Active installationsNewAdoption metric — not a quality score
WordPress.org ratingNo WordPress.org ratings yet
Official packageDirect from WordPress.org
Repository metrics are context, not quality scores. Active installations measure adoption and can strongly reflect a plugin’s age and historical popularity. Ratings, recent updates and “Tested up to” metadata also do not guarantee modern code, error-free operation, security, feature completeness or suitability for a particular site. Why active installs don’t tell the whole story →
WP PlugIndex currently records OOSOFT 2FA Security version 1.0.2 as active, updated 5mo ago and tested up to WordPress 6.9.
Overview
About this plugin
OOSOFT 2FA Security adds robust two-factor authentication to your WordPress site. ) or a one-time code sent to your email address.
Key Features:
TOTP Authenticator App — compatible with Google Authenticator, Authy, Microsoft Authenticator, and any RFC 6238-compliant app.
Email OTP — sends a time-limited one-time code to the user’s registered email address.
Backup Codes — generate single-use recovery codes so users are never locked out.
Role-Based Enforcement — require 2FA for specific roles (e.g. administrators) while leaving it optional for others.
Rate Limiting — brute-force protection with configurable attempt limits and lockout periods.
Security Logs — detailed event logging with filterable admin view and automatic pruning.
Encrypted Secret Storage — TOTP secrets are encrypted at rest using libsodium (preferred) or AES-256-GCM/CBC via OpenSSL.
HKDF Key Derivation — encryption keys are derived from your WordPress secret keys; no raw key material is stored.
WordPress.org metadata
Plugin tags
Topics listed for this plugin in the WordPress.org directory.
two factor authentication
2fa
otp
security
totp
Compatibility & maintenance
Compatibility & maintenance
Tested up to WordPress 6.9
Not yet marked as tested with WordPress 7.1. WordPress.org currently lists Tested up to 6.9.
Current WordPress releaseWordPress 7.1
WordPress.org Tested up to6.9
Minimum requirementsWordPress 6.0 · PHP 8.0
Update activity15 May 20265mo ago
“Tested up to” is directory metadata supplied by the plugin author. WP PlugIndex does not turn an older declaration into a claim that the plugin is incompatible.
Changes recorded by WP PlugIndex
Recent tracked changes
No tracked version or compatibility changes have been recorded by WP PlugIndex yet.
Tracking & source
WP PlugIndex tracks public WordPress.org directory metadata and records selected version, compatibility and availability changes as they are detected.
