by Usman Ali Qureshi 0 (0 reviews)

FactorGuard – Two-Factor Authentication

Name: FactorGuard – Two-Factor Authentication
Author: Usman Ali Qureshi

Protect your WordPress login with Two-Factor Authentication (2FA) - email OTP and authenticator apps (TOTP) with military-grade libsodium encryption.

FactorGuard ranks #67,398 among WordPress.org plugins with 0+ active installations, is #1,407 of 1,659 in the Authentication category, and was last updated Oct 24, 2026. Data from WordPress.org, refreshed twice daily — see methodology.

Compatible with WP 7.1.4

v1.0.1 Current Version v1.0.1

Updated 1 week ago Last Update on 24 Oct, 2026

Refreshed 6 days ago Last Refreshed on

#1,407 of 1,659 in Authentication Downloads -64.8% this week Actively maintained

View on WordPress.org

Rank

#67,398

— No change

Active Installs

-100%

KW Avg Position

186

1 worse

Downloads

255

+2 today

Support Resolved

— No change

Rating

Review 0 out of 5

0 (0 reviews)

Next Milestone 10

Total Progress 10%

0+ 10+

39,830

Ranks to Climb

Growth Needed

8,000,000

Active Installs

Pro

Unlock Exact Install Count

See the precise estimated active installs for this plugin, calculated from real-time ranking data.

Exact install estimates within tiers
Track install growth over time
Milestone progress predictions

Upgrade to Pro

Need 9 more installs to reach 10+

Rank Changes

Current #67,398

Change

Best #

Upgrade to Pro

Unlock 30-day and 90-day rank history charts with a Pro subscription.

Upgrade Now

Active Installs Growth

Upgrade to Pro

Active Installs 0,000,000+

Growth +0.0%

Peak 0,000,000

Downloads Growth

Downloads

Growth

Peak

Upgrade to Pro

Unlock 30-day, 90-day, and yearly download history charts with a Pro subscription.

Upgrade Now

Reviews & Ratings

0.0

0 reviews

Overall 0%

0 (0%)

Track This Plugin

Get detailed analytics, keyword tracking, and position alerts delivered to your inbox.

Start Tracking Free

Plugin Details

Version: 1.0.1
Last Updated: Oct 24, 2026
Requires WP: 5.6+
Tested Up To: 7.1.4
PHP Version: 8.2 or higher
Author: Usman Ali Qureshi

Support & Rating

Rating: ☆ ☆ ☆ ☆ ☆ 0
Reviews: 0
Support Threads: 0
Resolved: 0%

Keywords

2FA authentication login security otp two factor

Upgrade to Pro

Unlock keyword rankings, search positions, and detailed analytics with a Pro subscription.

Upgrade Now

Similar Plugins

Adminify – White Label, Admin Menu Editor, Login Customizer

6K+ installs

#2,757

Master Addons for Elementor – Elementor Addons, Widgets, Mega Menu Builder, Popup Builder, Widget Builder & Template Kits

30K+ installs

#1,015

WPForms – AI Form Builder for WordPress – Contact Forms, Payment Forms, Survey Form, Quiz & More

5M+ installs

Wordfence Security – Firewall, Malware Scan, and Login Security

Limit Login Attempts Security - Login Security, 2FA, Firewall, Brute Force Prevention

All-In-One Security (AIOS) – Security and Firewall

MainWP Child – Securely Connects to the MainWP Dashboard to Manage Multiple Sites

700K+ installs

#86

View all Authentication plugins

Frequently Asked Questions

Common questions about FactorGuard – Two-Factor Authentication

FactorGuard hooks into the default WordPress login page at /wp-login.php. For custom login forms, developers can use the factorguard_bypass filter to control the behavior programmatically.

No. The plugin automatically detects API requests and skips OTP verification for them. Application passwords and other API authentication methods continue to work normally.

If the email fails to send, the user will see an error message and can try logging in again to trigger a new email. Check your WordPress email delivery settings if this persists.

No. FactorGuard does not contact a FactorGuard server or any third-party API during normal operation. Email delivery is handled by your WordPress site's configured mail system.

Verify that your administrator account can complete login with the selected method, confirm that WordPress email delivery works, and generate backup codes from your WordPress profile.

After an administrator enables Authenticator App support under Settings > FactorGuard, each user can enroll from their WordPress profile page. The profile screen shows the QR code, manual setup key, confirmation field, and backup-code controls.

Yes. Use the factorguard_user_can_bypass filter. Example: add_filter( 'factorguard_user_can_bypass', '__return_true' ); to bypass for all users, or check user roles/capabilities in your callback.

No. FactorGuard does not handle file uploads or multipart request bodies, does not execute shell/system commands (PHP exec, shell_exec, system, passthru, proc_open), and does not unserialize untrusted data. Its only outbound communication is the email your site sends via wp_mail(). Vulnerabilities in the PHP runtime itself (such as PHP2Shell, CVE-2026-109618 / CVE-2026-109619) are fixed by updating the server's PHP to 8.2.35+, 8.3.36+, 8.4.27+, or 8.5.12+, not by plugins.

TOTP setup requires the PHP libsodium extension so FactorGuard can encrypt authenticator app secrets at rest. FactorGuard will not create new authenticator app enrollments if secrets cannot be encrypted. QR codes are generated locally using bundled libraries, and no external QR code API is needed.