Two Factor
100,000+ active installs · Rated 4.8/5 · Updated September 28, 2026
Two Factor adds a second login step using time-based codes from an authenticator app, codes sent by email, or backup codes. Each user turns on the methods they want in their profile and picks a primary one. Suits sites that want a maintained, open-source 2FA option with no account needed. Limit: each user must set it up individually, and the dummy method is for testing only.
Pros
- Authenticator app, email and backup code methods
- Each user chooses and sets a primary method
- WP-CLI commands for managing two-factor users
Cons
- Each user must configure it individually
- Dummy method is only for testing with WP_DEBUG
- A site admin can hide some methods, so options vary
Topics: Login plugins , Security plugins
Alternatives
-
Wordfence Security
5M+ active installs · Rated 4.7/5 · Updated September 30, 2026
A security plugin with an endpoint firewall, malware scanner, login protection and two-factor authentication.
-
Jetpack
3M+ active installs · Rated 3.7/5 · Updated October 12, 2026
A multi-purpose suite from Automattic that bundles many site tools under one account.
-
Really Simple SSL
3M+ active installs · Rated 4.9/5 · Updated September 15, 2026
A security plugin, formerly Really Simple SSL, that moves a site to HTTPS in one click and adds core hardening features.
-
WPS Hide Login
2M+ active installs · Rated 4.8/5 · Updated August 13, 2026
Changes the login URL so wp-login.php and wp-admin are not reachable by default for logged-out visitors.
-
All In One WP Security & Firewall
1M+ active installs · Rated 4.7/5 · Updated September 17, 2026
A security plugin offering login protection, firewall rules, user account hardening, file change detection and database security.
-
Disable Comments
1M+ active installs · Rated 4.7/5 · Updated October 25, 2026
A plugin for switching off comments across a WordPress site, either everywhere or only on chosen posts, pages or media.
-
SVG Support
1M+ active installs · Rated 4.8/5 · Updated July 25, 2026
SVG Support lets administrators upload SVG files to the media library.
-
Safe SVG
1M+ active installs · Rated 4.9/5 · Updated September 22, 2026
Safe SVG allows SVG uploads and sanitises each file on upload to strip scripts and unsafe markup.