by WordPress.org 4.8 (208 reviews)

Two Factor

Name: Two Factor
Rating: 4.8 (208 reviews)
Author: WordPress.org

Enable Two-Factor Authentication (2FA) using time-based one-time passwords (TOTP), email, and backup verification codes.

Two Factor ranks #352 among WordPress.org plugins with 100,000+ active installations, is #18 of 1,576 in the Authentication category, a 4.8/5 rating from 208 reviews, and was last updated Mar 27, 2026. Data from WordPress.org, refreshed twice daily — see methodology.

Tested up to WP 6.9.7 (Current: 7.1)

v0.16.0 Current Version v0.16.0

Updated 5 months ago Last Update on 27 Mar, 2026

Refreshed 11 hours ago Last Refreshed on

#18 of 1,576 in Authentication Top 1% by installs Downloads -18.1% this week

View on WordPress.org

Rank

#352

+1 this week

Active Installs

100K+

-32.7%

KW Avg Position

20.6

0.2 better

Downloads

1.8M

+1,531 today

Support Resolved

50%

— No change

Rating

96%

Review 4.8 out of 5

4.8 (208 reviews)

Next Milestone 200K

Total Progress 63.1%

100K+ 200K+

Ranks to Climb

Growth Needed

8,000,000

Active Installs

Pro

Unlock Exact Install Count

See the precise estimated active installs for this plugin, calculated from real-time ranking data.

Exact install estimates within tiers
Track install growth over time
Milestone progress predictions

Upgrade to Pro

Need 36,872 more installs to reach 200K+

Rank Changes

Current #352

Change

Best #

Upgrade to Pro

Unlock 30-day and 90-day rank history charts with a Pro subscription.

Upgrade Now

Active Installs Growth

Upgrade to Pro

Active Installs 0,000,000+

Growth +0.0%

Peak 0,000,000

Downloads Growth

Downloads

Growth

Peak

Upgrade to Pro

Unlock 30-day, 90-day, and yearly download history charts with a Pro subscription.

Upgrade Now

Reviews & Ratings

4.8

208 reviews

Overall 96%

184 (88%)

15 (7%)

0 (0%)

2 (1%)

7 (3%)

Support Threads Overview

Resolved

Unresolved

Total Threads

Resolved

Unresolved

50%

Resolution Rate

Security History

Source: WPVulnerability

No known vulnerabilities on record for Two Factor. Checked 1 week ago.

Track This Plugin

Get detailed analytics, keyword tracking, and position alerts delivered to your inbox.

Start Tracking Free

Plugin Details

Version: 0.16.0
Last Updated: Mar 27, 2026
Requires WP: 6.8+
Tested Up To: 6.9.7
PHP Version: 7.2 or higher
Author: WordPress.org

Support & Rating

Rating: ★ ★ ★ ★ ★ 4.8
Reviews: 208
Support Threads: 2
Resolved: 50%

Keywords

2FA authentication MFA security totp

Upgrade to Pro

Unlock keyword rankings, search positions, and detailed analytics with a Pro subscription.

Upgrade Now

Similar Plugins

Adminify – White Label, Admin Menu Editor, Login Customizer

6K+ installs

#2,752

Master Addons for Elementor – Elementor Addons, Widgets, Mega Menu Builder, Popup Builder, Widget Builder & Template Kits

30K+ installs

#1,007

WPForms - AI Form Builder for WordPress - Contact Forms, Payment Forms, Survey Form, Quiz & More

5M+ installs

Wordfence Security - Firewall, Malware Scan, and Login Security

Limit Login Attempts Security - Login Security, 2FA, Firewall, Brute Force Prevention

All-In-One Security (AIOS) – Security and Firewall

1M+ installs

#62

MainWP Child - Securely Connects to the MainWP Dashboard to Manage Multiple Sites

700K+ installs

#86

View all Authentication plugins

TL;DR

AI summary of the plugin's readme

Two Factor is for WordPress site owners and users who want stronger login security than a password alone. It solves the problem of accounts being compromised by requiring a second authentication step, such as a TOTP app, email code, or backup code.

TOTP authenticator app support
Email verification codes
Backup verification codes
Per-user 2FA configuration
Admin settings to disable providers site-wide
Dummy method for testing
Action and filter hooks
Compatible with login_redirect filter

Frequently Asked Questions

Common questions about Two Factor

This plugin supports the last two major versions of WordPress and the minimum PHP version supported by those WordPress versions.

The best place to report bugs, feature suggestions, or any other (non-security) feedback is at the Two Factor GitHub issues page. Before submitting a new issue, please search the existing issues to check if someone else has reported the same feedback.

The plugin contributors and WordPress community take security bugs seriously. We appreciate your efforts to responsibly disclose your findings, and will make every effort to acknowledge your contributions. To report a security issue, please visit the WordPress HackerOne program.

If you have backup codes enabled, you can use one of those to regain access. If you don't have backup codes or have used them all, you'll need to contact your site administrator to reset your account. This is why it's important to always enable backup codes and keep them in a secure location.

The plugin previously supported FIDO U2F, which was a predecessor to WebAuthn. There is an open issue to add WebAuthn support here: https://github.com/WordPress/two-factor/pull/427

Yes. For passkeys and hardware security keys, you can install the Two-Factor Provider: WebAuthn plugin: https://wordpress.org/plugins/two-factor-provider-webauthn/ . It integrates directly with Two-Factor and adds WebAuthn-based authentication as an additional two-factor option for users.