Best two factor plugins for WordPress

Rapid Security Manager

Up in the last 7 days:9,548#63,205

by rapidplugins1 month ago

WordPress security with TOTP 2FA, recovery codes, trusted devices, Basic WAF, CSP, GeoIP, security headers, hardening, and diagnostics.

GoUltra Auth

Up in the last 7 days:8,859#63,275

by GoUltra.AI3 months ago

Add a one-time code sent over WhatsApp as a second factor for WordPress and WooCommerce logins, with recovery codes, rate limits and an audit log.

Lunexia Security

#63,509

by lunexiait1 month ago

Complete WordPress security, 2FA login protection, WAF firewall, malware scanner, 1-click quarantine, and .htaccess server hardening.

Saral Login Shield

Up in the last 7 days:5,710#63,968

by Saral Techies20 days ago

Two-factor login, a hidden login page and login attempt limits, plus a login activity log. Forgot the login URL? Get it by email.

Online Everything Secure Login

Down in the last 7 days:6,531#64,115

by Online Everything Technologies12 days ago

Move the login page to your own address, stop password guessing, add a 2-step email code for admins and harden WordPress, with a log of every login.

REVE Secure Two Factor Authentication (2FA)

Up in the last 7 days:6,472#64,296

by revesecure8 years ago

Two factor authentication by REVE Secure

Nimble Security

Up in the last 7 days:4,115#64,381

by nimbleplugins.com19 days ago

Local WordPress security with 2FA, integrity monitoring, firewall, malware scanning, quarantine, incident response and recovery readiness.

Sergeev Studio Two-Factor Login

Down in the last 7 days:1,212#64,777

by sergeev.studio15 days ago

Two-factor login for WordPress with codes from an authenticator app or a Telegram bot, backup codes and required 2FA for chosen roles.

Usama Simple 2FA Authenticator

#65,653

by usamashahadat11 months ago

A simple, secure 2FA plugin that adds a verification screen after login, requiring a code from your authenticator app.

Loqwall 2FA

Up in the last 7 days:3,551#65,696

by mohamedelaaouam993 months ago

Lightweight Two-Factor Authentication with Email OTP and Authenticator App support. No bloat, no external services.

Lock and Key

#65,720

by shadowsplitter27 days ago

Phishing-resistant login with hardware security keys (Ledger, YubiKey, any FIDO2 key) for any user role, with optional password-free login.

Holovid® Secure Connect

Down in the last 7 days:11,499#66,539

by Holovid2 months ago

Two-factor authentication: TOTP codes or codeless Secure Connect login. Anti-phishing, encrypted secrets, no external dependencies.

NiyiGuard

Down in the last 7 days:585#67,281

by harish2825 months ago

Self-hosted WordPress security: 2FA, lockouts, audit log, integrity, headers, rate limits, WooCommerce protection, and SDK. Free.

Role Enforcement for Two Factor

#67,509

by cliencedigital1 month ago

Require two-factor authentication for selected user roles. An add-on for the Two Factor plugin.

MazeGuard Security

#67,830

by designmazeus18 days ago

Two-factor login, malware and file-integrity scanning, and account security, with findings that say what to do next.

Two Step Factor By SE

#68,319

by seplugins1 year ago

Add more security with the two factor authorisation.

Notakey Two Factor extension

#68,793

by notakey2 months ago

Reduce friction and improve security of Two-Factor Authentication using push-based Notakey Authenticator mobile application.

Extensions for Two-Factor

Down in the last 7 days:13,060#69,013

by Marius Bezuidenhout6 years ago

This plugin provides extended features to the Two-Factor plugin.

DigitSummit Loginly

#69,165

by digitsummit1 month ago

Brand your login page, move it to an address only you know, and secure the door — with a safety net that will not lock you out.

FactorGuard

Up in the last 7 days:3,182#69,869

by Usman Ali Qureshi16 days ago

Protect your WordPress login with Two-Factor Authentication (2FA) - email OTP and authenticator apps (TOTP) with military-grade libsodium encryption.

Aria Security Suite

Down in the last 7 days:5,730#70,143

by Alireza Aminzadeh2 months ago

Standalone WordPress security: local WAF, TOTP 2FA, malware scanner, hardening, live traffic, and an optional Enterprise API.

Rat Two-Factor Authentication

#70,342

by rathsh1 year ago

Lightweight and powerful Two-Factor Authentication plugin for WordPress with email-based OTP verification.

Loginward

Down in the last 7 days:2,337#70,872

by The Vagabond13 days ago

Email one-time codes for administrator logins. The dashboard opens only after the code sent to that administrator's inbox is entered.

VWEB Admin Email Login Verify

#70,881

by VWEB India1 month ago

Administrators must enter an email verification code after password login. Regular users log in without extra verification.

JAT Site Shield

#71,231

by Jeremy Anderson3 days ago

Lock WordPress down: login lockouts, two-factor codes, core hardening, an activity log with email alerts, and file integrity checks.

NullState Security™

#71,720

by SalesPC1 month ago

Short Description: Free WordPress security plugin – malware scanning, brute-force protection, two-factor authentication, and more.

Scudo Security

Down in the last 7 days:15,679#71,839

by Totaliweb2 months ago

Environment-aware security: firewall, malware & integrity scan, brute-force protection and 2FA — safety-first, with previews and rollback.

KUMITATE HOSHU

#72,623

by MOTOKI11 days ago

Security and upkeep with sensible defaults: login limits, two-factor login, hardening, plain-words checks, backups and updates with a backup first.

Balui Security Suite

#73,127

by Balui Digital7 days ago

Security from one clean dashboard: two-step verification, login limits, password policy, CAPTCHA, custom login URL, security headers and hardening.

CodeCanvas Guard

#74,163

by codecanvasinc2 months ago

Recovery-first WordPress security with protected login, 2FA, hardening, scanning, repair, monitoring, and activity logs.