Rublon Multi-Factor Authentication (MFA)
by Rublon 4.2 (88 reviews)

Rublon Multi-Factor Authentication (MFA)

Instant account security with effortless multi-factor authentication via Mobile Push, Mobile Passcode (TOTP), WebAuthn/U2F Security Keys, and more.

Rublon Multi-Factor Authentication (MFA) ranks #9,370 among WordPress.org plugins with 400+ active installations, is #252 of 1,584 in the Authentication category, a 4.2/5 rating from 88 reviews, and was last updated Aug 13, 2026. Data from WordPress.org, refreshed twice daily — see methodology.

Compatible with WP 7.1
v4.4.5 Current Version v4.4.5
Updated 1 month ago Last Update on 13 Aug, 2026
Refreshed 14 hours ago Last Refreshed on
#252 of 1,584 in Authentication Top 25% by installs
View on WordPress.org
Rank
#9,370
-7 this week
Active Installs
400+
-16.5%
KW Avg Position
24.3
0.3 worse
Downloads
116.4K
+5 today
Support Resolved
0%
No change
Rating
84%
Review 4.2 out of 5
4.2 (88 reviews)

Next Milestone 500

Total Progress 86%
400+ 500+
147
Ranks to Climb
-
Growth Needed
8,000,000
Active Installs
Pro

Unlock Exact Install Count

See the precise estimated active installs for this plugin, calculated from real-time ranking data.

  • Exact install estimates within tiers
  • Track install growth over time
  • Milestone progress predictions
Upgrade to Pro
Need 14 more installs to reach 500+

Rank Changes

9,260 9,341 9,422 9,502 9,583 10-09-2026 11-09-2026 12-09-2026 13-09-2026 14-09-2026 15-09-2026 16-09-2026 17-09-2026
9,260 9,341 9,422 9,502 9,583 02-09-2026 03-09-2026 04-09-2026 05-09-2026 06-09-2026 07-09-2026 08-09-2026 09-09-2026 10-09-2026 11-09-2026 12-09-2026 13-09-2026 14-09-2026 15-09-2026 16-09-2026 17-09-2026
Current #9,370
Change
Best #

Upgrade to Pro

Unlock 30-day and 90-day rank history charts with a Pro subscription.

Upgrade Now

Active Installs Growth

Active Installs 0,000,000+
Growth +0.0%
Peak 0,000,000

Downloads Growth

0 10 20 10-09-2026 11-09-2026 12-09-2026 13-09-2026 14-09-2026 15-09-2026 16-09-2026 17-09-2026
0 10 20 02-09-2026 03-09-2026 04-09-2026 05-09-2026 06-09-2026 07-09-2026 08-09-2026 09-09-2026 10-09-2026 11-09-2026 12-09-2026 13-09-2026 14-09-2026 15-09-2026 16-09-2026 17-09-2026
Downloads
Growth
Peak

Upgrade to Pro

Unlock 30-day, 90-day, and yearly download history charts with a Pro subscription.

Upgrade Now

Reviews & Ratings

4.2
88 reviews
Overall 84%
5
65 (74%)
4
2 (2%)
3
5 (6%)
2
5 (6%)
1
11 (13%)

Security History

Source: WPVulnerability

No known vulnerabilities on record for Rublon Multi-Factor Authentication (MFA). Checked 1 month ago.

TL;DR

AI summary of the plugin's readme

This plugin is for WordPress site administrators who need to secure user logins with multi-factor authentication. It solves the problem of weak single-factor password security by adding verification methods like mobile push, TOTP, and security keys.

  • Mobile Push authentication
  • Mobile Passcode (TOTP)
  • WebAuthn/U2F Security Keys
  • SMS Passcode
  • QR Code authentication
  • LDAP integration
  • RADIUS integration
  • Multiple language support

Frequently Asked Questions

Common questions about Rublon Multi-Factor Authentication (MFA)

Botnets carry out brute-force attacks against thousands of WordPress sites and blogs every day, regardless of size. Once inside, botnets infect your visitors with malware. A compromised website leads to delisting by search engines or blocking by your hosting provider. Rublon Multi-Factor Authentication (MFA) prevents such attacks.
Many people use simple, easy-to-guess passwords which can be easily broken or stolen. If you use the same password across multiple devices, services, or on unsecured connections, such as public Wi-Fi networks, you are an easy target for hackers. Botnets can attempt to compromise WordPress sites by using millions of common passwords and character combinations.
Rublon Multi-Factor Authentication (MFA) adds an extra layer of security on top of your usual login & password WordPress logins. First, a user enters their username and password as always. Then, Rublon displays the Rublon Prompt. The user can select one of the available authentication methods, such as Mobile Push or WebAuthn/U2F Security Key. After selecting and completing the authentication method, the user gains access to WordPress. The Rublon Prompt also allows users to self-enroll their mobile device or security key if they have not already. Further, thanks to the Rublon Prompt, the user can check the Remember this device checkbox to bypass MFA during subsequent logins on a selected device.
Rublon is simple and user-friendly. Activate the plugin, enter the System Token and Secret Key from the Rublon Admin Console, and you’re done. Your users don’t have to install or configure any additional software. Rublon is so simple to use that your users won’t need training. Once they confirm their identity on a device, they can choose to remember this device and log in by only entering their WordPress password.
Traditional Multi-Factor Authentication solutions demand users to enter a one-time password each time they want to log in. That’s why people don’t like them. Rublon is different. With Rublon, you confirm your identity by clicking a link, tapping a push notification on your phone, or touching a FIDO security key. Rublon doesn’t force you to type anything on your keyboard and gives you many authentication options to find your favorite.
Rublon Multi-Factor Authentication is an all-in-one package that contains Rublon MFA for WordPress and dozens of other products, applications, and integrations. You can start a Free Rublon Trial and enjoy all features for 30 days. If you only want to protect one WordPress account, you will never have to pay! For more information, visit our Pricing page.
Simply install the Rublon for WordPress plugin and activate it. Then, create a new WordPress application in the Rublon Admin Console and copy the values of the System Token and Secret Key. For full detailed instructions (including screenshots), refer to our Documentation.
Yes! Just install the Rublon Authenticator mobile app on your phone (available for Android and iOS). After entering your WordPress login credentials, you will be prompted to verify your account in one of the following ways: * Enter the TOTP code (Time-Based One-Time Password) * Scan a QR code * Confirm login using a push notification * Copy the verification code from the SMS sent to your mobile number
No. You can choose which users you want to protect. You can protect everyone or only select groups of users. You can use Group Policies to decide who is protected and how, including which authentication methods Rublon should allow and logins from which IP ranges Rublon should bypass.
No. Rublon never knows your credentials or those of your users. They are never transmitted to our servers. Rublon does its work in the background only after WordPress verifies your password. It’s an independent security layer that sits beneath the login form.

Sign In / Register

You need to sign in or register to use this feature.