PluginScout

Secure 2FA — WordPress Login Plugin

by Mohamed Endisha · WordPress.org page · Website

v1.0.0 Tested up to WP 6.7.7 PHP 7.4+

Secure 2FA has 10+ active installs on WordPress.org and 661 downloads all time. We have tracked it since September 4, 2026; download trends appear after 30 days of data. The last update was on April 10, 2025, tested up to WordPress 6.7.7.

Secure 2FA at a glance

Active installs
10+
Total downloads
661
Downloads, last 30 days
–
available after 30 days of tracking
30-day growth
–
tracking since September 4, 2026

Is Secure 2FA well maintained?

Support threads resolved
No open threads
nothing waiting on the WordPress.org forum
WordPress compatibility
Behind
tested up to WordPress 6.7.7, not yet with the current 7.1

Features

The feature list from the plugin's own readme on WordPress.org, trimmed to the essentials.

  • Free two-factor authentication (2FA) plugin
  • Multiple authentication methods: One-time password (OTP), Yubico OTP (YubiKey), Email OTP, and WhatsApp OTP
  • Customizable OTP configurations: Expiration time, retries, and more
  • Role-based enforcement: Require 2FA for all or specific roles while excluding others
  • Supports WordPress Multisite and single-site installations
  • Activity log tracking: Monitor authentication attempts and security events
  • Rate limiting: Prevent brute-force attacks by limiting OTP requests per user
  • Backup recovery codes: Allow users to regain access if they lose their primary 2FA method
  • Automatic log cleanup: Enable or disable automatic deletion of old activity logs with configurable schedules
  • UI control: Manage the visibility of the “Configure 2FA” option in the sidebar, admin toolbar, and user list

Details

Secure 2FA adds an extra layer of security to your WordPress login process by enabling 2FA via several authentication methods.

The full description, screenshots and every review live on the WordPress.org page.

Rankings Secure 2FA competes in

Tags

  • 2FA
  • login
  • TFA

More from Mohamed Endisha

Version
1.0.0
Last updated
Apr 10, 2025
First published
Apr 10, 2025
Requires WordPress
6.0
Tested up to
6.7.7
Requires PHP
7.4
Pricing
Free on WordPress.org

Secure 2FA FAQ

What does Secure 2FA do?

According to its WordPress.org readme, Secure 2FA offers Free two-factor authentication (2FA) plugin, Multiple authentication methods: One-time password (OTP), Yubico OTP (YubiKey), Email OTP, and WhatsApp OTP, Customizable OTP configurations: Expiration time, retries, and more, Role-based enforcement: Require 2FA for all or specific roles while excluding others and Supports WordPress Multisite and single-site installations.

How many active installs does Secure 2FA have?

WordPress.org reports 10+ active installs for Secure 2FA as of September 7, 2026.

Is Secure 2FA still maintained?

The last release was on April 10, 2025, more than a year ago. WordPress.org shows a warning on plugins that go this long without an update.

Is Secure 2FA free?

Secure 2FA is free to install from WordPress.org. Many plugins also sell a paid version or add-ons.