by Melapress 4.7 (177 reviews)

WP 2FA – Two-factor authentication for WordPress

Name: WP 2FA – Two-factor authentication for WordPress
Rating: 4.7 (177 reviews)
Author: Melapress

Get better WordPress login security; add two-factor authentication (2FA) for all your users with this easy-to-use plugin.

WP 2FA ranks #371 among WordPress.org plugins with 100,000+ active installations, a 4.7/5 rating from 177 reviews, and was last updated Aug 11, 2026. Data from WordPress.org, refreshed twice daily — see methodology.

Tested up to WP 7.0.4 (Current: 7.1)

v4.1.0 Current Version v4.1.0

Updated 1 month ago Last Update on 11 Aug, 2026

Refreshed 8 hours ago Last Refreshed on

Top 1% by installs Downloads -37.5% this week

View on WordPress.org

Rank

#371

— No change

Active Installs

100K+

-28.7%

KW Avg Position

4.8

1.2 worse

Downloads

1.9M

+1,349 today

Support Resolved

17%

— No change

Rating

94%

Review 4.7 out of 5

4.7 (177 reviews)

Next Milestone 200K

Total Progress 52.5%

100K+ 200K+

Ranks to Climb

Growth Needed

8,000,000

Active Installs

Pro

Unlock Exact Install Count

See the precise estimated active installs for this plugin, calculated from real-time ranking data.

Exact install estimates within tiers
Track install growth over time
Milestone progress predictions

Upgrade to Pro

Need 47,487 more installs to reach 200K+

Rank Changes

Current #371

Change

Best #

Upgrade to Pro

Unlock 30-day and 90-day rank history charts with a Pro subscription.

Upgrade Now

Active Installs Growth

Upgrade to Pro

Active Installs 0,000,000+

Growth +0.0%

Peak 0,000,000

Downloads Growth

Downloads

Growth

Peak

Upgrade to Pro

Unlock 30-day, 90-day, and yearly download history charts with a Pro subscription.

Upgrade Now

Reviews & Ratings

4.7

177 reviews

Overall 94%

160 (90%)

3 (2%)

0 (0%)

2 (1%)

12 (7%)

Support Threads Overview

Resolved

Unresolved

Total Threads

Resolved

Unresolved

17%

Resolution Rate

Security History

Source: WPVulnerability

14 known vulnerabilities on record · 3 in the last 24 months · checked 1 week ago

Aug 5, 2026

WP 2FA – Two-factor authentication for WordPress [wp-2fa] < 4.1.0

CVE-2026-15372 · Fixed in v4.1.0
Jun 23, 2026

WP 2FA – Two-factor authentication for WordPress [wp-2fa] < 3.1.1.2

CVE-2026-12988 · Fixed in v3.1.1.2
Nov 3, 2025

WP 2FA – Two-factor authentication for WordPress [wp-2fa] < 3.0.0

CVE-2025-12628 · Fixed in v3.0.0
Jun 20, 2024

WP 2FA – Two-factor authentication for WordPress [wp-2fa] < 2.6.4

CVE-2022-44587 · Fixed in v2.6.4
Apr 16, 2024

WP 2FA – Two-factor authentication for WordPress [wp-2fa] < 2.6.3

CVE-2024-32568 · Fixed in v2.6.3
Jan 2, 2024

WP 2FA – Two-factor authentication for WordPress [wp-2fa] < 2.6.0

CVE-2023-6506 · Fixed in v2.6.0
Jan 2, 2024

WP 2FA – Two-factor authentication for WordPress [wp-2fa] < 2.6.0

CVE-2023-6520 · Fixed in v2.6.0
Dec 7, 2022

WP 2FA – Two-factor authentication for WordPress [wp-2fa] < 2.2.1

CVE-2022-44595 · Fixed in v2.2.1
Sep 14, 2022

WP 2FA – Two-factor authentication for WordPress [wp-2fa] < 2.3.0

CVE-2022-2891 · Fixed in v2.3.0
May 6, 2022

WP 2FA – Two-factor authentication for WordPress [wp-2fa] < 2.2.1

CVE-2022-1527 · Fixed in v2.2.1

Showing the 10 most recent of 14 records.

Track This Plugin

Get detailed analytics, keyword tracking, and position alerts delivered to your inbox.

Start Tracking Free

Plugin Details

Version: 4.1.0
Last Updated: Aug 11, 2026
Requires WP: 5.5+
Tested Up To: 7.0.4
PHP Version: 7.4 or higher
Author: Melapress

Support & Rating

Rating: ★ ★ ★ ★ ★ 4.7
Reviews: 177
Support Threads: 6
Resolved: 17%

Keywords

2-factor authentication 2FA google authenticator two factor authentication WordPress authentication

Upgrade to Pro

Unlock keyword rankings, search positions, and detailed analytics with a Pro subscription.

Upgrade Now

Similar Plugins

Adminify – White Label, Admin Menu Editor, Login Customizer

6K+ installs

#2,752

Master Addons for Elementor – Elementor Addons, Widgets, Mega Menu Builder, Popup Builder, Widget Builder & Template Kits

30K+ installs

#1,007

TL;DR

AI summary of the plugin's readme

WP 2FA is aimed at WordPress site administrators who need to secure user logins. It adds two-factor authentication that can be enabled or enforced for all users or specific roles to protect against password leaks, automated guessing, and brute force attacks.

Passkeys support
Authenticator app (TOTP) support
Code over email
Developer API for custom 2FA methods
Backup codes for recovery
Wizard-driven setup
2FA policies with grace periods
REST API endpoints

Frequently Asked Questions

Common questions about WP 2FA – Two-factor authentication for WordPress

No, the plugin does not send any data to us whatsoever. The only data we receive is license data from the premium edition of the plugin.

The free edition of WP 2FA includes the following 2FA methods: Authenticator app 2FA and code over email. This allows you to use Google Authenticator OTP The premium edition adds YubiKey, one-click email link, SMS 2FA, and Authy push notifications.

WP 2FA includes a REST API that allows developers to enable and verify 2FA during custom authentication flows, such as AJAX-based login forms, mobile apps, or headless WordPress websites. Refer to the REST API in WP 2FA documentation for more information.

WP 2FA includes backup authentication methods so that if the primary authentication method fails, you and your users can still log in. The free version of the plugin includes backup codes, which can be configured during 2FA configuration or at any point after that from the profile page. The premium edition adds 2FA backup codes over email.

In the unlikely event that you are unable to supply your 2FA code, there are several steps you can take to gain access to your WordPress dashboard. First, check if there is another administrator who can reset your 2FA. If this is not possible, manually deactivate the plugin, log in without 2FA, re-activate the plugin, and then reconfigure your 2FA.

Yes, WP 2FA is multisite compatible. The plugin can be activated at the network level. 2FA policies can be enforced on all users, a subsection of users, or per site on the network. It also supports network setups with different domains.

We update the plugin fairly regularly to ensure the plugin continues to run in tip-top shape while adding new features from time to time.

Yes, WP 2FA fully supports Google Authenticator on WordPress. WP 2FA also supports many other 2FA authenticator apps.

Support for the free edition of the plugin is provided only via the WordPress.org support forums. You can also refer to our support pages for all the technical and product documentation. If you are using the Premium edition, you get direct access to our support team via one-to-one email support.

You can report security bugs through the Patchstack Vulnerability Disclosure Program. Please use this form. For more details, please refer to our Melapress plugins security program.