LockLayer — Two-Factor Auth
TOTP, email codes & backup codes for admins and customers
Everything included
- TOTP + email + backup codes
- Per-role enforcement
- Trusted devices
- Brute-force lockout
- Local QR generation
- AES-256-GCM secrets
Licensed & activated in 60 seconds
- 1
Buy your license
Monthly, yearly or lifetime — your key is emailed instantly.
- 2
Install the plugin
Upload the zip in wp-admin. The free core works right away.
- 3
Enter your key
Paste it in the plugin's License tab to activate.
- 4
Pro unlocked
Pro features, updates and priority support switch on.
What LockLayer does
Second-step login security for admins and WooCommerce customers: authenticator apps (RFC 6238 TOTP), email one-time codes and single-use backup codes. Per-role enforcement with grace periods, trusted devices, brute-force lockout, XML-RPC blocking and locally-generated QR codes — secrets never leave the server.
- TOTP + email + backup codes
- Per-role enforcement
- Trusted devices
- Brute-force lockout
- Local QR generation
- AES-256-GCM secrets
Built to the same standard as everything we ship
LockLayer is written by the same engineering team that builds client sites for a living, which means it's designed around the problems that actually come up in production rather than a feature list written for a sales page. Code only loads where it's needed, every setting has a sensible default, and the whole thing is documented properly.
- No bloat — assets load only on the screens that use them
- Translation-ready with full i18n support and RTL layouts
- Developer hooks and filters throughout, documented
- Accessible admin UI meeting WCAG contrast and focus standards
Free core, Pro when you need more
The core of LockLayer is free on WordPress.org and always will be. Pro adds the advanced modules, priority support and a year of updates. There's no artificial crippling of the free version — it's genuinely useful on its own, and the upgrade exists for people who need the extra capability.
- Free version is fully functional, not a trial
- Pro unlocks instantly with your license key
- 14-day money-back guarantee on every plan
- Lifetime licences available — pay once, own it
Works well with LockLayer
Most stores running LockLayer pair it with these. Every plugin below shares the same licence system, coding standards and support team.
Also popular with our customers: SiteShield, MailRoute. Browse every wordpress plugins or see our best-selling plugins. Need this built into a custom project? Our WordPress development team can help.





