LockLayer — Two-Factor Auth
TOTP, email codes & backup codes for admins and customers
Everything included
- TOTP + email + backup codes
- Per-role enforcement
- Trusted devices
- Brute-force lockout
- Local QR generation
- AES-256-GCM secrets
Licensed & activated in 60 seconds
- 1
Buy your license
Monthly, yearly or lifetime — your key is emailed instantly.
- 2
Install the plugin
Upload the zip in wp-admin. The free core works right away.
- 3
Enter your key
Paste it in the plugin's License tab to activate.
- 4
Pro unlocked
Pro features, updates and priority support switch on.
Start free. Upgrade when you need more.
The free core is a real, working plugin — not a trial that expires. Pro unlocks the advanced modules with a licence key, and nothing you build on free is lost when you upgrade.
Free core
$0 foreverEverything most sites need. No account, no email required — download and install.
.zip · v1.0.0 · 0 downloads
Pro licence
from $5.00/moSame plugin, every module unlocked by your licence key — plus updates and priority support.
Already bought it? Enter your key:
Or sign in — every licence you own shows up there.
| Feature | Free | Pro |
|---|---|---|
| TOTP + email + backup codes | Included | Included |
| Per-role enforcement | Included | Included |
| Trusted devices | Not included | Included |
| Brute-force lockout | Not included | Included |
| Local QR generation | Not included | Included |
| AES-256-GCM secrets | Not included | Included |
| Core functionality | Included | Included |
| Unlimited use on your own sites | Included | Included |
| Community support (WordPress.org) | Included | Included |
| Automatic 1-click updates | Not included | Included |
| Priority email support | Not included | Included |
| Advanced modules & settings | Not included | Included |
| REST API & WP-CLI access | Not included | Included |
| Setup help from an engineer | Not included | Included |
Upgrading is just entering a key — same plugin, same settings, nothing to reinstall or migrate.
What LockLayer does
Second-step login security for admins and WooCommerce customers: authenticator apps (RFC 6238 TOTP), email one-time codes and single-use backup codes. Per-role enforcement with grace periods, trusted devices, brute-force lockout, XML-RPC blocking and locally-generated QR codes — secrets never leave the server.
- TOTP + email + backup codes
- Per-role enforcement
- Trusted devices
- Brute-force lockout
- Local QR generation
- AES-256-GCM secrets
Built to the same standard as everything we ship
LockLayer is written by the same engineering team that builds client sites for a living, which means it's designed around the problems that actually come up in production rather than a feature list written for a sales page. Code only loads where it's needed, every setting has a sensible default, and the whole thing is documented properly.
- No bloat — assets load only on the screens that use them
- Translation-ready with full i18n support and RTL layouts
- Developer hooks and filters throughout, documented
- Accessible admin UI meeting WCAG contrast and focus standards
Free core, Pro when you need more
The core of LockLayer is free on WordPress.org and always will be. Pro adds the advanced modules, priority support and a year of updates. There's no artificial crippling of the free version — it's genuinely useful on its own, and the upgrade exists for people who need the extra capability.
- Free version is fully functional, not a trial
- Pro unlocks instantly with your license key
- 14-day money-back guarantee on every plan
- Lifetime licences available — pay once, own it
Works well with LockLayer
Most stores running LockLayer pair it with these. Every plugin below shares the same licence system, coding standards and support team.
Also popular with our customers: SiteShield, MailRoute. Browse every wordpress plugins or see our best-selling plugins. Need this built into a custom project? Our WordPress development team can help.
