LAUNCH30 at checkout, until 30 November. See the pluginsSee plugins
Enforce two-factor by role, trusted devices, risk-based re-challenge, a compliance report, and front-end customer 2FA — for Dragon Login Security.
Have a code? Enter it at checkout.
A year of updates and support, renewed yearly. Cancel any time; the plugin keeps working.
Not ready to buy? Dragon Login Security is free
Features
Pro add-on for Dragon Login Security. Enforce two-factor by role with a grace period, trusted devices, risk-based re-challenge, a compliance report, and front-end (WooCommerce) customer 2FA.
Require 2FA for chosen roles, with a grace period and a block-until-enrolled screen
See who is covered, in grace, or overdue, and export to CSV
Let users remember a device and skip the code for a set number of days, with revocation
Challenge again on a sign-in from a new device, and alert by email or webhook
A WooCommerce My Account panel (and shortcode) so front-end customers can enrol without wp-admin
A user only counts as compliant once they add a factor AND download backup codes
Guides
Step-by-step guides from the team that builds it. All guides
Security
How to roll out mandatory 2FA by role with a grace period, trusted devices so people are not challenged daily, risk-based re-challenges, and a report that proves who is enrolled.
Security
What actually stops account takeover on WordPress: lockouts that cannot be spoofed, a second factor that gates every login path including XML-RPC, and passkeys for the people who hate codes.
Security
Why every multi-user WordPress site needs an audit trail, what a good one records, how a hash-chained log proves it has not been edited, and how to use it in an incident.
Your licence now keeps working after it lapses. Pro features stay on for every activated site; renewing restores updates and support on the same key. - The licence screen shows **Lapsed**, and what that means, instead of a red Expired. - Enforcement, trusted devices and risk checks already kept running after expiry; reports, settings and customer 2FA now do too. - New versions are fetched only while the licence is current. Nothing else changes.
