A free and lightweight two-factor authentication (2FA) plugin for WordPress using TOTP and authenticator apps.
Alternatives to IP & Country Blocker Lite
Plugins below are selected for functional relevance and current directory signals. Active-install counts do not affect this ranking.
Relevant replacements
WordPress plugins with similar use cases
Compatibility and update metadata provide context, not a quality guarantee. Review each plugin’s details for your site.
Two-factor authentication, passkeys, social login, magic login, limit login attempts, file change scanning and audit logs for WordPress.
NeverLast Security Litev1.2.8
Local-first WordPress security: bounded firewall, login controls, administrator TOTP, health checks, integrity evidence and activity logs.
Free WordPress security plugin with malware scanner, vulnerability scanner, 2FA, brute force & login protection, audit log and hardening.
Ghostables Defender Litev0.1.6
Active security for WordPress: vulnerability scanning, file integrity, hardening checklist, two-factor authentication, and a tamper-evident audit log.
Firewall, 9 malware scanners, 2FA, country blocking, audit log preview — all free. 750+ WAF rules and 170,000+ signatures. No paywall.
Loqwall 2FAv1.0.0
Lightweight Two-Factor Authentication with Email OTP and Authenticator App support. No bloat, no external services.
ZA Creative Login Shieldv6.0.1
Enterprise WordPress login security with 2FA, WebAuthn passkeys, risk scoring, analytics, file integrity, and vulnerability scanning.
AphoniXv1.0.1
Protect WordPress login with lightweight custom CAPTCHA, Two-Factor Authentication (2FA), IP blocking, REST hardening, and custom login URL.
Login Security with Telegram Alerts protects WordPress logins, stops brute force, logs activity, and sends real-time Telegram alerts.