Code Craft — web development and digital marketing
WordPress Pluginv1.0.0

LockLayer — Two-Factor Auth

TOTP, email codes & backup codes for admins and customers

No reviews yetUpdated July 2026 Live preview
Live demo

Everything included

  • TOTP + email + backup codes
  • Per-role enforcement
  • Trusted devices
  • Brute-force lockout
  • Local QR generation
  • AES-256-GCM secrets
How activation works

Licensed & activated in 60 seconds

Try the live demo
  1. 1

    Buy your license

    Monthly, yearly or lifetime — your key is emailed instantly.

  2. 2

    Install the plugin

    Upload the zip in wp-admin. The free core works right away.

  3. 3

    Enter your key

    Paste it in the plugin's License tab to activate.

  4. 4

    Pro unlocked

    Pro features, updates and priority support switch on.

What LockLayer does

Second-step login security for admins and WooCommerce customers: authenticator apps (RFC 6238 TOTP), email one-time codes and single-use backup codes. Per-role enforcement with grace periods, trusted devices, brute-force lockout, XML-RPC blocking and locally-generated QR codes — secrets never leave the server.

  • TOTP + email + backup codes
  • Per-role enforcement
  • Trusted devices
  • Brute-force lockout
  • Local QR generation
  • AES-256-GCM secrets

Built to the same standard as everything we ship

LockLayer is written by the same engineering team that builds client sites for a living, which means it's designed around the problems that actually come up in production rather than a feature list written for a sales page. Code only loads where it's needed, every setting has a sensible default, and the whole thing is documented properly.

  • No bloat — assets load only on the screens that use them
  • Translation-ready with full i18n support and RTL layouts
  • Developer hooks and filters throughout, documented
  • Accessible admin UI meeting WCAG contrast and focus standards

Free core, Pro when you need more

The core of LockLayer is free on WordPress.org and always will be. Pro adds the advanced modules, priority support and a year of updates. There's no artificial crippling of the free version — it's genuinely useful on its own, and the upgrade exists for people who need the extra capability.

  • Free version is fully functional, not a trial
  • Pro unlocks instantly with your license key
  • 14-day money-back guarantee on every plan
  • Lifetime licences available — pay once, own it

Works well with LockLayer

Most stores running LockLayer pair it with these. Every plugin below shares the same licence system, coding standards and support team.

Also popular with our customers: SiteShield, MailRoute. Browse every wordpress plugins or see our best-selling plugins. Need this built into a custom project? Our WordPress development team can help.