Best totp plugins for WordPress
The most popular totp plugins for WordPress in November 2026, in WordPress.org’s own popular order, which follows active installs. Two Factor leads with 100K+ active installs, ahead of BAAR MFA (10+) and Rad 2FA (fewer than 10). All 11 plugins tagged “totp” are below, with figures from WordPress.org that update every day.
Installs aren’t everything: a recent release, a “Tested up to” that matches the current WordPress, and support threads that get resolved show a plugin is looked after. Open any plugin for its downloads, rank history and alternatives.
Research this niche or see all plugins.
Top 10 totp plugins
- 1.
Two FactorThe most installed totp plugin, with 100K+ active installs. Rated 4.7 from 210 reviews, updated 1 month ago.
- 2.
BAAR MFA10+ active installs. No reviews yet, updated 6 months ago. Tested only up to WordPress 6.9.11.
- 3.
Rad 2FAFewer than 10 active installs. No reviews yet, updated 1 month ago.
- 4.
Flavor 2FAFewer than 10 active installs. No reviews yet, updated 8 months ago. Tested only up to WordPress 6.9.11.
- 5.
Gupti 2FAFewer than 10 active installs. No reviews yet, updated 2 months ago.
- 6.
OOSOFT 2FA SecurityFewer than 10 active installs. No reviews yet, updated 5 months ago. Tested only up to WordPress 6.9.11.
- 7.
Brain 2FAFewer than 10 active installs. No reviews yet, updated 1 week ago.
- 8.
Digipacket Login Security with Two-Factor AuthenticationFewer than 10 active installs. No reviews yet, updated 4 months ago.
- 9.
Sergeev Studio Two-Factor LoginFewer than 10 active installs. No reviews yet, updated 2 weeks ago.
- 10.
SecureAuth Authenticator 2FAFewer than 10 active installs. No reviews yet, last updated 1 year ago. Tested only up to WordPress 6.8.12.
All 11 plugins tagged “totp”
Two Factor
Up in the last 7 days:2#309by WordPress.org1 month ago
Enable Two-Factor Authentication (2FA) using time-based one-time passwords (TOTP), email, and backup verification codes.
- Installs
- 100K+
- Rating
- 4.7(210)
- Downloads
- 4.4K/day
BAAR MFA
Up in the last 7 days:6,723#35,579by BAAR Technologies6 months ago
Secure your WordPress site with BAAR MFA — a complete Multi-Factor Authentication plugin offering TOTP, Email OTP, Push Notifications, Security Questi …
- Installs
- 10+
- Rating
- –
- Downloads
- 0/day
Rad 2FA
#54,435by Rad1 month ago
Secure WordPress login with two-factor authentication: email one-time codes or a TOTP authenticator app, per role.
- Installs
- <10
- Rating
- –
- Downloads
- 3/day
Flavor 2FA
#58,596by kuckovic8 months ago
Lightweight two-factor authentication that just works. Protect your WordPress site with authenticator apps or email codes in under 2 minutes.
- Installs
- <10
- Rating
- –
- Downloads
- 0/day
Gupti 2FA
#59,886by plexomedia2 months ago
Secure your WordPress login with two-factor authentication (2FA) using any TOTP authenticator app — no external services, no bloat.
- Installs
- <10
- Rating
- –
- Downloads
- 0/day
OOSOFT 2FA Security
Down in the last 7 days:4,064#61,330by oosoft5 months ago
Enterprise-grade Two-Factor Authentication for WordPress with TOTP, Email OTP, backup codes, and role-based enforcement.
- Installs
- <10
- Rating
- –
- Downloads
- 0/day
Brain 2FA
Up in the last 7 days:8,689#62,709by Braintum10 days ago
Add two-factor authentication and passwordless passkey sign-in to WordPress accounts.
- Installs
- <10
- Rating
- –
- Downloads
- 11/day
Digipacket Login Security with Two-Factor Authentication
Up in the last 7 days:3,331#66,021by Digipacket4 months ago
Standards-based two-factor authentication (TOTP & e-mail), brute-force lockout, login alerts and an audit log — with no external service.
- Installs
- <10
- Rating
- –
- Downloads
- 0/day
Sergeev Studio Two-Factor Login
Down in the last 7 days:4,417#67,928by sergeev.studio14 days ago
Two-factor login for WordPress with codes from an authenticator app or a Telegram bot, backup codes and required 2FA for chosen roles.
- Installs
- <10
- Rating
- –
- Downloads
- 6/day
SecureAuth Authenticator 2FA
#73,182by Helmi1 year ago
Adds TOTP-based two-factor authentication (2FA) via SecureAuth Authenticator to your WordPress login page.
- Installs
- <10
- Rating
- –
- Downloads
- 0/day