Add two-factor authentication and passwordless passkey sign-in to WordPress accounts.
Alternatives to Two Factor
Plugins below are selected for functional relevance and current directory signals. Active-install counts do not affect this ranking.
WordPress plugins with similar use cases
Compatibility and update metadata provide context, not a quality guarantee. Review each plugin’s details for your site.
Lightweight two-factor authentication that just works. Protect your WordPress site with authenticator apps or email codes in under 2 minutes.
Instant account security with effortless multi-factor authentication via Mobile Push, Mobile Passcode (TOTP), WebAuthn/U2F Security Keys, and more.
Enterprise-grade Two-Factor Authentication for WordPress with TOTP, Email OTP, backup codes, and role-based enforcement.
Free 2FA plugin for unlimited users with Passkey, Google Authenticator, Email/SMS OTP, Push Notification & passwordless login.
Standards-based two-factor authentication (TOTP & e-mail), brute-force lockout, login alerts and an audit log — with no external service.
Secure your WordPress login with two-factor authentication (2FA) using any TOTP authenticator app — no external services, no bloat.
Add app-based two-factor authentication to your WordPress login. Scan a QR code, then enter a 6-digit code. Backup codes keep you from locking out.
Enterprise-grade Two-Factor Authentication (2FA) with support for Email, SendGrid API, Webhooks, WhatsApp, and SMS delivery.
A simple and secure Two-Factor Authentication plugin that sends a verification code to your email.