by
Avrasys
5 (2 reviews)
AV 2FA
A simple and secure Two-Factor Authentication plugin that sends a verification code to your email.
AV 2FA ranks #61,862 among WordPress.org plugins with 0+ active installations, is #3,855 of 5,058 in the Security category, a 5/5 rating from 2 reviews, and was last updated May 25, 2026. Data from WordPress.org, refreshed twice daily — see methodology.
Tested up to WP 7.0.8 (Current: 7.1.4)
v1.2.1
Current Version v1.2.1
Updated 5 months ago
Last Update on 25 May, 2026
Refreshed 1 week ago
Last Refreshed on
#3,855 of 5,058 in Security
Rank
#61,862
—
No change
Active Installs
0+
-100%
KW Avg Position
122
1 worse
Downloads
723
+4 today
Support Resolved
0%
—
No change
Rating
100%
Review 5 out of 5
5
(2 reviews)
Next Milestone 10
0+
10+
34,294
Ranks to Climb
-
Growth Needed
8,000,000
Active Installs
Pro
Unlock Exact Install Count
See the precise estimated active installs for this plugin, calculated from real-time ranking data.
- Exact install estimates within tiers
- Track install growth over time
- Milestone progress predictions
Need 8 more installs to reach 10+
Rank Changes
Current
#61,862
Change
Best
#
Downloads Growth
Downloads
Growth
Peak
Upgrade to Pro
Unlock 30-day, 90-day, and yearly download history charts with a Pro subscription.
Upgrade NowReviews & Ratings
5.0
2 reviews
Overall
100%
5
2
(100%)
4
0
(0%)
3
0
(0%)
2
0
(0%)
1
0
(0%)
Track This Plugin
Get detailed analytics, keyword tracking, and position alerts delivered to your inbox.
Start Tracking FreePlugin Details
- Version
- 1.2.1
- Last Updated
- May 25, 2026
- Requires WP
- 5.2+
- Tested Up To
- 7.0.8
- PHP Version
- 7.4 or higher
- Author
- Avrasys
Support & Rating
- Rating
- ★ ★ ★ ★ ★ 5
- Reviews
- 2
- Support Threads
- 0
- Resolved
- 0%
Keywords
Upgrade to Pro
Unlock keyword rankings, search positions, and detailed analytics with a Pro subscription.
Upgrade NowSimilar Plugins
Adminify – White Label, Admin Menu Editor, Login Customizer
6K+ installs
#2,757
Master Addons for Elementor – Elementor Addons, Widgets, Mega Menu Builder, Popup Builder, Widget Builder & Template Kits
30K+ installs
#1,015
LiteSpeed Cache
7M+ installs
#5
Akismet Anti-spam: Spam Protection
5M+ installs
#8
Wordfence Security – Firewall, Malware Scan, and Login Security
5M+ installs
#11
Really Simple Security – Simple and Performant Security (formerly Really Simple SSL)
3M+ installs
#18
Hostinger Tools
3M+ installs
#20
WPS Hide Login
2M+ installs
#27
Limit Login Attempts Security - Login Security, 2FA, Firewall, Brute Force Prevention
1M+ installs
#33
WP Super Cache
1M+ installs
#36
Frequently Asked Questions
Common questions about AV 2FA
Navigate to Settings > AV 2FA. In the "Excluded User IDs" box, enter the numeric User ID of the user you wish to exclude. For multiple users, separate their IDs with a comma. You can find a user's ID by going to the "Users" list and hovering over their "Edit" link; the ID will be visible in the URL in your browser's status bar.
Yes. On the Settings > AV 2FA page, you can set the "Code Validity" in seconds. The default is 60 seconds. We recommend a value between 30 and 120 seconds.
This plugin uses WordPress's built-in wp_mail() function. This means it relies on your server's email configuration or any SMTP plugin you have installed (like WP Mail SMTP). If emails are not arriving, please check your spam folder first, then ensure your WordPress site is configured to send emails correctly.
When you set a custom login slug (e.g., "my-secret-login"), your login page will be accessible at yoursite.com/my-secret-login instead of yoursite.com/wp-login.php. The default wp-login.php and wp-admin (for non-logged-in users) will return a 404 error, hiding your login page from bots and attackers.
You can recover access by adding define('AV_2FA_DISABLE_CUSTOM_LOGIN', true); to your wp-config.php file. This will temporarily disable the custom login feature and restore access to wp-login.php. Once you've logged in, you can view or change your custom login slug in the settings.
Yes! For maximum security, you can define the slug directly in wp-config.php using define('AV_2FA_LOGIN_SLUG', 'your-secret-slug');. When set this way, the slug is never stored in the database, making it impossible to discover even with database access.
The plugin tracks failed 2FA code attempts on a per-user basis. After reaching the configured maximum (default: 5 attempts), the account is temporarily locked. The plugin also tracks attempts by IP address to prevent distributed attacks.
Progressive lockout automatically increases the lockout duration for users who repeatedly trigger lockouts. The first lockout lasts 15 minutes (default), the second lasts 30 minutes (2x), the third lasts 60 minutes (4x), and so on, up to 8x the base duration. This helps deter persistent attackers while being lenient with occasional mistakes.
Navigate to Settings > AV 2FA and scroll to the "Currently Locked Accounts" section. You'll see a list of all locked users with an "Unlock" button next to each. Click the button to immediately unlock the account. Lockouts also expire automatically after the configured duration.
Yes, by default users receive an email notification when their account is locked. This helps legitimate users understand why they can't log in and alerts them to potential security threats. You can disable this in Settings > AV 2FA if desired.
