GoUltra Auth

GoUltra Auth is a plugin for WordPress that introduces a WhatsApp-based one-time code as a second authentication factor during the login process. After a user successfully enters their password, they are prompted to input a short code that is delivered to their WhatsApp account, making it so that access to the admin area cannot be gained with just a password. The plugin connects to the GoUltra service, which sends the authentication code through a WhatsApp Authentication-category message. This approach addresses several security concerns associated with SMS-based authentication, such as message interception, unreliable delivery due to poor reception, and vulnerabilities to SIM-swap attacks. By relying on WhatsApp, the tool reduces exposure to these risks, and codes can be received over Wi-Fi even without a cellular signal. GoUltra Auth is positioned as a solution for enhancing the security of WordPress admin logins, and it is also mentioned in connection with WooCommerce, indicating its relevance for e-commerce site administrators and store owners who use WordPress. Additional features included in GoUltra Auth are rate limiting, recovery controls, and an audit log, which contribute to managing authentication attempts, providing options for account recovery, and maintaining a record of authentication events. The evidence notes that the cost of using WhatsApp for code delivery is typically lower than SMS in most markets, but does not specify the exact pricing or licensing model for the plugin itself. GoUltra Auth is delivered as a WordPress plugin and requires integration with the GoUltra service for code delivery. No claims are made about open-source licensing or specific pricing tiers. The tool is designed for WordPress site administrators seeking to add a second layer of security to their login process using WhatsApp one-time codes.