Active installationsNewAdoption metric — not a quality score
WordPress.org ratingNo WordPress.org ratings yet
Official packageDirect from WordPress.org
Repository metrics are context, not quality scores. Active installations measure adoption and can strongly reflect a plugin’s age and historical popularity. Ratings, recent updates and “Tested up to” metadata also do not guarantee modern code, error-free operation, security, feature completeness or suitability for a particular site. Why active installs don’t tell the whole story →
WP PlugIndex currently records Rad 2FA — Two-Factor Login (Email & Authenticator App) version 1.2.1 as active, updated 1mo ago and tested up to WordPress 7.1.
Overview
About this plugin
This plugin adds a second authentication factor for the user roles you choose. After a correct username and password, an extra code is required — the site admin picks the method:
Email — a one-time numeric code sent to the user’s email address.
Authenticator app (TOTP) — a standard 6-digit code from an app such as Google Authenticator, Authy, or Microsoft Authenticator (this plugin is not affiliated with or endorsed by Google). Each user connects the app in their own profile: scan the QR code or enter the secret key manually.
If the site uses TOTP but a specific user hasn’t connected the app yet, they temporarily get an email code at login instead — so nobody gets locked out.
Features:
Enable 2FA per user role
Two verification methods: email code or authenticator app (TOTP)
Configurable email code length, lifetime, and attempt limit
Admin screens and email codes follow each user’s own WordPress language setting (Users → Profile → Language) — no site-wide language switch needed
Email codes are stored only as a hash; the TOTP secret is stored encrypted (AES-256-CBC)
The QR code is generated entirely in the browser — the secret is never sent to a third-party service
Credits
js by davidshimjs (MIT license). com/davidshimjs/qrcodejs
Donate
If you find this plugin useful, please consider supporting its development.
com/rad181
WordPress.org metadata
Plugin tags
Topics listed for this plugin in the WordPress.org directory.
two factor
2fa
login
security
totp
Compatibility & maintenance
Compatibility & maintenance
Tested with WP 7.1
Marked as tested with the current WordPress 7.1 release.
Current WordPress releaseWordPress 7.1
WordPress.org Tested up to7.1
Minimum requirementsWordPress 5.8 · PHP 7.4
Update activity16 Sept 20261mo ago
“Tested up to” is directory metadata supplied by the plugin author. WP PlugIndex does not turn an older declaration into a claim that the plugin is incompatible.
Changes recorded by WP PlugIndex
Recent tracked changes
Version1.2.0→1.2.1
Tracking & source
WP PlugIndex tracks public WordPress.org directory metadata and records selected version, compatibility and availability changes as they are detected.
