WordPress/two-factor

Improve Discoverability of Plugin

PluginVulnerabilities opened this issue ยท 4 comments

Is your enhancement related to a problem? Please describe.

When searching the WordPress Plugin Directory for "2fa" the plugin doesn't show up.

Proposed Solution

It would be best if the search functionality of the plugin directory was improved. But perhaps the term "2fa" could be mentioned in listing for the plugin so that it would be easier for users to find the plugin.

Also, on the plugin directory, the plugin is listed as being by "By Plugin Contributors," which makes the plugin seem somewhat sketchy. Other plugins from WordPress list the developer as WordPress Contributors or The WordPress.org community. It doesn't appear there is currently any badge to confirm that a plugin is really coming from WordPress that could also be implemented to better show the plugin is from WordPress.

Designs

No response

Describe alternatives you've considered

No response

Please confirm that you have searched existing issues in this repository.

Yes

Totally agree!

This is somewhat related to #607 which reduced the amount of tags in readme.txt header to 5 and should now pick up 2fa as being associated with this plugin:

Tags: 2fa, mfa, totp, authentication, security

This hasn't gone to WP.org, though.

Also relates to the short description (which has a max of 150 characters), getting that tweaked to similarly include 2FA (and maybe even the plugin name) would help surface the plugin for that sort of search as well:

https://github.com/WordPress/two-factor/blob/71b49316370208aab76fde73e84dcdf34078e4cc/readme.txt#L9C1-L9C150

Could iterate short description to:

Enable Two-Factor Authentication (2FA) using time-based one-time passwords (TOTP), Universal 2nd Factor (U2F), email, and backup verification codes.

=== Two-Factor ===

* Plugin Name: Two Factor

and could iterate plugin display name to Two-Factor Authentication (2FA)?

In terms of the author, that's listed here:

* Author: Plugin Contributors

Perhaps best to put that as WordPress.org Contributors?

Perhaps also some question as to whether, again for discoverability, if we also include Multi-factor authentication (MFA)? in the long description?