PluginScout

FactorGuard — WordPress Authentication Plugin

FactorGuard – Two-Factor Authentication

by Usman Ali Qureshi · WordPress.org page

v1.0.0 Tested up to WP 7.1 PHP 8.2+

FactorGuard has fewer than 10 active installs on WordPress.org and 64 downloads all time. We have tracked it since September 4, 2026; download trends appear after 30 days of data. The last update was on August 31, 2026, tested up to WordPress 7.1.

FactorGuard at a glance

Active installs
fewer than 10
Total downloads
64
Downloads, last 30 days
–
available after 30 days of tracking
30-day growth
–
tracking since September 4, 2026

Is FactorGuard well maintained?

Support threads resolved
No open threads
nothing waiting on the WordPress.org forum
WordPress compatibility
Current
tested up to WordPress 7.1, the current release is 7.1

Features

The feature list from the plugin's own readme on WordPress.org, trimmed to the essentials.

  • ⚡ Email OTP — send a one-time passcode to the user’s registered email address
  • 📱 Authenticator App (TOTP) — full RFC 6238 support for Google Authenticator, Authy, Microsoft Authenticator, and any TOTP-compatible app
  • 🔑 One-time backup codes — hashed recovery codes so users never get locked out
  • 🔐 Military-grade encryption — TOTP secrets encrypted at rest using libsodium XSalsa20-Poly1305
  • 🚫 Replay attack protection — accepted TOTP codes are invalidated for the current time-slice
  • ⏱️ Brute force & rate limiting — configurable lockout after too many failed attempts
  • 🎛️ Flexible settings — OTP code length (4–10 digits), code expiry (1–60 min), lockout duration
  • 🧙 Setup wizard — guided onboarding to configure your preferred 2FA method in minutes
  • 🌐 API-safe — automatically bypasses OTP for REST API and XML-RPC requests
  • 🌍 Translation ready — fully internationalised and .pot file included
  • 🧹 Clean uninstall — removes all plugin data on uninstall (opt-in)

Details

Protect your WordPress login with Two-Factor Authentication (2FA) — email OTP and authenticator apps (TOTP) with military-grade libsodium encryption.

The full description, screenshots and every review live on the WordPress.org page.

Rankings FactorGuard competes in

Tags

  • 2FA
  • authentication
  • login security
  • otp
  • two factor

More from Usman Ali Qureshi

Version
1.0.0
Last updated
Aug 31, 2026
First published
Aug 31, 2026
Requires WordPress
5.6
Tested up to
7.1
Requires PHP
8.2
Pricing
Free on WordPress.org

FactorGuard FAQ

What does FactorGuard do?

According to its WordPress.org readme, FactorGuard offers ⚡ Email OTP — send a one-time passcode to the user’s registered email address, 📱 Authenticator App (TOTP) — full RFC 6238 support for Google Authenticator, Authy, Microsoft Authenticator, and any TOTP-compatible app, 🔑 One-time backup codes — hashed recovery codes so users never get locked out, 🔐 Military-grade encryption — TOTP secrets encrypted at rest using libsodium XSalsa20-Poly1305 and 🚫 Replay attack protection — accepted TOTP codes are invalidated for the current time-slice.

How many active installs does FactorGuard have?

WordPress.org reports fewer than 10 active installs for FactorGuard as of September 7, 2026.

Is FactorGuard still maintained?

Yes. The last release was on August 31, 2026 and it is tested up to WordPress 7.1.

Is FactorGuard free?

FactorGuard is free to install from WordPress.org. Many plugins also sell a paid version or add-ons.