BaseCloud Shield vs Login With Ajax – Fast Logins, 2FA, Redirects

BaseCloud Shield is a lightweight yet powerful security plugin that enforces Two-Factor Authentication (2FA) on your WordPress login page. Unlike other bloat-heavy plugins, BaseCloud Shield focuses on reliability and flexibility in OTP delivery. Key Features: Plug & Play: Works immediately using standard WordPress email delivery. Multi-Recipient System: Send OTPs to the logging-in user, a manager email, or selected users. Multi-Channel Delivery: Choose multiple delivery methods simultaneously (Email, SendGrid, WhatsApp, SMS, Webhook). WhatsApp Integration: Send OTPs directly via WhatsApp using Twilio API. SMS Integration: Deliver OTPs via SMS using Twilio API. SendGrid API V3: Native integration for high-deliverability emails. Webhook Support: Connect to custom webhooks for advanced automation flows. Secure OTPs: 6-digit one-time passwords that expire automatically. Browser Trust: “Remember this device” functionality to reduce friction for authorized users. Advanced Attack Protection (v1.4.2): Credential stuffing detection, progressive delays, username enumeration protection. External Services This plugin may connect to external third-party services depending on your configuration. Below is a detailed explanation of what services are used, what data is sent, and when: SendGrid Email API (Optional) If you select “SendGrid API” as your delivery method in the plugin settings, this plugin will send data to SendGrid’s email service to deliver one-time password (OTP) codes. Service: SendGrid by Twilio What it’s used for: Sending two-factor authentication codes via email with improved deliverability When data is sent: Every time a user attempts to log in and 2FA is enabled Data sent: Recipient email address (user’s email or manager email if configured) Sender email address (configured in plugin settings) Site name Username attempting to log in 6-digit one-time password code Email subject and HTML body API Endpoint: https://api.sendgrid.com/v3/mail/send Terms of Service: https://www.twilio.com/legal/tos Privacy Policy: https://www.twilio.com/legal/privacy Important: You must have a SendGrid account and API key to use this feature. You are responsible for complying with SendGrid’s terms of service and ensuring proper data handling practices. Twilio API for WhatsApp & SMS (Optional) If you select “WhatsApp” or “SMS” as delivery methods, the plugin will send data to Twilio’s API to deliver one-time password codes. Service: Twilio What it’s used for: Sending two-factor authentication codes via WhatsApp and/or SMS When data is sent: Every time a user attempts to log in and 2FA is enabled with WhatsApp/SMS selected Data sent: Recipient phone number (from user meta field ‘billing_phone’) Sender phone number (WhatsApp number or SMS number configured in settings) Site name Username attempting to log in 6-digit one-time password code Message body API Endpoint: https://api.twilio.com/2010-04-01/Accounts/{AccountSid}/Messages.json Terms of Service: https://www.twilio.com/legal/tos Privacy Policy: https://www.twilio.com/legal/privacy Important: You must have a Twilio account with WhatsApp and/or SMS capabilities enabled. Phone numbers must be stored in user meta (field: ‘billing_phone’). You are responsible for complying with Twilio’s terms of service. Custom Webhook (Optional) If you select “Webhook” as a delivery method, the plugin will send login notification data to a webhook URL you configure. Service: Custom webhook endpoint (configured by you) What it’s used for: Sending login notifications to external systems for custom processing When data is sent: Every time a user attempts to log in and 2FA is enabled Data sent: Site name Username attempting to log in User email address 6-digit one-time password code Recipient information array Timestamp of login attempt Endpoint: User-configured webhook URL Important: When using the webhook option, you are responsible for the security and privacy compliance of the endpoint you configure. Ensure your webhook endpoint uses HTTPS and follows proper data protection practices. Standard WordPress Email (Default) By default, this plugin uses WordPress’s built-in wp_mail() function, which does not involve any external services unless your WordPress installation is configured to use a third-party SMTP service.

Login With Ajax is for sites that need user logins or registrations and would like to avoid the normal wordpress login pages, or add AJAX effects to the regular login pages. This plugin adds the capability of placing a login widget in the sidebar with smooth AJAX login effects. Some of the features: AJAX-powered logins, no screen refreshes! Login Registration Remember/Reset Password PassKeys (new in 4.4) Next-Generation security, no passwords required! Users can log in without a username AND password. Biometric support (fingerprint, face ID, etc.) 2FA – Two-Factor Authentication TOTP – Time-based One-Time Password Scan a QR code with popular authenticator apps like Google Authenticator, Authy, etc. Email – Send a code to the user’s email address Backup Codes – Generate and use backup codes Integrate 2FA setup options in other plugin account pages WooCommerce BuddyPress BuddyBoss “AJAXify” other login forms Create a better login experience in the default WP login form with AJAX effects for logins, password recovery and registration. Regular WP login and registration forms WooCommerce login forms Events Manager login forms Many ways to display and customize your login form: Gutenberg Blocks Full-site editor compatible Widgets (classic and blocks) Shortcode Template Tags PHP API Flexible templates and options Multiple templates to choose from Including Modal/Pop-Up login forms Responsive and Accessible! Choose a base color for each individual login form. Individual display options via all display methods (e.g. Gutenberg Blocks, Shortcode etc.) Create your own upgrade-safe templates, or override our own ones. Custom Login/Logout redirections Redirect users to custom URLs on Login and Logout Redirect users with different roles to custom URLs WPML – Language-specific redirects Modify registration email templates Other Features Disable CSS styling (via shortcode or PHP display methods) SSL-compatible Fallback mechanism, will still work on javascript-disabled browsers Compatible with WordPress, MultiSite, BuddyPress and many other plugins Developer Friendly Multiple PHP and JS hooks Overridable CSS and JS files Easy-to-customize and overridable template files Well-documented First released in 2009, the oldest login plugin for WordPress, regularly maintained and updated since then! Pro Add-On Features As of version 4.0, we now offer a Pro add-on which extends Login With AJAX with multiple new features: Security Features – Harden the security of your login forms 2FA – Additional Two-Factor Authentication Methods: SMS – Send a code to the user’s phone WhatsApp – Send a message, user clicks a button, done! Telegram – Send a message, user clicks a button, done! reCaptcha (v2, v2 Invisible and v3) Login limiter 3rd Party Page Builder Blocks/Widgets/Modules Divi Elementor More on the way! Getting Help/Support Version 4 is a major overhaul of the plugin, which has remained largely unchanged for 11 years yet remained a staple tool for logins to WordPress! Changes include a complete rewrite of login templates updated to modern stadnards and practices, as well as new WP features such as Gutenberg Blocks. If you’re stuck, we strongly suggest visiting our Documentation Site which contains exensive information and advice on setup and troubleshooting. If you have any problems with the plugin after reading our Troubleshooting, please visit our freely supported community forums, or Go Pro for premium support. Notes Please visit our documentation site, which is regularly and extensively maintained and updated with all the information relevant to getting started, advanced setup and troubleshooting common issues.