Best two factor plugins for WordPress
The most popular two factor plugins for WordPress in November 2026, in WordPress.org’s own popular order, which follows active installs. Really Simple Security leads with 3M+ active installs, ahead of XO Security (30K+) and Two Factor Authentication (20K+). All 86 plugins tagged “two factor” are below, with figures from WordPress.org that update every day.
Installs aren’t everything: a recent release, a “Tested up to” that matches the current WordPress, and support threads that get resolved show a plugin is looked after. Open any plugin for its downloads, rank history and alternatives.
Research this niche or see all plugins.
Top 10 two factor plugins
- 1.
Really Simple SecurityThe most installed two factor plugin, with 3M+ active installs. Rated 4.9 from 8,871 reviews, updated 2 weeks ago.
- 2.
XO Security30K+ active installs. Rated 5.0 from 11 reviews, updated 3 months ago.
- 3.
Two Factor Authentication20K+ active installs. Rated 4.4 from 77 reviews, updated 2 weeks ago.
- 4.
Two Factor (2FA) Authentication via Email9K+ active installs. Only 4 reviews so far, updated 2 weeks ago.
- 5.
Duo Two-Factor Authentication3K+ active installs. Rated 3.7 from 39 reviews, last updated 1 year ago. Tested only up to WordPress 6.0.18.
- 6.
Duo Universal2K+ active installs. Only 1 review so far, updated 10 months ago. Tested only up to WordPress 6.9.11.
- 7.WebAuthn Provider for Two Factor
2K+ active installs. Rated 4.6 from 11 reviews, updated 3 weeks ago.
- 8.WP 2-step verification
1K+ active installs. Rated 4.2 from 27 reviews, last updated 1 year ago. Tested only up to WordPress 6.8.12.
- 9.
SecSign200+ active installs. Rated 4.6 from 14 reviews, last updated 2 years ago. Tested only up to WordPress 6.1.16.
- 10.
NutsForPress Login Watchdog100+ active installs. No reviews yet, updated 11 months ago. Tested only up to WordPress 6.9.11.
All 86 plugins tagged “two factor”

Really Simple Security
#18by Really Simple Plugins14 days ago
Easily improve site security with WordPress Hardening, Two-Factor Authentication (2FA), Login Protection, Vulnerability Detection and SSL certificate.
- Installs
- 3M+
- Rating
- 4.9(8.9K)
- Downloads
- 28.6K/day

XO Security
Up in the last 7 days:1#972by ishitaka3 months ago
XO Security is a plugin to enhance login related security.
- Installs
- 30K+
- Rating
- 5.0(11)
- Downloads
- 158/day

Two Factor Authentication
Down in the last 7 days:6#1,330by David Anderson / Team Updraft14 days ago
Secure WordPress login with Two Factor Authentication - supports WP, Woo + other login forms, HOTP, TOTP (Google Authenticator, Authy, etc.)
- Installs
- 20K+
- Rating
- 4.4(77)
- Downloads
- 498/day

Two Factor (2FA) Authentication via Email
Up in the last 7 days:1#2,174by Sully19 days ago
Enable one-click login with this WordPress Two-Factor Authentication (2FA) plugin, utilizing email for added security.
- Installs
- 9K+
- Rating
- 5.0(4)
- Downloads
- 76/day

Duo Two-Factor Authentication
Up in the last 7 days:2#4,010by Duo Security1 year ago
Easily add Duo Security two-factor authentication to your WordPress website. Enable two-factor authentication for your admins and/or users.
- Installs
- 3K+
- Rating
- 3.7(39)
- Downloads
- 43/day

Duo Universal
Up in the last 7 days:2#4,252by Duo Security10 months ago
Easily add Duo authentication to your WordPress website. Enable multi-factor authentication for your admins and/or users.
- Installs
- 2K+
- Rating
- 4.0(1)
- Downloads
- 34/day
WebAuthn Provider for Two Factor
Up in the last 7 days:94#4,805by Volodymyr Kolesnykov25 days ago
WebAuthn authentication provider for Two Factor plugin.
- Installs
- 2K+
- Rating
- 4.6(11)
- Downloads
- 118/day
WP 2-step verification
Down in the last 7 days:7#5,310by As2471 year ago
Adds an extra layer of security to your Wordpress Account. Same as Google 2-step verification.
- Installs
- 1K+
- Rating
- 4.2(27)
- Downloads
- 22/day

SecSign
Down in the last 7 days:13#12,442by SecSign2 years ago
The SecSign ID two-factor authentication WordPress Plugin will be discontinued.
- Installs
- 200+
- Rating
- 4.6(14)
- Downloads
- 0/day

NutsForPress Login Watchdog
Down in the last 7 days:20#14,853by Christian Gatti11 months ago
NutsForPress Login Watchdog a simple and lightweight plugin that protects your site from unauthorized login attempts.
- Installs
- 100+
- Rating
- –
- Downloads
- 0/day
WP-OTP
Down in the last 7 days:187#16,456by noplanman22 days ago
Make your WordPress login extra secure with One Time Passwords.
- Installs
- 100+
- Rating
- 4.0(9)
- Downloads
- 11/day

Fuerte-WP
Down in the last 7 days:1,041#18,051by Esteban4 days ago
WordPress security and maintenance plugin: schedule auto-updates, block malicious updates during supply chain attacks, enforce two-factor authenticati …
- Installs
- 80+
- Rating
- –
- Downloads
- 11/day

Email OTP Login with default login form
Down in the last 7 days:88#19,847by Lalit Yadav1 year ago
Adds email OTP (One-Time Password) verification after valid login credentials on the default wp-login.php form for added security.
- Installs
- 60+
- Rating
- 5.0(6)
- Downloads
- 0/day

Rapls Passkey
Up in the last 7 days:1,165#20,398by rapls3 days ago
Passwordless login with passkeys (WebAuthn). Nothing to configure, no external service, and password sign-in keeps working.
- Installs
- 50+
- Rating
- 5.0(2)
- Downloads
- 12/day

BaseCloud Shield
Up in the last 7 days:22#21,871by BaseCloud2 months ago
Enterprise-grade Two-Factor Authentication (2FA) with support for Email, SendGrid API, Webhooks, WhatsApp, and SMS delivery.
- Installs
- 40+
- Rating
- 5.0(1)
- Downloads
- 11/day
Limesnip Simple2FA
Up in the last 7 days:126#22,699by Maurice Hason2 months ago
Simple email-based two-factor authentication for WordPress. Adds a clean, Linear-inspired verification screen to your login flow.
- Installs
- 40+
- Rating
- –
- Downloads
- 0/day

Defyn Security Manager
Up in the last 7 days:191#24,609by Defyn24 days ago
Hide wp-admin behind a custom login URL and stop brute-force attacks with two-factor authentication, login limits, IP rules and an activity log.
- Installs
- 30+
- Rating
- –
- Downloads
- 0/day

Nahnu Login Shield
Up in the last 7 days:494#24,774by Jaime Alnassim20 days ago
Hyperfocused login security. CAPTCHA, brute-force lockout, geo-blocking, 2FA, honeypot, and edge WAF — all from one screen. 100% free.
- Installs
- 30+
- Rating
- –
- Downloads
- 0/day

INI Protector
Up in the last 7 days:822#25,578by milenfrom1 month ago
Lightweight WordPress hardening — file integrity monitoring, two-factor authentication, login protection, security headers and privacy.
- Installs
- 20+
- Rating
- 5.0(1)
- Downloads
- 0/day

Super Duper Two-Factor Login
#26,060by Super Duper Plugins2 months ago
Free 2FA for WordPress: authenticator app, email codes, backup codes, WooCommerce, role enforcement, plus optional server and upload hardening.
- Installs
- 20+
- Rating
- –
- Downloads
- 0/day
Authlify
Down in the last 7 days:1,914#26,304by MantraBrain3 days ago
Hide your login URL, stop brute-force attacks, add CAPTCHA, 2FA and passkeys, and design your login page. Built so you never get locked out.
- Installs
- 20+
- Rating
- 1.0(1)
- Downloads
- 11/day
SecureLite Security
#30,932by PixelGravitas9 days ago
Free firewall, malware scanner, limit login attempts, 2FA and hide login, plus an attack simulation that proves each protection works.
- Installs
- 10+
- Rating
- 5.0(2)
- Downloads
- 40/day

Sigil
Up in the last 7 days:10,193#33,860by Jean Galea1 day ago
Passkeys and two-factor authentication for WordPress. Sign in without a password, and enrol before you require 2FA by role.
- Installs
- 10+
- Rating
- –
- Downloads
- 22/day

OpenOTP Two-Factor Authentication
Up in the last 7 days:3,114#39,048by rcdevs10 years ago
OpenOTP plugin Enable two-factor authentication for your admins and/or users The plugin will transparently handle any OpenOTP Login Mode including, LD …
- Installs
- 10+
- Rating
- 3.7(3)
- Downloads
- 0/day

GetOTP OTP Verification
Up in the last 7 days:3,025#40,947by LaLoka Labs4 years ago
Implement Email OTP and SMS OTP for WordPress and WooCommerce. Support Login with 2FA.
- Installs
- 10+
- Rating
- –
- Downloads
- 0/day
Identityplus
Down in the last 7 days:2,983#42,011by Stefan Harsan Farr24 days ago
Identity Plus enables seamless X.509 client certificate based authentication and access control for critical paths in your Wordpress instance.
- Installs
- 10+
- Rating
- –
- Downloads
- 0/day

Fluistr Authentication
#43,302by 3D Virge1 month ago
Zero Password - One touch - Two Factor Authentication. Secure your WordPress site with a passwordless, simple and intuitive 2-factor authentication.
- Installs
- 10+
- Rating
- 5.0(1)
- Downloads
- 0/day

Authentiq
Up in the last 7 days:1,556#43,760by authentiq7 years ago
Sign in (and sign up) to WordPress sites using the Authentiq ID app. Strong authentication, without the passwords.
- Installs
- 10+
- Rating
- 5.0(1)
- Downloads
- 0/day

SnapID Two-Factor Authentication
Down in the last 7 days:650#46,737by TextPower6 years ago
Make usernames and passwords obsolete. SnapID identifies and authenticates when you send a text message. Completely secure, incredibly convenient.
- Installs
- 10+
- Rating
- 5.0(2)
- Downloads
- 2/day
Absolute 2fa For Woocommerce
#46,810by AbsolutePlugins4 years ago
A Two Factor Authentication addon that will add 2fa settings page under WooCommerce's My Account Page.
- Installs
- 10+
- Rating
- –
- Downloads
- 0/day
Vokull Security Center
Up in the last 7 days:22,624#49,757by Steven Glogger2 months ago
Security monitoring and alerting: plugin, user, role and config changes, file integrity, passkeys, two-factor authentication and geo-aware logins.
- Installs
- <10
- Rating
- –
- Downloads
- 0/day
Ace Login Block
#49,796by ShaneRounce18 days ago
Design your login page in the block editor, with passkeys, two-factor authentication and lockout protection built in.
- Installs
- <10
- Rating
- –
- Downloads
- 0/day

DollarMates U2 Secured Authenticator
Up in the last 7 days:9,145#52,135by dollarmates13 days ago
Tap-to-approve two-factor authentication for WordPress logins, backed by the U2 Secured Authenticator app.
- Installs
- <10
- Rating
- –
- Downloads
- 0/day

Shakvaro Shield
Up in the last 7 days:7,885#52,224by Shakil Ahamed4 months ago
Comprehensive WordPress security: firewall, brute force protection, 2FA, file integrity monitoring, hardening checks, and activity logging.
- Installs
- <10
- Rating
- –
- Downloads
- 0/day
Matoma Two-Factor Authentication
Up in the last 7 days:18,612#52,793by Matoma5 years ago
Matoma Two-Factor Authentication extends the login process by a 2nd factor to achieve increased security. After the user name and password are request …
- Installs
- <10
- Rating
- –
- Downloads
- 0/day

Kwistech Secure
Up in the last 7 days:5,180#53,162by kwistech2 months ago
Twelve local hardening controls with an audit trail. No account, no telemetry, no third-party requests, nothing to configure elsewhere.
- Installs
- <10
- Rating
- –
- Downloads
- 0/day

CAS Antivirus
#53,638by soysupercas1 month ago
Free WordPress security plugin with malware scanner, HTTP Security Headers, WordPress core restoration and TOTP Two-Factor Authentication.
- Installs
- <10
- Rating
- –
- Downloads
- 0/day

ShadowScan Security Link
Up in the last 7 days:14,116#53,925by shadowscan3 months ago
ShadowScan Guard local WordPress hardening and basic diagnostics, with optional Guard or ShadowScan portal connection for managed features.
- Installs
- <10
- Rating
- –
- Downloads
- 0/day

Meser10 OTP
#54,372by meser105 days ago
One-time SMS codes through your Meser 10 account: verify mobile numbers at registration and checkout, and add an SMS step to sign-in.
- Installs
- <10
- Rating
- –
- Downloads
- 80/day
Rad 2FA
#54,435by Rad1 month ago
Secure WordPress login with two-factor authentication: email one-time codes or a TOTP authenticator app, per role.
- Installs
- <10
- Rating
- –
- Downloads
- 0/day

TextTango
#55,964by Raphael Sefakor Adinkrah1 month ago
Send SMS from WordPress and WooCommerce with TextTango — passwordless login, order notifications, delivery receipts and consent handling.
- Installs
- <10
- Rating
- –
- Downloads
- 0/day

Zeshan Login 2FA
Up in the last 7 days:15,267#56,093by zeshan4953 months ago
Add app-based two-factor authentication to your WordPress login. Scan a QR code, then enter a 6-digit code. Backup codes keep you from locking out.
- Installs
- <10
- Rating
- –
- Downloads
- 0/day
Rishav AuthNova OTP
#56,692by rishav0016 months ago
OTP verification for WordPress login, registration, and password reset using email and SMS delivery.
- Installs
- <10
- Rating
- –
- Downloads
- 2/day

Mamotte! Login URL Changer
#57,438by SatoruHatano2 months ago
Change your WordPress login URL to a custom slug, with optional IP whitelist and trusted device management for enhanced security.
- Installs
- <10
- Rating
- –
- Downloads
- 0/day

Mrsea Login
#57,475by mrsea2 months ago
Modern login design, a custom login URL, and optional authenticator two-factor protection with QR setup and recovery codes.
- Installs
- <10
- Rating
- 5.0(1)
- Downloads
- 0/day
Gupti 2FA
#59,031by plexomedia2 months ago
Secure your WordPress login with two-factor authentication (2FA) using any TOTP authenticator app — no external services, no bloat.
- Installs
- <10
- Rating
- –
- Downloads
- 0/day
Folio Drawbridge
Down in the last 7 days:5,941#59,862by buffcleb2 months ago
Encrypted file vaults with two-factor external sharing, comprehensive audit logging, lifecycle management, and role-based vault oversight.
- Installs
- <10
- Rating
- –
- Downloads
- 0/day

OtpPal
Down in the last 7 days:10,191#60,232by rijensky27 days ago
Client-side plugin for OtpPal – Send and verify OTPs via WhatsApp.
- Installs
- <10
- Rating
- –
- Downloads
- 0/day

CW Step 2 Verification
#61,061by Anuj Tiwary4 years ago
CW Step 2 Verification plugin provide extra layer of security to WordPress login
- Installs
- <10
- Rating
- –
- Downloads
- 0/day

ATV Web Security
Up in the last 7 days:2,792#61,763by atvsoftwarelabs4 days ago
Block persistent changes on a compromised WordPress site — with optional AI-assisted false-positive filtering.
- Installs
- <10
- Rating
- –
- Downloads
- 23/day