Google Authenticator
by Ivan 4.3 (135 reviews)

Google Authenticator

Google Authenticator for your WordPress blog.

Google Authenticator ranks #1,160 among WordPress.org plugins with 20,000+ active installations, is #55 of 1,578 in the Authentication category, a 4.3/5 rating from 135 reviews, and was last updated Aug 24, 2026. Data from WordPress.org, refreshed twice daily — see methodology.

Compatible with WP 7.1
v0.56 Current Version v0.56
Updated 3 weeks ago Last Update on 24 Aug, 2026
Refreshed 12 hours ago Last Refreshed on
#55 of 1,578 in Authentication Top 5% by installs Downloads -14.5% this week Actively maintained
View on WordPress.org
Rank
#1,160
No change
Active Installs
20K+
-28.4%
KW Avg Position
76
No change
Downloads
755.1K
+31 today
Support Resolved
0%
No change
Rating
86%
Review 4.3 out of 5
4.3 (135 reviews)

Next Milestone 30K

Total Progress 81.3%
20K+ 30K+
67
Ranks to Climb
-
Growth Needed
8,000,000
Active Installs
Pro

Unlock Exact Install Count

See the precise estimated active installs for this plugin, calculated from real-time ranking data.

  • Exact install estimates within tiers
  • Track install growth over time
  • Milestone progress predictions
Upgrade to Pro
Need 1,867 more installs to reach 30K+

Rank Changes

1,099 1,130 1,162 1,193 1,224 09-09-2026 10-09-2026 11-09-2026 12-09-2026 13-09-2026 14-09-2026 15-09-2026 16-09-2026
1,152 1,158 1,163 1,169 1,174 01-09-2026 02-09-2026 03-09-2026 04-09-2026 05-09-2026 06-09-2026 07-09-2026 08-09-2026 09-09-2026 10-09-2026 11-09-2026 12-09-2026 13-09-2026 14-09-2026 15-09-2026 16-09-2026
Current #1,160
Change
Best #

Upgrade to Pro

Unlock 30-day and 90-day rank history charts with a Pro subscription.

Upgrade Now

Active Installs Growth

Active Installs 0,000,000+
Growth +0.0%
Peak 0,000,000

Downloads Growth

0 50 100 150 200 250 300 350 09-09-2026 10-09-2026 11-09-2026 12-09-2026 13-09-2026 14-09-2026 15-09-2026 16-09-2026
0 100 200 300 400 01-09-2026 02-09-2026 03-09-2026 04-09-2026 05-09-2026 06-09-2026 07-09-2026 08-09-2026 09-09-2026 10-09-2026 11-09-2026 12-09-2026 13-09-2026 14-09-2026 15-09-2026 16-09-2026
Downloads
Growth
Peak

Upgrade to Pro

Unlock 30-day, 90-day, and yearly download history charts with a Pro subscription.

Upgrade Now

Reviews & Ratings

4.3
135 reviews
Overall 86%
5
105 (78%)
4
7 (5%)
3
3 (2%)
2
2 (1%)
1
18 (13%)

Security History

Source: WPVulnerability

4 known vulnerabilities on record · 1 in the last 24 months · checked 1 week ago

  1. Google Authenticator [google-authenticator] < 0.56

    CVE-2026-14204 · Fixed in v0.56

  2. Google Authenticator [google-authenticator] < 0.48

    Fixed in v0.48

  3. Google Authenticator [google-authenticator] < 0.48

    Fixed in v0.48

  4. Google Authenticator [google-authenticator] < 0.48

    Fixed in v0.48

TL;DR

AI summary of the plugin's readme

This plugin is for WordPress site administrators and users who want extra login security using the Google Authenticator app on Android, iPhone, or Blackberry. It adds two-factor authentication that can be enabled per-user, plus an optional app password feature for XMLRPC-based blog management.

  • Two-factor authentication via Google Authenticator
  • Per-user enable option
  • App password for XMLRPC access
  • Multisite support
  • Relaxed mode option
  • Polish translation
  • German translation and code rewrite
  • Spanish and French translation

Frequently Asked Questions

Common questions about Google Authenticator

Yes, you can enable the App password feature to make that possible, but notice that the XMLRPC interface isn't protected by two-factor authentication, only a long password.
No, you'll have to delete the existing account from the Google Authenticator app on your smartphone before you scan the new QR code, that is unless you change the description as well.
The Google Authenticator verification codes are time based, so it's crucial that the clock in your phone is accurate and in sync with the clock on the server where your WordPress installation is hosted. If you have an Android phone, you can use an app like ClockSync to set your clock in case your Cell provider doesn't provide accurate time information Another option is to enable "relaxed mode" in the settings for the plugin, this will enable more valid codes by allowing up to a 4 min. timedrift in each direction.
Yes, each user has his own Google Authenticator settings. During installation I forgot the thing about making sure my webhost is capable of providing accurate time information, I'm now unable to login, please help. If you have SSH or FTP access to your webhosting account, you can manually delete the plugin from your WordPress installation, just delete the wp-content/plugins/google-authenticator directory, and you'll be able to login using username/password again.
Yes, there is a webbased version here : https://gauth.apps.gbraad.nl/ Github project here : https://github.com/gbraad/gauth
No, but if you're using an Android smartphone you can replace the Google Authenticator app with Authenticator Plus. It's a really nice app that can import your existing settings, sync between devices and backup/restore using your sd-card. It's not a free app, but it's well worth the money.
Yes, the Man-in-the-middle attack/replay detection code isn't compatible with the test/setup mode in the "Stop spammer registration plugin", please remember to remove the "Check credentials on all login attempts" checkmark before installing my plugin.

Sign In / Register

You need to sign in or register to use this feature.