Duo Two-Factor Authentication
Watch: tested up to WordPress 6.0.18, 11 major versions behind 7.1.4.
| Ownership | 100 |
|---|---|
| Maintenance | 20 |
| Security | 100 |
| Support | 70 |
| Reputation | 70 |
Quick answers
- Is Duo Two-Factor Authentication still maintained?
- No. Last release 6 Jun 2025, over 1 year ago. 6 Jun 2025 · wordpress.org
- Who owns Duo Two-Factor Authentication, and has it changed hands?
- No change recorded. Main committer duosecurity since May 2011. 3 Nov 2026 · SVN log
- Was Duo Two-Factor Authentication removed from wordpress.org?
- No. Listed on wordpress.org as of 3 Nov 2026. 3 Nov 2026 · wordpress.org
- Is Duo Two-Factor Authentication safe?
- No known vulnerabilities on record. 3 Nov 2026 · Wordfence Intelligence
- Is the latest Duo Two-Factor Authentication update safe to install?
- No ownership change before 2.5.7. No one-star spike after it. 7 Apr 2020 · Release history
Active signals
Facts we detected, with links to the source.
Ownership timeline
Who commits to the plugin's code on wordpress.org, over time.
| duosecurity | 15 May 2011 to 6 Jun 2025, 143 commits |
|---|
1 committer recorded. No ownership change since 2011.
Maintenance
- Last release
- 17 months ago
- Releases, 24 months
- 0
- Tested up to
- 6.0 vs 7.1
- Requires PHP
- not stated supported 8.2+
| Q1 2024 | 0 |
|---|---|
| Q2 2024 | 0 |
| Q3 2024 | 0 |
| Q4 2024 | 0 |
| Q1 2025 | 0 |
| Q2 2025 | 0 |
| Q3 2025 | 0 |
| Q4 2025 | 0 |
| Q1 2026 | 0 |
| Q2 2026 | 0 |
| Q3 2026 | 0 |
| Q4 2026 | 0 |
Last release 6 Jun 2025. Tested up to 6.0, 11 major versions behind WordPress 7.1.
Reputation
Last 90 days: no reviews. Lifetime: 3.7.
| 5 star | 24 |
|---|---|
| 4 star | 2 |
| 3 star | 1 |
| 2 star | 1 |
| 1 star | 11 |
Security record
No published vulnerabilities on record for this plugin.
Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.
Support
Support history appears after our first snapshots of the forum counts.
Momentum
3,000+ active installs. History builds with each weekly snapshot.
| 4 May 2026 | 130 |
|---|---|
| 11 May 2026 | 305 |
| 18 May 2026 | 285 |
| 25 May 2026 | 286 |
| 1 Jun 2026 | 305 |
| 8 Jun 2026 | 369 |
| 15 Jun 2026 | 295 |
| 22 Jun 2026 | 315 |
| 29 Jun 2026 | 321 |
| 6 Jul 2026 | 288 |
| 13 Jul 2026 | 257 |
| 20 Jul 2026 | 278 |
| 27 Jul 2026 | 322 |
| 3 Aug 2026 | 361 |
| 10 Aug 2026 | 286 |
| 17 Aug 2026 | 238 |
| 24 Aug 2026 | 243 |
| 31 Aug 2026 | 244 |
| 7 Sep 2026 | 243 |
| 14 Sep 2026 | 297 |
| 21 Sep 2026 | 254 |
| 28 Sep 2026 | 305 |
| 5 Oct 2026 | 317 |
| 12 Oct 2026 | 255 |
| 19 Oct 2026 | 347 |
| 26 Oct 2026 | 327 |
| 2 Nov 2026 | 50 |
Weekly downloads over the last 4 weeks are 12% below the 27-week average.
Healthier alternatives
Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.
Facts
| Version | 2.5.7 |
|---|---|
| Author | Duo Security |
| Added | 15 May 2011 |
| Last updated | 6 Jun 2025 |
| Active installs | 3,000+ |
| Requires WordPress | 4.1 |
| Tested up to | 6.0.18 |
| Requires PHP | not stated |
| Category | Security & Privacy > Security Scanning & Malware Protection |
| Tags | login, username, two factor, Authenticator, authentication |
Other plugins by this author: Duo Universal
Questions
Is Duo Two-Factor Authentication still maintained?
No. Last release 6 Jun 2025, over 1 year ago.
Who owns Duo Two-Factor Authentication, and has it changed hands?
No change recorded. Main committer duosecurity since May 2011.
Was Duo Two-Factor Authentication removed from wordpress.org?
No. Listed on wordpress.org as of 3 Nov 2026.
Is Duo Two-Factor Authentication safe?
No known vulnerabilities on record.
Is the latest Duo Two-Factor Authentication update safe to install?
No ownership change before 2.5.7. No one-star spike after it.