Best two factor authentication plugins for WordPress

All-In-One Security (AIOS)

#56

by David Anderson / Team Updraft10 days ago

Protect your WordPress site with All-In-One Security (AIOS): easy-to-use login security, a powerful firewall, and much more.

Kadence Security

#88

by Nexcess26 days ago

Harden your site security with Login Security, Two-Factor Authentication (2FA), Vulnerability Scanner, Firewall, and more. Formerly iThemes Security.

WP 2FA

Up in the last 7 days:3#347

by Melapress5 days ago

Get better WordPress login security; add two-factor authentication (2FA) for all your users with this easy-to-use plugin.

Titan Anti-spam & Security

Down in the last 7 days:1#725

by Themeisle12 days ago

Block spam comments, defend against login attacks, strengthen site security. Anti-spam, brute-force protection & two-factor authentication built in.

miniOrange 2FA

Up in the last 7 days:2#1,616

by miniOrange8 days ago

Free 2FA plugin for unlimited users with Passkey, Google Authenticator, Email/SMS OTP, Push Notification & passwordless login.

FluentAuth

Up in the last 7 days:20#1,662

by WPManageNinja6 days ago

Two-factor authentication, passkeys, social login, magic login, limit login attempts, file change scanning and audit logs for WordPress.

Two Factor (2FA) Authentication via Email

Down in the last 7 days:1#2,174

by Sully19 days ago

Enable one-click login with this WordPress Two-Factor Authentication (2FA) plugin, utilizing email for added security.

WP 2-step verification

Up in the last 7 days:3#5,304

by As2471 year ago

Adds an extra layer of security to your Wordpress Account. Same as Google 2-step verification.

BetterShield

Up in the last 7 days:2,407#7,126

by WPDevelopertoday

Security audit in plain language, 30 hardening fixes you can undo, two-factor authentication (2FA), passkeys, login protection and an activity log.

Customize My Account for WooCommerce

Up in the last 7 days:29#7,153

by Coder IT Solution4 months ago

Redesign your WooCommerce My Account page with themes, custom tabs, magic link login, 2FA, passkeys, registration fields, and drag & drop reorder …

Atlant Security

Up in the last 7 days:166#7,391

by Alex4 days ago

Enterprise-grade WordPress security: WAF, brute force protection, malware scanner, 2FA, honeypots, AI crawler control, and post-breach recovery.

Rublon Multi-Factor Authentication (MFA)

Down in the last 7 days:25#9,345

by Rublon2 months ago

Instant account security with effortless multi-factor authentication via Mobile Push, Mobile Passcode (TOTP), WebAuthn/U2F Security Keys, and more.

Per User Prompt for Google Authenticator

Down in the last 7 days:89#10,168

by Ian Dunn5 years ago

Modifies the Google Authenticator plugin so that only users with 2FA enabled are prompted for the authentication token.

IP & Country Blocker Lite

Down in the last 7 days:52#10,533

by Nurul Islam10 months ago

Advanced WordPress security plugin with IP/country blocking and two-factor authentication for comprehensive website protection.

SecSign

Up in the last 7 days:23#12,441

by SecSign2 years ago

The SecSign ID two-factor authentication WordPress Plugin will be discontinued.

Login Security with Telegram Alerts

Up in the last 7 days:46#12,916

by gabrielrosca2 months ago

Login Security with Telegram Alerts protects WordPress logins, stops brute force, logs activity, and sends real-time Telegram alerts.

Bearmor Security

Down in the last 7 days:121#17,892

by bearmor14 days ago

Completely free WordPress security: firewall, 2FA with authenticator app, malware scan, file integrity, vulnerability alerts, AI summary.

Locktura Security

Down in the last 7 days:311#20,999

by Alain Lankers1 day ago

Protect WordPress with a local firewall, login security, 2FA, file checks, activity logs, and alerts. No account or license required.

Encourage User Activation for Google Authenticator

Up in the last 7 days:95#21,187

by Ian Dunn5 years ago

Allows administrators to either nag users to enable two-factor authentication, or force them to enable it.

Email OTP Login

Down in the last 7 days:514#24,120

by Tushar Sharma1 year ago

Adds OTP (One-Time Password) verification after login for enhanced security in WordPress. OTP is sent to the user's email.

Nexura Security

#25,466

by Nexura Security14 days ago

Free WordPress security plugin with malware scanner, firewall, 2FA & brute force protection. Lightweight alternative to Wordfence & Sucuri.

Admin Safety Guard

Up in the last 7 days:692#26,068

by wordpressdirect2 months ago

Stop brute force attacks for free. Limit login attempts, add 2FA and reCAPTCHA, hide wp-login.php, block IPs and see every login on your site.

LoginArmor

Up in the last 7 days:3,217#26,899

by TechArk Solutions3 months ago

Add secure email-based 2FA authentication to WordPress logins with OTP verification, recovery codes, a grace period, and flexible user targeting.

Hard Guard Security

#30,890

by endriu77727 days ago

Free WordPress security plugin with malware scanner, vulnerability scanner, 2FA, brute force & login protection, audit log and hardening.

AphoniX

Up in the last 7 days:41,164#32,031

by Aphonic Solutions13 days ago

Protect WordPress login with lightweight custom CAPTCHA, Two-Factor Authentication (2FA), IP blocking, REST hardening, and custom login URL.

Owl Security

Down in the last 7 days:139#32,037

by Owlgorithm Labstoday

All-in-one WordPress security: firewall, malware scanner, login security, 2FA and automatic backups. Free, no license needed.

VMP Security

Up in the last 7 days:11,269#32,683

by VMP™9 days ago

Firewall, 9 malware scanners, 2FA, country blocking, audit log preview — all free. 750+ WAF rules and 170,000+ signatures. No paywall.

Ultimate Security

#33,776

by WP Ultimate Security14 days ago

Security for the AI era: 2FA, login protection, vulnerability scans, prompt injection scan and AI bot tracking. Free, 3-minute setup.

GhostGate

#34,297

by codegee09589 months ago

Invisible, intelligent protection for WordPress. GhostGate hides your login page, blocks bots, and turns your site into a ghost fortress.

Configify 2FA

Down in the last 7 days:1,349#34,812

by Configify4 months ago

Flexible Two-Factor Authentication for WordPress. Choose Google Authenticator (TOTP), Math CAPTCHA, or Google reCAPTCHA — with a security audit log.

Senpai Software

Up in the last 7 days:2,168#38,550

by Serhii Kolomiitsev3 years ago

Get strong protection against brute force attacks with unique two-factor authentication.

PassClip Auth for WordPress

Up in the last 7 days:4,348#40,431

by Passlogy6 years ago

"PassClip Auth" provides strong and easy authentication. "PassClip Auth for WordPress" is the plugin to launch PassClip Auth to Wo …

GetOTP OTP Verification

Up in the last 7 days:3,025#40,947

by LaLoka Labs4 years ago

Implement Email OTP and SMS OTP for WordPress and WooCommerce. Support Login with 2FA.

Role Enforcement for Two Factor

#42,325

by cliencedigital1 month ago

Require two-factor authentication for selected user roles. An add-on for the Two Factor plugin.

SnapID Two-Factor Authentication

#44,287

by TextPower6 years ago

Make usernames and passwords obsolete. SnapID identifies and authenticates when you send a text message. Completely secure, incredibly convenient.

AuthDock

#44,709

by RAKIBUZZAMANtoday

All-in-one WordPress authentication: social login, magic links, 2FA, brute force protection, session management & security hardening.

ALMEFY

Down in the last 7 days:6,836#45,593

by almefyme3 years ago

The Almefy Plugin enables secure 2FA login for your users – without passwords, just by scanning a QR code.​

CloudScale Cyber & DevTools

Down in the last 7 days:16,997#46,594

by andrewjbaker3 days ago

Secure your WordPress site without an IT team. Free firewall, two-factor, passkeys and AI audits, with plain-language insights and simple fixes.

LoginBerry

Down in the last 7 days:2,401#46,933

by BerryPress14 days ago

Secure WordPress and WooCommerce logins: email verification, two-factor authentication (2FA), passwordless login, login logs, and last-login tracking.

Loyal Security

Down in the last 7 days:9,566#47,862

by Loyal Security6 days ago

Firewall, malware scanner, file integrity monitoring, hardening, 2FA, backups, and audit logging — one self-contained plugin.

OLS 2FA

Up in the last 7 days:20,210#49,003

by One Loop Studio1 year ago

OLS 2FA is a lightweight plugin that enhances your website's security by adding email two-factor authentication (2FA).

SecondGate

#50,433

by SecondGateWP1 month ago

Passkeys, 2FA, brute-force protection, and country blocking, with real crawlers auto-verified and exempted. No account required, ever.

G Online SMS

#51,569

by G Online Sites7 months ago

Send automated SMS notifications from WordPress — OTP/2FA, WooCommerce orders, Contact Form 7, Gravity Forms and more.

Digipacket Login Security with Two-Factor Authentication

Up in the last 7 days:19,472#54,114

by Digipacket4 months ago

Standards-based two-factor authentication (TOTP & e-mail), brute-force lockout, login alerts and an audit log — with no external service.

Surbma

#54,308

by Surbma3 years ago

The most simple two factor authentication plugin for WordPress.

ShivWeb Login Verification

Up in the last 7 days:5,790#54,833

by shivweb2 months ago

Two-factor authentication by email code. Users log in with their password, then enter a login code from their inbox. WooCommerce ready.

SPIDY 2FA LOGIN

Down in the last 7 days:4,253#55,529

by carlocozzetto11 days ago

Two-factor authentication (2FA) via email, SMS or biometric login (WebAuthn/FIDO2) for WordPress. Simple, free, no third-party app required.

Gracewell Security Suite

Up in the last 7 days:16,505#56,300

by gracewell8927 days ago

Login protection, authenticator 2FA, manual file integrity checks, WordPress hardening and activity logging in a responsive security dashboard.

Qevix Shield

Up in the last 7 days:5,504#56,415

by qevixlabs1 month ago

WordPress security: login protection, 2FA, reCAPTCHA, malware scanning, firewall and an activity log. Every protection is off until you turn it on.

Flavor 2FA

#57,059

by kuckovic8 months ago

Lightweight two-factor authentication that just works. Protect your WordPress site with authenticator apps or email codes in under 2 minutes.