Best two factor authentication plugins for WordPress

All-In-One Security (AIOS)

Up in the last 7 days:1#56

by David Anderson / Team Updraft9 days ago

Protect your WordPress site with All-In-One Security (AIOS): easy-to-use login security, a powerful firewall, and much more.

Kadence Security

#88

by Nexcess24 days ago

Harden your site security with Login Security, Two-Factor Authentication (2FA), Vulnerability Scanner, Firewall, and more. Formerly iThemes Security.

WP 2FA

Up in the last 7 days:4#347

by Melapress4 days ago

Get better WordPress login security; add two-factor authentication (2FA) for all your users with this easy-to-use plugin.

Titan Anti-spam & Security

#725

by Themeisle10 days ago

Block spam comments, defend against login attacks, strengthen site security. Anti-spam, brute-force protection & two-factor authentication built in.

miniOrange 2FA

Up in the last 7 days:2#1,616

by miniOrange6 days ago

Free 2FA plugin for unlimited users with Passkey, Google Authenticator, Email/SMS OTP, Push Notification & passwordless login.

FluentAuth

Up in the last 7 days:17#1,667

by WPManageNinja5 days ago

Two-factor authentication, passkeys, social login, magic login, limit login attempts, file change scanning and audit logs for WordPress.

Two Factor (2FA) Authentication via Email

Down in the last 7 days:1#2,175

by Sully18 days ago

Enable one-click login with this WordPress Two-Factor Authentication (2FA) plugin, utilizing email for added security.

WP 2-step verification

Down in the last 7 days:4#5,306

by As2471 year ago

Adds an extra layer of security to your Wordpress Account. Same as Google 2-step verification.

Customize My Account for WooCommerce

Up in the last 7 days:20#7,157

by Coder IT Solution4 months ago

Redesign your WooCommerce My Account page with themes, custom tabs, magic link login, 2FA, passkeys, registration fields, and drag & drop reorder …

Atlant Security

Up in the last 7 days:215#7,412

by Alex3 days ago

Enterprise-grade WordPress security: WAF, brute force protection, malware scanner, 2FA, honeypots, AI crawler control, and post-breach recovery.

Rublon Multi-Factor Authentication (MFA)

Down in the last 7 days:57#9,345

by Rublon2 months ago

Instant account security with effortless multi-factor authentication via Mobile Push, Mobile Passcode (TOTP), WebAuthn/U2F Security Keys, and more.

Per User Prompt for Google Authenticator

Down in the last 7 days:23#10,119

by Ian Dunn5 years ago

Modifies the Google Authenticator plugin so that only users with 2FA enabled are prompted for the authentication token.

IP & Country Blocker Lite

Down in the last 7 days:71#10,545

by Nurul Islam10 months ago

Advanced WordPress security plugin with IP/country blocking and two-factor authentication for comprehensive website protection.

SecSign

#12,460

by SecSign2 years ago

The SecSign ID two-factor authentication WordPress Plugin will be discontinued.

Login Security with Telegram Alerts

Down in the last 7 days:1#12,949

by gabrielrosca2 months ago

Login Security with Telegram Alerts protects WordPress logins, stops brute force, logs activity, and sends real-time Telegram alerts.

Bearmor Security

Up in the last 7 days:248#17,647

by bearmor13 days ago

Completely free WordPress security: firewall, 2FA with authenticator app, malware scan, file integrity, vulnerability alerts, AI summary.

Locktura Security

Up in the last 7 days:463#20,459

by Alain Lankers19 days ago

All-in-one WordPress security suite with local firewall, login protection, anti-spam controls, hardening, monitoring, and alerts.

Encourage User Activation for Google Authenticator

#21,140

by Ian Dunn5 years ago

Allows administrators to either nag users to enable two-factor authentication, or force them to enable it.

Email OTP Login

Down in the last 7 days:328#23,921

by Tushar Sharma1 year ago

Adds OTP (One-Time Password) verification after login for enhanced security in WordPress. OTP is sent to the user's email.

Admin Safety Guard

Up in the last 7 days:710#26,095

by wordpressdirect2 months ago

Stop brute force attacks for free. Limit login attempts, add 2FA and reCAPTCHA, hide wp-login.php, block IPs and see every login on your site.

Nexura Security

Up in the last 7 days:5,311#26,308

by Nexura Security13 days ago

Free WordPress security plugin with malware scanner, firewall, 2FA & brute force protection. Lightweight alternative to Wordfence & Sucuri.

GhostGate

Down in the last 7 days:612#27,910

by codegee09589 months ago

Invisible, intelligent protection for WordPress. GhostGate hides your login page, blocks bots, and turns your site into a ghost fortress.

LoginArmor

Up in the last 7 days:1,920#27,990

by TechArk Solutions3 months ago

Add secure email-based 2FA authentication to WordPress logins with OTP verification, recovery codes, a grace period, and flexible user targeting.

Hard Guard Security

Up in the last 7 days:208#30,606

by endriu77726 days ago

Free WordPress security plugin with malware scanner, vulnerability scanner, 2FA, brute force & login protection, audit log and hardening.

AphoniX

Up in the last 7 days:36,864#31,550

by Aphonic Solutions12 days ago

Protect WordPress login with lightweight custom CAPTCHA, Two-Factor Authentication (2FA), IP blocking, REST hardening, and custom login URL.

Owl Security

Up in the last 7 days:132#31,905

by Owlgorithm Labs2 months ago

All-in-one WordPress security: firewall, malware scanner, login protection, 2FA, and backups in one clean, lightweight dashboard.

Ultimate Security

Up in the last 7 days:3,555#34,143

by WP Ultimate Security13 days ago

Security for the AI era: 2FA, login protection, vulnerability scans, prompt injection scan and AI bot tracking. Free, 3-minute setup.

Configify 2FA

#34,198

by Configify4 months ago

Flexible Two-Factor Authentication for WordPress. Choose Google Authenticator (TOTP), Math CAPTCHA, or Google reCAPTCHA — with a security audit log.

AuthDock

Up in the last 7 days:32,736#34,643

by RAKIBUZZAMAN2 days ago

All-in-one WordPress authentication: social login, magic links, 2FA, brute force protection, session management & security hardening.

Senpai Software

Up in the last 7 days:705#42,224

by Serhii Kolomiitsev3 years ago

Get strong protection against brute force attacks with unique two-factor authentication.

CloudScale Cyber & DevTools

Up in the last 7 days:12,463#42,809

by andrewjbaker2 days ago

Secure your WordPress site without an IT team. Free firewall, two-factor, passkeys and AI audits, with plain-language insights and simple fixes.

PassClip Auth for WordPress

Up in the last 7 days:1,609#44,116

by Passlogy6 years ago

"PassClip Auth" provides strong and easy authentication. "PassClip Auth for WordPress" is the plugin to launch PassClip Auth to Wo …

Loyal Security

Up in the last 7 days:3,674#44,477

by Loyal Security5 days ago

Firewall, malware scanner, file integrity monitoring, hardening, 2FA, backups, and audit logging — one self-contained plugin.

ALMEFY

Down in the last 7 days:209#45,759

by almefyme3 years ago

The Almefy Plugin enables secure 2FA login for your users – without passwords, just by scanning a QR code.​

VMP Security

#46,065

by VMP™8 days ago

Firewall, 9 malware scanners, 2FA, country blocking, audit log preview — all free. 750+ WAF rules and 170,000+ signatures. No paywall.

SnapID Two-Factor Authentication

Down in the last 7 days:650#46,737

by TextPower6 years ago

Make usernames and passwords obsolete. SnapID identifies and authenticates when you send a text message. Completely secure, incredibly convenient.

LoginBerry

Down in the last 7 days:2,401#46,933

by BerryPress12 days ago

Secure WordPress and WooCommerce logins: email verification, two-factor authentication (2FA), passwordless login, login logs, and last-login tracking.

GetOTP OTP Verification

Down in the last 7 days:849#47,947

by LaLoka Labs4 years ago

Implement Email OTP and SMS OTP for WordPress and WooCommerce. Support Login with 2FA.

Squish Site Patrol

Up in the last 7 days:7,178#49,830

by squishit7 months ago

Complete WordPress security, malware scanning, login protection, and performance monitoring in one clean dashboard.

SecondGate

#50,433

by SecondGateWP1 month ago

Passkeys, 2FA, brute-force protection, and country blocking, with real crawlers auto-verified and exempted. No account required, ever.

Cloudusk 2FA

Up in the last 7 days:2,054#52,528

by cloudusk9 months ago

A free and lightweight two-factor authentication (2FA) plugin for WordPress using TOTP and authenticator apps.

Dimitridedou

Up in the last 7 days:78#53,733

by Dimitris Dedousis1 month ago

Two-factor authentication (2FA) via email using one-time passwords (OTP).

Surbma

#54,308

by Surbma3 years ago

The most simple two factor authentication plugin for WordPress.

BrunLabs Sentinel AI

Up in the last 7 days:1,229#55,008

by brunlabsoficial1 month ago

Protect your WordPress site with local security monitoring, Deep Scan, integrity checks, attack detection and multiple defensive layers.

AV 2FA

Up in the last 7 days:8,864#55,065

by Avrasys5 months ago

A simple and secure Two-Factor Authentication plugin that sends a verification code to your email.

OLS 2FA

Up in the last 7 days:13,697#55,521

by One Loop Studio1 year ago

OLS 2FA is a lightweight plugin that enhances your website's security by adding email two-factor authentication (2FA).

SPIDY 2FA LOGIN

Down in the last 7 days:4,253#55,529

by carlocozzetto10 days ago

Two-factor authentication (2FA) via email, SMS or biometric login (WebAuthn/FIDO2) for WordPress. Simple, free, no third-party app required.

Email TFA

Up in the last 7 days:16,207#56,283

by Justin Norton4 months ago

Add an extra layer of security via two-factor authentication with email for WordPress logins.

Gracewell Security Suite

Up in the last 7 days:16,505#56,300

by gracewell8926 days ago

Login protection, authenticator 2FA, manual file integrity checks, WordPress hardening and activity logging in a responsive security dashboard.

Flavor 2FA

#58,596

by kuckovic8 months ago

Lightweight two-factor authentication that just works. Protect your WordPress site with authenticator apps or email codes in under 2 minutes.