by Melapress 4.7 (184 reviews)

WP 2FA – Two-factor authentication for WordPress

Name: WP 2FA – Two-factor authentication for WordPress
Rating: 4.7 (184 reviews)
Author: Melapress

Get better WordPress login security; add two-factor authentication (2FA) for all your users with this easy-to-use plugin.

WP 2FA ranks #351 among WordPress.org plugins with 100,000+ active installations, a 4.7/5 rating from 184 reviews, and was last updated Oct 14, 2026. Data from WordPress.org, refreshed twice daily — see methodology.

Compatible with WP 7.1.4

v4.2.1 Current Version v4.2.1

Updated 3 weeks ago Last Update on 14 Oct, 2026

Refreshed 6 days ago Last Refreshed on

Top 1% by installs Downloads +132.1% this week Actively maintained

View on WordPress.org

Rank

#351

— No change

Active Installs

100K+

-37.3%

KW Avg Position

1.4

0.8 better

Downloads

2.1M

+1,530 today

Support Resolved

69%

— No change

Rating

94%

Review 4.7 out of 5

4.7 (184 reviews)

Next Milestone 200K

Total Progress 61.9%

100K+ 200K+

Ranks to Climb

Growth Needed

8,000,000

Active Installs

Pro

Unlock Exact Install Count

See the precise estimated active installs for this plugin, calculated from real-time ranking data.

Exact install estimates within tiers
Track install growth over time
Milestone progress predictions

Upgrade to Pro

Need 38,122 more installs to reach 200K+

Rank Changes

Current #351

Change

Best #

Upgrade to Pro

Unlock 30-day and 90-day rank history charts with a Pro subscription.

Upgrade Now

Active Installs Growth

Upgrade to Pro

Active Installs 0,000,000+

Growth +0.0%

Peak 0,000,000

Downloads Growth

Downloads

Growth

Peak

Upgrade to Pro

Unlock 30-day, 90-day, and yearly download history charts with a Pro subscription.

Upgrade Now

Reviews & Ratings

4.7

184 reviews

Overall 94%

165 (90%)

3 (2%)

1 (1%)

2 (1%)

13 (7%)

Support Threads Overview

Resolved

Unresolved

Total Threads

Resolved

Unresolved

69%

Resolution Rate

Security History

Source: WPVulnerability

17 known vulnerabilities on record · 6 in the last 24 months · checked 2 weeks ago

Oct 8, 2026

WP 2FA – Two-factor authentication for WordPress [wp-2fa] < 4.2.0

CVE-2026-108066 · Fixed in v4.2.0
Oct 3, 2026

WP 2FA – Two-factor authentication for WordPress [wp-2fa] < 4.1.0

CVE-2026-103514 · Fixed in v4.1.0
Oct 1, 2026

WP 2FA – Two-factor authentication for WordPress [wp-2fa] < 4.2.0

CVE-2026-62142 · Fixed in v4.2.0
Aug 5, 2026

WP 2FA – Two-factor authentication for WordPress [wp-2fa] < 4.1.0

CVE-2026-15372 · Fixed in v4.1.0
Jun 23, 2026

WP 2FA – Two-factor authentication for WordPress [wp-2fa] < 3.1.1.2

CVE-2026-12988 · Fixed in v3.1.1.2
Nov 3, 2025

WP 2FA – Two-factor authentication for WordPress [wp-2fa] < 3.0.0

CVE-2025-12628 · Fixed in v3.0.0
Jun 20, 2024

WP 2FA – Two-factor authentication for WordPress [wp-2fa] < 2.6.4

CVE-2022-44587 · Fixed in v2.6.4
Apr 16, 2024

WP 2FA – Two-factor authentication for WordPress [wp-2fa] < 2.6.3

CVE-2024-32568 · Fixed in v2.6.3
Jan 2, 2024

WP 2FA – Two-factor authentication for WordPress [wp-2fa] < 2.6.0

CVE-2023-6520 · Fixed in v2.6.0
Jan 2, 2024

WP 2FA – Two-factor authentication for WordPress [wp-2fa] < 2.6.0

CVE-2023-6506 · Fixed in v2.6.0

Showing the 10 most recent of 17 records.

Track This Plugin

Get detailed analytics, keyword tracking, and position alerts delivered to your inbox.

Start Tracking Free

Plugin Details

Version: 4.2.1
Last Updated: Oct 14, 2026
Requires WP: 5.7+
Tested Up To: 7.1.4
PHP Version: 7.4 or higher
Author: Melapress

Support & Rating

Rating: ★ ★ ★ ★ ★ 4.7
Reviews: 184
Support Threads: 16
Resolved: 69%

Keywords

2-factor authentication 2FA WordPress authentication google authenticator two factor authentication

Upgrade to Pro

Unlock keyword rankings, search positions, and detailed analytics with a Pro subscription.

Upgrade Now

Similar Plugins

Adminify – White Label, Admin Menu Editor, Login Customizer

6K+ installs

#2,757

Master Addons for Elementor – Elementor Addons, Widgets, Mega Menu Builder, Popup Builder, Widget Builder & Template Kits

30K+ installs

#1,015

TL;DR

AI summary of the plugin's readme

WP 2FA is aimed at WordPress site administrators who need to secure user logins. It adds two-factor authentication that can be enabled or enforced for all users or specific roles to protect against password leaks, automated guessing, and brute force attacks.

Passkeys support
Authenticator app (TOTP) support
Code over email
Developer API for custom 2FA methods
Backup codes for recovery
Wizard-driven setup
2FA policies with grace periods
REST API endpoints

Frequently Asked Questions

Common questions about WP 2FA – Two-factor authentication for WordPress

No, the plugin does not send any data to us whatsoever. The only data we receive is license data from the premium edition of the plugin.

The free edition of WP 2FA includes the following 2FA methods: Authenticator app 2FA and code over email. This allows you to use Google Authenticator OTP The premium edition adds YubiKey, one-click email link, SMS 2FA, and Authy push notifications.

WP 2FA includes a REST API that allows developers to enable and verify 2FA during custom authentication flows, such as AJAX-based login forms, mobile apps, or headless WordPress websites. Refer to the REST API in WP 2FA documentation for more information.

WP 2FA includes backup authentication methods so that if the primary authentication method fails, you and your users can still log in. The free version of the plugin includes backup codes, which can be configured during 2FA configuration or at any point after that from the profile page. The premium edition adds 2FA backup codes over email.

In the unlikely event that you are unable to supply your 2FA code, there are several steps you can take to gain access to your WordPress dashboard. First, check if there is another administrator who can reset your 2FA. If this is not possible, manually deactivate the plugin, log in without 2FA, re-activate the plugin, and then reconfigure your 2FA.

Yes, WP 2FA is multisite compatible. The plugin can be activated at the network level. 2FA policies can be enforced on all users, a subsection of users, or per site on the network. It also supports network setups with different domains.

We update the plugin fairly regularly to ensure the plugin continues to run in tip-top shape while adding new features from time to time.

Yes, WP 2FA fully supports Google Authenticator on WordPress. WP 2FA also supports many other 2FA authenticator apps.

Support for the free edition of the plugin is provided only via the WordPress.org support forums. You can also refer to our support pages for all the technical and product documentation. If you are using the Premium edition, you get direct access to our support team via one-to-one email support.

You can report security bugs through the Patchstack Vulnerability Disclosure Program. Please use this form. For more details, please refer to our Melapress plugins security program.