Add a one-time password (OTP) verification step via email to your WordPress default login (wp-login.php). Role-based settings, no third-party service required. https://webnotics.org/email-otp-login-with-default-login-form/