Best two factor plugins for WordPress

Really Simple Security

#18

by Really Simple Plugins13 days ago

Easily improve site security with WordPress Hardening, Two-Factor Authentication (2FA), Login Protection, Vulnerability Detection and SSL certificate.

XO Security

Up in the last 7 days:3#971

by ishitaka3 months ago

XO Security is a plugin to enhance login related security.

Two Factor Authentication

Down in the last 7 days:2#1,325

by David Anderson / Team Updraft13 days ago

Secure WordPress login with Two Factor Authentication - supports WP, Woo + other login forms, HOTP, TOTP (Google Authenticator, Authy, etc.)

Two Factor (2FA) Authentication via Email

Down in the last 7 days:1#2,175

by Sully18 days ago

Enable one-click login with this WordPress Two-Factor Authentication (2FA) plugin, utilizing email for added security.

Duo Two-Factor Authentication

Down in the last 7 days:2#4,013

by Duo Security1 year ago

Easily add Duo Security two-factor authentication to your WordPress website. Enable two-factor authentication for your admins and/or users.

Duo Universal

Down in the last 7 days:8#4,255

by Duo Security10 months ago

Easily add Duo authentication to your WordPress website. Enable multi-factor authentication for your admins and/or users.

WebAuthn Provider for Two Factor

Up in the last 7 days:91#4,816

by Volodymyr Kolesnykov24 days ago

WebAuthn authentication provider for Two Factor plugin.

WP 2-step verification

Down in the last 7 days:4#5,306

by As2471 year ago

Adds an extra layer of security to your Wordpress Account. Same as Google 2-step verification.

SecSign

#12,460

by SecSign2 years ago

The SecSign ID two-factor authentication WordPress Plugin will be discontinued.

NutsForPress Login Watchdog

Down in the last 7 days:42#14,858

by Christian Gatti11 months ago

NutsForPress Login Watchdog a simple and lightweight plugin that protects your site from unauthorized login attempts.

WP-OTP

Down in the last 7 days:182#16,409

by noplanman21 days ago

Make your WordPress login extra secure with One Time Passwords.

Fuerte-WP

Down in the last 7 days:983#18,000

by Esteban3 days ago

WordPress security and maintenance plugin: schedule auto-updates, block malicious updates during supply chain attacks, enforce two-factor authenticati …

Email OTP Login with default login form

Down in the last 7 days:71#19,832

by Lalit Yadav1 year ago

Adds email OTP (One-Time Password) verification after valid login credentials on the default wp-login.php form for added security.

Rapls Passkey

Down in the last 7 days:254#21,803

by rapls2 days ago

Passwordless login with passkeys (WebAuthn). Nothing to configure, no external service, and password sign-in keeps working.

BaseCloud Shield

Up in the last 7 days:9#21,923

by BaseCloud1 month ago

Enterprise-grade Two-Factor Authentication (2FA) with support for Email, SendGrid API, Webhooks, WhatsApp, and SMS delivery.

Limesnip Simple2FA

Down in the last 7 days:260#22,984

by Maurice Hason1 month ago

Simple email-based two-factor authentication for WordPress. Adds a clean, Linear-inspired verification screen to your login flow.

Moatline Malware Scanner

Down in the last 7 days:1,081#23,897

by Next Nova Technologies2 days ago

Malware scanner, two-factor login, XML-RPC protection and hardening, with WordPress.org integrity checks and an activity log.

Defyn Security Manager

#24,272

by Defyn23 days ago

Hide wp-admin behind a custom login URL and stop brute-force attacks with two-factor authentication, login limits, IP rules and an activity log.

Authlify

Up in the last 7 days:48#24,499

by MantraBrain2 days ago

Hide your login URL, stop brute-force attacks, add CAPTCHA, 2FA and passkeys, and design your login page. Built so you never get locked out.

Nahnu Login Shield

Up in the last 7 days:993#24,574

by Jaime Alnassim19 days ago

Hyperfocused login security. CAPTCHA, brute-force lockout, geo-blocking, 2FA, honeypot, and edge WAF — all from one screen. 100% free.

INI Protector

Up in the last 7 days:822#25,578

by milenfrom1 month ago

Lightweight WordPress hardening — file integrity monitoring, two-factor authentication, login protection, security headers and privacy.

Super Duper Two-Factor Login

Down in the last 7 days:208#26,023

by Super Duper Plugins2 months ago

Free 2FA for WordPress: authenticator app, email codes, backup codes, WooCommerce, role enforcement, plus optional server and upload hardening.

SecureLite Security

#30,733

by PixelGravitas7 days ago

Free firewall, malware scanner, limit login attempts, 2FA and hide login, plus an attack simulation that proves each protection works.

Sigil

Up in the last 7 days:10,193#33,860

by Jean Galea1 day ago

Passkeys and two-factor authentication for WordPress. Sign in without a password, and enrol before you require 2FA by role.

Fluistr Authentication

Up in the last 7 days:12,045#36,189

by 3D Virge1 month ago

Zero Password - One touch - Two Factor Authentication. Secure your WordPress site with a passwordless, simple and intuitive 2-factor authentication.

OpenOTP Two-Factor Authentication

Up in the last 7 days:3,114#39,048

by rcdevs10 years ago

OpenOTP plugin Enable two-factor authentication for your admins and/or users The plugin will transparently handle any OpenOTP Login Mode including, LD …

Identityplus

Down in the last 7 days:2,983#42,011

by Stefan Harsan Farr23 days ago

Identity Plus enables seamless X.509 client certificate based authentication and access control for critical paths in your Wordpress instance.

Authentiq

Up in the last 7 days:1,556#43,760

by authentiq7 years ago

Sign in (and sign up) to WordPress sites using the Authentiq ID app. Strong authentication, without the passwords.

SnapID Two-Factor Authentication

Down in the last 7 days:650#46,737

by TextPower6 years ago

Make usernames and passwords obsolete. SnapID identifies and authenticates when you send a text message. Completely secure, incredibly convenient.

Absolute 2fa For Woocommerce

#46,810

by AbsolutePlugins4 years ago

A Two Factor Authentication addon that will add 2fa settings page under WooCommerce's My Account Page.

GetOTP OTP Verification

Down in the last 7 days:849#47,947

by LaLoka Labs4 years ago

Implement Email OTP and SMS OTP for WordPress and WooCommerce. Support Login with 2FA.

Shakvaro Shield

Up in the last 7 days:12,685#50,166

by Shakil Ahamed4 months ago

Comprehensive WordPress security: firewall, brute force protection, 2FA, file integrity monitoring, hardening checks, and activity logging.

TextTango

Up in the last 7 days:13,489#50,294

by Raphael Sefakor Adinkrah1 month ago

Send SMS from WordPress and WooCommerce with TextTango — passwordless login, order notifications, delivery receipts and consent handling.

DollarMates U2 Secured Authenticator

Up in the last 7 days:9,145#52,135

by dollarmates12 days ago

Tap-to-approve two-factor authentication for WordPress logins, backed by the U2 Secured Authenticator app.

Matoma Two-Factor Authentication

Up in the last 7 days:18,612#52,793

by Matoma5 years ago

Matoma Two-Factor Authentication extends the login process by a 2nd factor to achieve increased security. After the user name and password are request …

CAS Antivirus

#53,638

by soysupercas1 month ago

Free WordPress security plugin with malware scanner, HTTP Security Headers, WordPress core restoration and TOTP Two-Factor Authentication.

Rad 2FA

#54,435

by Rad1 month ago

Secure WordPress login with two-factor authentication: email one-time codes or a TOTP authenticator app, per role.

Aria Security Suite

Down in the last 7 days:3,882#55,492

by Alireza Aminzadeh2 months ago

Standalone WordPress security: local WAF, TOTP 2FA, malware scanner, hardening, live traffic, and an optional Enterprise API.

Kwistech Secure

Up in the last 7 days:4,410#55,502

by kwistech2 months ago

Twelve local hardening controls with an audit trail. No account, no telemetry, no third-party requests, nothing to configure elsewhere.

Zeshan Login 2FA

Up in the last 7 days:15,267#56,093

by zeshan4953 months ago

Add app-based two-factor authentication to your WordPress login. Scan a QR code, then enter a 6-digit code. Backup codes keep you from locking out.

ATV Web Security

#56,220

by atvsoftwarelabs3 days ago

Block persistent changes on a compromised WordPress site — with optional AI-assisted false-positive filtering.

Mamotte! Login URL Changer

#57,438

by SatoruHatano2 months ago

Change your WordPress login URL to a custom slug, with optional IP whitelist and trusted device management for enhanced security.

Mrsea Login

#57,475

by mrsea2 months ago

Modern login design, a custom login URL, and optional authenticator two-factor protection with QR setup and recovery codes.

Holovid® Secure Connect

Up in the last 7 days:5,729#57,638

by Holovid2 months ago

Two-factor authentication: TOTP codes or codeless Secure Connect login. Anti-phishing, encrypted secrets, no external dependencies.

Scudo Security

Up in the last 7 days:12,113#58,912

by Totaliweb2 months ago

Environment-aware security: firewall, malware & integrity scan, brute-force protection and 2FA — safety-first, with previews and rollback.

Rat Two-Factor Authentication

Down in the last 7 days:1,008#59,726

by rathsh1 year ago

Lightweight and powerful Two-Factor Authentication plugin for WordPress with email-based OTP verification.

Folio Drawbridge

Down in the last 7 days:5,941#59,862

by buffcleb2 months ago

Encrypted file vaults with two-factor external sharing, comprehensive audit logging, lifecycle management, and role-based vault oversight.

Gupti 2FA

#59,886

by plexomedia2 months ago

Secure your WordPress login with two-factor authentication (2FA) using any TOTP authenticator app — no external services, no bloat.

Two Step Factor By SE

#61,780

by seplugins1 year ago

Add more security with the two factor authorisation.

Rapid Security Manager

Up in the last 7 days:9,548#63,205

by rapidplugins1 month ago

WordPress security with TOTP 2FA, recovery codes, trusted devices, Basic WAF, CSP, GeoIP, security headers, hardening, and diagnostics.