasn’t been tested with the latest 3 major releases of WordPress**.
It may no longer be maintained or supported and may have compatibility issues when
used with more recent versions of WordPress.

![](https://ps.w.org/google-authenticator-per-user-prompt/assets/icon-128x128.png?
rev=1152546)

# Per User Prompt for Google Authenticator

 By [Ian Dunn](https://profiles.wordpress.org/iandunn/)

[Download](https://downloads.wordpress.org/plugin/google-authenticator-per-user-prompt.0.7.zip)

 * [Details](https://th.wordpress.org/plugins/google-authenticator-per-user-prompt/#description)
 * [Reviews](https://th.wordpress.org/plugins/google-authenticator-per-user-prompt/#reviews)
 *  [Installation](https://th.wordpress.org/plugins/google-authenticator-per-user-prompt/#installation)
 * [Development](https://th.wordpress.org/plugins/google-authenticator-per-user-prompt/#developers)

 [Support](https://wordpress.org/support/plugin/google-authenticator-per-user-prompt/)

## Description

The [Google Authenticator](https://wordpress.org/plugins/google-authenticator/) 
plugin is a great way to add two-factor authentication to your site, but it does
have one major drawback: it asks every user for the authentication token, regardless
of whether they have 2FA enabled or not. This can be confusing for users, which 
prevents some administrators from using the plugin on multi-user sites.

This plugin modifies the way that Google Authenticator behaves so that only users
who have it enabled are prompted for the token. If a user doesn’t have it enabled,
then they’ll proceed directly to the Administration Panels; if they do have it enabled
then they’ll be prompted to enter their 2FA code.

## Screenshots

 * [[
 * The token prompt no longer appears on the initial login screen
 * [[
 * If a user has two factor auth enabled, they’ll see the prompt on a secondary 
   screen, after they login

## Installation

For help installing this (or any other) WordPress plugin, please read the [Managing Plugins](https://codex.wordpress.org/Managing_Plugins)
article on the Codex.

Once the plugin is installed and activated, you don’t need to do anything else.

## FAQ

### Does this replace the Google Authenticator plugin?

No, this is built on top of the Google Authenticator plugin and requires it in order
to work.

### Is this plugin secure?

I’ve done my best to ensure that it is, but just in case I missed anything [I also offer a security bounty](https://hackerone.com/iandunn-projects/)
for any vulnerabilities that can be found and privately disclosed in any of my plugins.

### What should I do if I can’t login?

Since this plugin integrates tightly with the Google Authenticator plugin, it’s 
possible that at some point in the future, changes in Google Authenticator will 
break the customized login process that this plugin implements. If that happens,
I’ll release an updated version of this plugin to make it compatible with the new
changes.

You may have difficulty installing the updated version if you can’t login, though,
so you’ll need to deactivate this plugin by some alternate means, and then update
it before re-activating it.

There are several alternate methods of deactivating the plugin: you can [delete it via S/FTP, or by changing a database option in phpMyAdmin](http://www.wpbeginner.com/plugins/how-to-deactivate-all-plugins-when-not-able-to-access-wp-admin/),
or you can ask your hosting company to delete the plugin for you.

## Reviews

![](https://secure.gravatar.com/avatar/b3a801d22f7f5b3bd85bd88e7ff5e65b05caab1774ed9f311fb84cf10b6128e3?
s=60&d=retro&r=g)

### 󠀁[Didn’t work for me](https://wordpress.org/support/topic/didnt-work-for-me-107/)󠁿

 [mickoneill30](https://profiles.wordpress.org/mickoneill30/) 21 พฤศจิกายน 2017

On installing I get told I don’t meet the system requirements. The Google Authenticator
plugin must be installed and activated. (It is) PHP 5.2.4+ (You’re running version
5.6.31) (It’s telling me I’m running a later version of PHP) WordPress 4.4+ (You’re
running version 4.9) (And I’m running the latest version of Wordpress)

![](https://secure.gravatar.com/avatar/b38bfb25632ff7085cdccc8529efb5069042aab9e158d4e2f49603f15e944ff0?
s=60&d=retro&r=g)

### 󠀁[Similar Login to Gmail](https://wordpress.org/support/topic/similar-login-to-gmail/)󠁿

 [ModestoBorn](https://profiles.wordpress.org/risingphoenix1979/) 15 มีนาคม 2017

Installing this plugin makes logging into my WordPress website just like logging
in my Gmail when hooked up to the Google Authenticator app on my Android phone. 
I appreciate the extra security. Thank you!

![](https://secure.gravatar.com/avatar/3fab65907b82349429db1e97821bdc455fb8c0999f378326b9b75447461c2e93?
s=60&d=retro&r=g)

### 󠀁[Works great!](https://wordpress.org/support/topic/works-great-3428/)󠁿

 [Mahdi Yazdani](https://profiles.wordpress.org/mahdiyazdani/) 31 ธันวาคม 2016

It is a superb idea to have these kinds of plugins for free without any annoying
ads.

![](https://secure.gravatar.com/avatar/8181a3b6237c356051347d4f37a76b293000bf12b437835e2cfcf10fadf2a8b3?
s=60&d=retro&r=g)

### 󠀁[Great!](https://wordpress.org/support/topic/great-4802/)󠁿

 [Sayd](https://profiles.wordpress.org/sayd/) 3 กันยายน 2016

Thank you for your work!

![](https://secure.gravatar.com/avatar/0fabba8f338d86023b2a2504652c48091ec21af5b038d96d5bf6706c2d43de62?
s=60&d=retro&r=g)

### 󠀁[Great](https://wordpress.org/support/topic/great-4209/)󠁿

 [donikatz](https://profiles.wordpress.org/donikatz/) 3 กันยายน 2016

Can confirm this works in WP 4.4. IMO, a necessary addition to the great Google 
Authenticator plugin. Thanks!

 [ Read all 10 reviews ](https://wordpress.org/support/plugin/google-authenticator-per-user-prompt/reviews/)

## Contributors & Developers

“Per User Prompt for Google Authenticator” is open source software. The following
people have contributed to this plugin.

Contributors

 *   [ Ian Dunn ](https://profiles.wordpress.org/iandunn/)

[Translate “Per User Prompt for Google Authenticator” into your language.](https://translate.wordpress.org/projects/wp-plugins/google-authenticator-per-user-prompt)

### Interested in development?

[Browse the code](https://plugins.trac.wordpress.org/browser/google-authenticator-per-user-prompt/),
check out the [SVN repository](https://plugins.svn.wordpress.org/google-authenticator-per-user-prompt/),
or subscribe to the [development log](https://plugins.trac.wordpress.org/log/google-authenticator-per-user-prompt/)
by [RSS](https://plugins.trac.wordpress.org/log/google-authenticator-per-user-prompt/?limit=100&mode=stop_on_copy&format=rss).

## Changelog

#### v0.7 ()

 * [SECURITY] Hardening against low-severity vulnerability where against application
   passwords were susceptible to timing attacks.
 * [UPDATE] Minor cleanup.

#### v0.6 (2016-04-28)

 * [SECURITY] Harden nonce verification to mitigate by-passing regular password 
   authentication. This is a preventative step against a theoretical attack vector,
   not a response to a proven vulnerability. For more details, see https://github.
   com/julien731/WP-Google-Authenticator/issues/11.
 * [FIX] Add support for using application passwords with email addresses instead
   of only usernames (new in WordPress 4.5).
 * [FIX] Resolve [conflict with Theme My Login plugin](https://wordpress.org/support/topic/doesnt-work-on-website)
   by checking for login header/footer functions.

#### v0.5 (2014-06-22)

 * [FIX] The ‘Remember Me’ flag is no longer ignored when logging in.
 * [NEW] Added an automated acceptance test suite. Alliteration FTW!

#### v0.4 (2013-12-30)

 * [UPDATE] Added support for new application password format in Google Authenticator
   0.45

#### v0.3 (2013-12-20)

 * [NEW] Focus automatically set on token input field

#### v0.2 (2013-12-11)

 * [FIX] User with valid username/password no longer temporarily logged in before
   entering 2FA token. Prevents leaking auth cookies. props cathyjf

#### v0.1 (2013-12-10)

 * [NEW] Initial release

## Meta

 *  Version **0.7**
 *  Last updated **5 ปี ago**
 *  Active installations **400+**
 *  WordPress version ** 4.4 or higher **
 *  Tested up to **4.9.29**
 *  Language
 * [English (US)](https://wordpress.org/plugins/google-authenticator-per-user-prompt/)
 * Tags
 * [google authenticator](https://th.wordpress.org/plugins/tags/google-authenticator/)
   [two factor authentication](https://th.wordpress.org/plugins/tags/two-factor-authentication/)
 *  [Advanced View](https://th.wordpress.org/plugins/google-authenticator-per-user-prompt/advanced/)

## Ratings

 4.6 out of 5 stars.

 *  [  9 5-star reviews     ](https://wordpress.org/support/plugin/google-authenticator-per-user-prompt/reviews/?filter=5)
 *  [  0 4-star reviews     ](https://wordpress.org/support/plugin/google-authenticator-per-user-prompt/reviews/?filter=4)
 *  [  0 3-star reviews     ](https://wordpress.org/support/plugin/google-authenticator-per-user-prompt/reviews/?filter=3)
 *  [  0 2-star reviews     ](https://wordpress.org/support/plugin/google-authenticator-per-user-prompt/reviews/?filter=2)
 *  [  1 1-star review     ](https://wordpress.org/support/plugin/google-authenticator-per-user-prompt/reviews/?filter=1)

[Your review](https://wordpress.org/support/plugin/google-authenticator-per-user-prompt/reviews/#new-post)

[See all reviews](https://wordpress.org/support/plugin/google-authenticator-per-user-prompt/reviews/)

## Contributors

 *   [ Ian Dunn ](https://profiles.wordpress.org/iandunn/)

## Support

Got something to say? Need help?

 [View support forum](https://wordpress.org/support/plugin/google-authenticator-per-user-prompt/)

## Donate

Would you like to support the advancement of this plugin?

 [ Donate to this plugin ](http://nhmin.org)