1
Require Email 2FA
WP Registry grade A. No security issues foundGradeANo security issues foundWP Registry
Make two-factor mandatory for all WordPress users (emailed-code floor, per-role exclusions) and lock the XML-RPC/REST API-login path to an allowlist. Optional must-use mode.
★ 1179≈30
2
Two-Factor Extended
WP Registry grade B. Medium-severity findings · 1 findingGradeBMedium-severity findings · 1 findingWP Registry
Extends the WordPress Two Factor plugin with advanced role-based controls, forced 2FA methods, and enhanced administrative features for single-site and Multisite installations.
★ 0154≈30
3
Two Factor Web Authentication
WP Registry grade C-. High-severity findings · 1 findingGradeC-High-severity findings · 1 findingWP Registry
WebAuthn for the Wordpress Two Factor plugin
★ 417≈10
4
2FA (by ROBOTSTXT)
WP Registry grade A. No security issues foundGradeANo security issues foundWP Registry
Adds two-factor authentication to the WordPress login flow.
★ 0508≈10
5
Lightweight email-based two-factor authentication for WordPress admin access.
★ 099
6
WordPress Plugin: Enhanced two-factor authentication with an authenticator app, email verification, backup codes, and a secure login process from sxtmedia.
★ 07