Google Authenticator (miniOrange)

Plugin · Free + paid

10,000+ active installs · Rated 4.5/5 · Updated October 21, 2026

Visit website

A plugin that adds a second login step for WordPress users, with methods such as authenticator apps, email or text codes, push notifications and passkeys, plus passwordless sign-in. It suits sites that want flexible authentication options. A free version supports unlimited users with common methods, and paid plans add advanced methods and features.

Pros

  • Unlimited users on the free plan
  • Passkey and TOTP two-factor login at no cost
  • Login activity report and brute-force lockout included

Cons

  • Push, SMS and WhatsApp codes need a paid plan
  • Upsell screens appear throughout the admin
  • Contacts the vendor's cloud API for licence checks

Topics: Security plugins

Mentioned in

Alternatives