Skip to content
PluginCanary

Google Authenticator

by Ivan · 20,000+ active installs · Checked 4 Nov 2026
Healthy

Healthy: maintained, last release 23 Aug 2026, 2 releases in 24 months, no unpatched vulnerabilities.

98/ 100 Canary Score
Sub-scores for Google Authenticator
Ownership100
Maintenance100
Security95
SupportNo data
ReputationNo data

How the score works

Quick answers

Is Google Authenticator still maintained?
Yes. Last release 23 Aug 2026, 2 releases in the last 24 months. 23 Aug 2026 · wordpress.org
Who owns Google Authenticator, and has it changed hands?
No change recorded. Main committer ivankk since Apr 2019. 4 Nov 2026 · SVN log
Was Google Authenticator removed from wordpress.org?
No. Listed on wordpress.org as of 4 Nov 2026. 4 Nov 2026 · wordpress.org
Is Google Authenticator safe?
2 known vulnerabilities, all fixed (latest in 0.56). Not on the exploited list. 3 Aug 2026 · Wordfence Intelligence
Is the latest Google Authenticator update safe to install?
No ownership change before 0.56. No one-star spike after it. 28 Jul 2026 · Release history

Active signals

Facts we detected, with links to the source.

No open risk signals. Signals appear here when we detect an ownership change, closure, vulnerability or decline.

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
ivankk11 Apr 2019 to 23 Aug 2026, 19 commits

1 committer recorded. No ownership change since 2011.

Maintenance

Last release
2 months ago
Releases, 24 months
2
Tested up to
7.1 current
Requires PHP
not stated supported 8.2+
Releases per quarter
Releases per quarter for Google Authenticator
Q1 20240
Q2 20240
Q3 20240
Q4 20240
Q1 20250
Q2 20250
Q3 20250
Q4 20250
Q1 20260
Q2 20261
Q3 20261
Q4 20260

Last release 23 Aug 2026. Tested with WordPress 7.1 (current).

Reputation

Last 90 days: no reviews. Lifetime: 4.3.

Average rating stayed at 5.0 between Q1 2024 and Q2 2026.

Rating distribution
5 star105
4 star7
3 star3
2 star2
1 star18
Latest low reviews

Security record

1 vulnerability in 24 months (2 on record), patched (latest fixed in 0.56).

Show 2 patched vulnerabilities
PublishedIssueCVSSAffectedFixed inDays to patch
3 Aug 2026Google Authenticator <= 0.55 - Cross-Site Request Forgery4.3<= 0.550.56Patched before disclosure
28 Apr 2016Google Authenticator <= 0.47 - Improper Authentication6.5<= 0.470.48Patched before disclosure

Changelog mentions of security fixes: 0.56 (CSRF).

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Support

Support history appears after our first snapshots of the forum counts.

Momentum

20,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for Google Authenticator
4 May 2026569
11 May 20261,668
18 May 20262,051
25 May 20261,778
1 Jun 20261,505
8 Jun 20261,580
15 Jun 20261,680
22 Jun 20261,508
29 Jun 20261,246
6 Jul 20261,740
13 Jul 20261,137
20 Jul 20261,655
27 Jul 202611,928
3 Aug 20263,494
10 Aug 20262,280
17 Aug 20262,147
24 Aug 20262,182
31 Aug 20261,760
7 Sep 20261,576
14 Sep 20261,829
21 Sep 20261,937
28 Sep 20261,718
5 Oct 20262,077
12 Oct 20262,211
19 Oct 20263,159
26 Oct 20262,420
2 Nov 2026556

Weekly downloads over the last 4 weeks are 5% below the 27-week average.

Healthier alternatives

Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.

Two Factor AuthenticationScore 100 · 20,000+Login rebuilderScore 100 · 20,000+LWS Hide LoginScore 100 · 20,000+WP Limit Login AttemptsScore 100 · 10,000+Login Security CaptchaScore 100 · 10,000+

Facts

Version0.56
AuthorIvan
Added16 May 2011
Last updated23 Aug 2026
Active installs20,000+
Requires WordPress4.5
Tested up to7.1.4
Requires PHPnot stated
CategorySecurity & Privacy > Security Scanning & Malware Protection
Tagsotp, login, password, security, authentication

Other plugins by this author: Expiring Posts

Questions

Is Google Authenticator still maintained?

Yes. Last release 23 Aug 2026, 2 releases in the last 24 months.

Who owns Google Authenticator, and has it changed hands?

No change recorded. Main committer ivankk since Apr 2019.

Was Google Authenticator removed from wordpress.org?

No. Listed on wordpress.org as of 4 Nov 2026.

Is Google Authenticator safe?

2 known vulnerabilities, all fixed (latest in 0.56). Not on the exploited list.

Is the latest Google Authenticator update safe to install?

No ownership change before 0.56. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 4 Nov 2026.Report a data issue