WP 2FA – Two-factor authentication for WordPress



Add an extra layer of security to your WordPress website login pages and its users. Enable two-factor authentication (2FA), the best protection against users using weak passwords, and automated password guessing and brute force attacks.

Features | Getting Started | 14-Day Premium Trial

Use the WP 2FA plugin to enable two-factor authentication for your WordPress administrator user, and to enforce your website users, or some of them to use 2FA. This plugin is very easy to use. It has wizards with clear instructions, so even non technical users can setup 2FA without requiring technical assistance.

Maintained & Supported by WP White Security

WP White Security builds high-quality WordPress security & admin plugins such as WPassword, and WP Activity Log, the #1 user-rated activity log plugin for WordPress.

Browse our list of WordPress security plugins to see how our plugins can help you better manage and improve the security of your WordPress websites and users.

WP 2FA Key plugin features & capabilities

Extend the functionality of WP 2FA & automate more

Upgrade to WP 2FA Premium to:

  • More 2FA methods such as 2FA over SMS, Push notification and one-click login
  • Add trusted devices – no need for 2FA code each time you log in
  • Whitelabel all the 2FA pages – for a consistent user experience
  • Fully whitelabel-enabled user 2FA wizards & emails; add your own the logo, upload custom CSS and also change the text
  • Give the users more alternative 2FA methods to choose from and use so they are never locked out
  • Add 2FA to your WooCommerce user pages with just one-click
  • Configure different 2FA policies for different user profiles
  • Easily get an overview of users’ 2FA setup with the reports
  • And many other features

Refer to the 2FA plugin features and benefits page to learn more about the benefits of upgrading to WP 2FA Premium.

Free and Premium Support

Support for WP 2FA is free on the WordPress support forums.

Premium world-class support is available via email to all WP 2FA Premium users.

Note: paid customer support is given priority and is provided via one-to-one email and over the phone. Upgrade to Premium to benefit from priority support.

For any other queries, feedback, or if you simply want to get in touch with us please use our contact form.

As Featured On:

Related Links and Documentation

From within WordPress

  1. Visit ‘Plugins > Add New’
  2. Search for ‘WP 2FA’
  3. Install & activate the WP 2FA from your Plugins page.


  1. Download the plugin from the WordPress plugins repository
  2. Unzip the zip file and upload the wp-2fa folder to the /wp-content/plugins/ directory
  3. Activate the WWP 2FA plugin through the ‘Plugins’ menu in WordPress


  • The first-time install wizard allows you to setup 2FA on your website and for your user within seconds.
  • The wizards make setting up 2FA very easy, so even non technical users can setup 2FA without requiring help.
  • You can require users to enable 2FA and also give them a grace period to do so.
  • Users can also use one-time codes via email as a two-factor authentication method.
  • You can use policies to require users to instantly set up and use 2FA, so the next time they login they will be prompted with this.
  • You can give users a grace period until they configure 2FA. You can also specify what should the plugin do once the grace period is over.
  • It is recommended for all users to also generate backup codes, in case they cannot access the primary device.
  • In the user profile users only have a few 2FA options, so it is not confusing for them and everything is self explanatory.


June 1, 2023
Had a couple small issues with setup, their support team was able to help me fix the issue and get everything working. Very easy to set up and has a great selection of 2fa options. Would definitely recommend it.
May 2, 2023
This is a really well crafted plugin which I've used for quite some time. I contacted support with a bit of an edge case issue and received a reply in less than an hour that perfectly solved my specific edge case. I highly recommend WP 2FA!
March 24, 2023
Tool works great, and what issues I had due to my complicated hosting setup was quickly resolved with the great support I received. Very satisfied with this plugin and the people behind it. 5/5
Read all 93 reviews

Contributors & Developers

“WP 2FA – Two-factor authentication for WordPress” is open source software. The following people have contributed to this plugin.


“WP 2FA – Two-factor authentication for WordPress” has been translated into 9 locales. Thank you to the translators for their contributions.

Translate “WP 2FA – Two-factor authentication for WordPress” into your language.

Interested in development?

Browse the code, check out the SVN repository, or subscribe to the development log by RSS.


2.4.1 (2023-02-16)

Release notes: Addressed broken plugin updating issue

  • New features

    • New option to send newly generated backup codes via email with just a click.
  • Improvements

    • Added instructions on how to manually copy the private key to the wp-config.php file in the dashboard notification.
    • Added additional checks for private key in wp-config.php file.
    • Reviewed & improved the first-time install wizard’s text and layout.
    • Updated the text of the plugin feature matrix.
    • Improved the build script to automatically remove all files not required by the plugin when installed.
    • “Remove 2FA” button in user profile page is removed when 2FA is enforced on a user.
  • Bug fixes

    • Fixed: users were not advised of plugin update and forced update was failing.
    • Fixed: broken “Contact us” link in the support page.
    • Fixed: “Settings saved” banner shown twice when changing WordPress settings –Support thread
    • Fixed: a number of strings were missing in the translation file.
    • Fixed: dropdown Menu Arrow is misplaced when the dropdown menu is opened.

Refer to the complete plugin changelog for more detailed information about what was new, improved and fixed in previous version updates of WP 2FA.