Best authentication plugins for WordPress
The most popular authentication plugins for WordPress in November 2026, in WordPress.org’s own popular order, which follows active installs. Limit Login Attempts leads with 300K+ active installs, ahead of Two Factor (100K+) and WPS Limit Login (100K+). All 293 plugins tagged “authentication” are below, with figures from WordPress.org that update every day.
Installs aren’t everything: a recent release, a “Tested up to” that matches the current WordPress, and support threads that get resolved show a plugin is looked after. Open any plugin for its downloads, rank history and alternatives.
Research this niche or see all plugins.
Top 10 authentication plugins
- 1.
Limit Login AttemptsThe most installed authentication plugin, with 300K+ active installs. Rated 4.6 from 202 reviews, last updated 3 years ago. Tested only up to WordPress 6.2.15.
- 2.
Two Factor100K+ active installs. Rated 4.7 from 210 reviews, updated 1 month ago.
- 3.
WPS Limit Login100K+ active installs. Rated 4.9 from 83 reviews, updated 1 month ago.
- 4.
WP-Members Membership Plugin50K+ active installs. Rated 4.6 from 272 reviews, updated 1 week ago.
- 5.
Google Authenticator20K+ active installs. Rated 4.3 from 135 reviews, updated 2 months ago.
- 6.
WP Limit Login Attempts10K+ active installs. Rated 4.6 from 300 reviews, updated 1 month ago.
- 7.
Login for Google Apps by WPAuth10K+ active installs. Rated 4.6 from 64 reviews, updated 1 month ago.
- 8.
Login by Auth010K+ active installs. Rated 3.1 from 18 reviews, last updated 2 years ago. Tested only up to WordPress 6.5.14.
- 9.
Two Factor (2FA) Authentication via Email9K+ active installs. Only 4 reviews so far, updated 2 weeks ago.
- 10.
WP SAML Auth7K+ active installs. Rated 4.5 from 8 reviews, updated 2 months ago.
All 293 plugins tagged “authentication”
Limit Login Attempts
Down in the last 7 days:1#201by Automattic3 years ago
Limit rate of login attempts, including by way of cookies, for each IP. Fully customizable.
- Installs
- 300K+
- Rating
- 4.6(202)
- Downloads
- 282/day
Two Factor
Up in the last 7 days:2#309by WordPress.org1 month ago
Enable Two-Factor Authentication (2FA) using time-based one-time passwords (TOTP), email, and backup verification codes.
- Installs
- 100K+
- Rating
- 4.7(210)
- Downloads
- 4.4K/day
WPS Limit Login
Down in the last 7 days:1#315by NicolasKulka1 month ago
WPS Limit login limit connection attempts by IP address
- Installs
- 100K+
- Rating
- 4.9(83)
- Downloads
- 687/day
WP-Members Membership Plugin
Down in the last 7 days:5#748by Chad Butler12 days ago
The original WordPress membership plugin with content restriction, user login, custom registration fields, user profiles, and more.
- Installs
- 50K+
- Rating
- 4.6(272)
- Downloads
- 769/day
Google Authenticator
Up in the last 7 days:4#1,149by Ivan2 months ago
Google Authenticator for your WordPress blog.
- Installs
- 20K+
- Rating
- 4.3(135)
- Downloads
- 336/day
WP Limit Login Attempts
#1,788by Arshid1 month ago
Limit rate of login attempts and block IP temporarily. Brute force attack protection. GDPR compliant. Captcha enabled.
- Installs
- 10K+
- Rating
- 4.6(300)
- Downloads
- 95/day
Login for Google Apps by WPAuth
Up in the last 7 days:2#1,904by Syed Balkhi1 month ago
Simple secure login and user management through your Google Workspace for WordPress (using oAuth2 and MFA if enabled).
- Installs
- 10K+
- Rating
- 4.6(64)
- Downloads
- 117/day
Login by Auth0
Down in the last 7 days:33#2,063by Auth02 years ago
Login by Auth0 provides improved username/password login, Passwordless login, Social login and Single Sign On for all your sites.
- Installs
- 10K+
- Rating
- 3.1(18)
- Downloads
- 175/day
Two Factor (2FA) Authentication via Email
Down in the last 7 days:1#2,175by Sully18 days ago
Enable one-click login with this WordPress Two-Factor Authentication (2FA) plugin, utilizing email for added security.
- Installs
- 9K+
- Rating
- 5.0(4)
- Downloads
- 85/day
WP SAML Auth
Up in the last 7 days:14#2,565by Pantheon Systems2 months ago
SAML authentication for WordPress.
- Installs
- 7K+
- Rating
- 4.5(8)
- Downloads
- 217/day
Authorizer
Up in the last 7 days:73#2,645by Paul Ryan1 month ago
Authorizer limits login attempts, restricts access to specific users, and authenticates against external sources (OAuth2, Google, LDAP, or CAS).
- Installs
- 7K+
- Rating
- 5.0(20)
- Downloads
- 149/day
Log in with Google
#2,871by rtCamp2 days ago
Minimal plugin that allows WordPress users to log in using Google.
- Installs
- 6K+
- Rating
- 4.6(17)
- Downloads
- 130/day
authLdap
#3,267by heiglandreas3 months ago
Use your existing LDAP flexible as authentication backend for WordPress
- Installs
- 4K+
- Rating
- 5.0(19)
- Downloads
- 47/day
Active Directory Integration / LDAP Integration
Down in the last 7 days:7#3,349by miniOrange5 days ago
Active Directory Integration/LDAP Integration enables login & sync in WordPress with Active Directory/LDAP Directory credentials, 24/7 ACTIVE SUPPORT
- Installs
- 4K+
- Rating
- 4.9(211)
- Downloads
- 93/day
Shibboleth
Up in the last 7 days:7#3,737by michaelryanmcneill4 months ago
Allows WordPress to externalize user authentication and account creation to a Shibboleth Service Provider.
- Installs
- 3K+
- Rating
- 4.3(7)
- Downloads
- 33/day
Duo Two-Factor Authentication
Down in the last 7 days:2#4,013by Duo Security1 year ago
Easily add Duo Security two-factor authentication to your WordPress website. Enable two-factor authentication for your admins and/or users.
- Installs
- 3K+
- Rating
- 3.7(39)
- Downloads
- 44/day
WP Basic Authentication
Down in the last 7 days:8#4,222by nutttaro5 months ago
Basic Authentication for protected your development WordPress site like .htpasswd
- Installs
- 2K+
- Rating
- 5.0(5)
- Downloads
- 60/day
Duo Universal
Down in the last 7 days:8#4,255by Duo Security10 months ago
Easily add Duo authentication to your WordPress website. Enable multi-factor authentication for your admins and/or users.
- Installs
- 2K+
- Rating
- 4.0(1)
- Downloads
- 35/day
Next Active Directory Integration
Up in the last 7 days:4#4,645by neosit2 months ago
Next Active Directory Integration allows WordPress to authenticate, authorize, create and update users against Microsoft Active Directory.
- Installs
- 2K+
- Rating
- 4.8(16)
- Downloads
- 48/day
WP 2-step verification
Down in the last 7 days:4#5,306by As2471 year ago
Adds an extra layer of security to your Wordpress Account. Same as Google 2-step verification.
- Installs
- 1K+
- Rating
- 4.2(27)
- Downloads
- 17/day
Simple LDAP Login
Down in the last 7 days:46#5,588by Clifton Griffin2 years ago
Integrating WordPress with LDAP shouldn't be difficult. Now it isn't. Simple LDAP Login provides all of the features, none of the hassles.
- Installs
- 1K+
- Rating
- 4.3(18)
- Downloads
- 22/day
Keyring
Down in the last 7 days:3#5,718by Beau Lebens3 years ago
An authentication framework that handles authorization/communication with most popular web services.
- Installs
- 1K+
- Rating
- 4.3(6)
- Downloads
- 11/day
HivePress Authentication
Down in the last 7 days:19#5,883by HivePress2 months ago
Allow users to sign in via third-party services.
- Installs
- 1K+
- Rating
- 5.0(1)
- Downloads
- 23/day
JSON API User
Down in the last 7 days:30#6,652by Ali Qureshi2 months ago
Extends the JSON API Plugin to allow RESTful user registration, authentication & many other User Meta, BP functions. A Pro version is also available.
- Installs
- 1K+
- Rating
- 3.9(21)
- Downloads
- 33/day
Sessions
Up in the last 7 days:15#7,091by Pierre Lannoy2 months ago
Powerful sessions manager for WordPress with sessions limiter and full analytics reporting capabilities.
- Installs
- 900+
- Rating
- 4.8(8)
- Downloads
- 16/day
WP Cassify
Up in the last 7 days:19#7,189by Alain-Aymerick FRANCOIS4 months ago
The plugin is an Apereo CAS Client. It performs CAS authentication and autorization for Wordpress.
- Installs
- 900+
- Rating
- 5.0(16)
- Downloads
- 23/day
Easy Basic Authentication
Up in the last 7 days:27#7,501by Matteo Enna1 month ago
Secure your WordPress site with easy and effective basic authentication. Restrict access, monitor attempts, and enhance security.
- Installs
- 800+
- Rating
- 5.0(3)
- Downloads
- 29/day
Protect Login
Up in the last 7 days:8#7,912by Simon Kraft4 months ago
Add an additional layer of protection to your WordPress login and make sure bad actors have a hard time guessing your user's login credentials.
- Installs
- 700+
- Rating
- 5.0(3)
- Downloads
- 12/day
Logged-in-only
Down in the last 7 days:15#7,963by Drivingralle2 months ago
A Plugin to lock down the whole site to prevent public access.
- Installs
- 700+
- Rating
- 5.0(7)
- Downloads
- 12/day
HTTP Authentication
Up in the last 7 days:247#8,316by Daniel Westermann-Clark2 years ago
Use an external authentication source in WordPress.
- Installs
- 600+
- Rating
- 5.0(1)
- Downloads
- 12/day
IP Based Login
Up in the last 7 days:53#8,488by brijeshk895 months ago
IP Based Login allows you to directly login from an authorized IP without password.
- Installs
- 600+
- Rating
- 4.9(23)
- Downloads
- 22/day
Whitelist IP For Limit Login Attempts
Down in the last 7 days:53#8,749by Svetoslav Marinov10 years ago
This plugin allows you whitelist IP addresses so Limit Login Attempt plugin doesn't block them.
- Installs
- 500+
- Rating
- 3.8(5)
- Downloads
- 8/day
wpDirAuth
Down in the last 7 days:19#8,781by Paul Gilzow3 years ago
WordPress directory authentication plugin through LDAP and LDAPS (SSL).
- Installs
- 500+
- Rating
- 4.7(12)
- Downloads
- 11/day
Maestro Connector
Up in the last 7 days:31#9,316by Bluehost3 years ago
Give trusted web professionals admin access to your WordPress account. Revoke anytime.
- Installs
- 400+
- Rating
- 3.0(2)
- Downloads
- 6/day
Passwords Evolved
Down in the last 7 days:38#9,412by Carl Alexander1 year ago
A reimagining of WordPress authentication using modern security practices.
- Installs
- 400+
- Rating
- 5.0(2)
- Downloads
- 22/day
Firebase Authentication
Down in the last 7 days:70#9,425by miniOrange2 months ago
This plugin allows login into WordPress using Firebase user credentials and maps Firebase user data to WordPress user profile.
- Installs
- 400+
- Rating
- 4.0(20)
- Downloads
- 17/day
Membee Login
Up in the last 7 days:28#9,857by DaleAB2 months ago
Add member authentication and access role management to your WordPress site via Membee's powerful Member Single Sign-On web service.
- Installs
- 400+
- Rating
- 3.4(5)
- Downloads
- 11/day
yubikey-plugin
Down in the last 7 days:112#9,968by apb3607 years ago
Enhanced Login Security for Your Wordpress blog.
- Installs
- 300+
- Rating
- 3.8(9)
- Downloads
- 6/day
Sticklight
Up in the last 7 days:109#10,366by Elementor2 months ago
Use WordPress authentication and permissions in external React applications via secure REST API endpoints.
- Installs
- 300+
- Rating
- –
- Downloads
- 11/day
API Bearer Auth
Up in the last 7 days:21#11,023by michielve11 months ago
Access and refresh tokens based authentication plugin for the REST API.
- Installs
- 300+
- Rating
- 5.0(6)
- Downloads
- 10/day
wsecure lite
Down in the last 7 days:37#11,855by Joomla Service Provider1 month ago
wSecure hides admin URL so that default URL will no longer bring up the admin page. if who enter the secret key will be able to access admin area.
- Installs
- 200+
- Rating
- 3.5(4)
- Downloads
- 11/day
Force Login With Email
Up in the last 7 days:44#12,015by MarcosAlexandre6 years ago
Enable login in WordPress only with user e-mail address.
- Installs
- 200+
- Rating
- –
- Downloads
- 11/day
REST API Guard
Up in the last 7 days:252#12,223by Sean Fisher26 days ago
Restrict and control anonymous access to the WordPress REST API, with optional JSON Web Token (JWT) authentication.
- Installs
- 200+
- Rating
- 5.0(2)
- Downloads
- 15/day
OneCode Login
Up in the last 7 days:166#12,420by oaron3 months ago
Simple and secure passwordless login using email verification codes. No passwords to remember, just enter your email and verify with a 6-digit code.
- Installs
- 200+
- Rating
- 5.0(2)
- Downloads
- 11/day
SecSign
#12,460by SecSign2 years ago
The SecSign ID two-factor authentication WordPress Plugin will be discontinued.
- Installs
- 200+
- Rating
- 4.6(14)
- Downloads
- 0/day
OAuth client Single Sign On for WordPress ( OAuth 2.0 SSO )
Down in the last 7 days:52#12,814by mysteve063 years ago
WordPress OAuth client SSO ( OAuth 2.0 & OpenID SSO ) plugin allows login ( Single Sign On ) with your OAuth Servers like AWS Cognito, Amazon, Az …
- Installs
- 200+
- Rating
- 4.1(8)
- Downloads
- 11/day
LatePoint Manager
Down in the last 7 days:34#13,201by Ashraful Sarkar Naiem4 years ago
LatePoint Manager is a new role for LatePoint - Appointment Booking & Reservation plugin. You can contronl pending Appointment Booking list and ma …
- Installs
- 100+
- Rating
- 5.0(2)
- Downloads
- 0/day
Login via Yandex
Up in the last 7 days:5#13,387by webseed2 months ago
Wordpress плагин для входа через Яндекс позволяет легко регистрироваться и входить на сайт Wordpress и Woocommerce через YandexID.
- Installs
- 100+
- Rating
- 5.0(5)
- Downloads
- 8/day
Fail2WP
Down in the last 7 days:3#13,947by joho6820 days ago
WordPress security plugin. Requires WordPress 6.2+ and PHP 7.4+.
- Installs
- 100+
- Rating
- 5.0(2)
- Downloads
- 11/day
Open Access SSO
Up in the last 7 days:755#14,432by idgold1 month ago
Free, privacy-first SAML 2.0 and OpenID Connect single sign-on for WordPress. Role mapping, access control, multi-IdP. No premium tier, no tracking.
- Installs
- 100+
- Rating
- –
- Downloads
- 25/day