Skip to content
PluginCanary

Two Factor Authentication

by David Anderson / Team Updraft · 20,000+ active installs · Checked 3 Nov 2026
Healthy

Healthy: Two Factor Authentication is maintained, has no open risk signals and no unpatched vulnerabilities.

91/ 100 Canary Score
Sub-scores for Two Factor Authentication
Ownership100
Maintenance100
Security100
Support70
Reputation70

How the score works

Active signals

Facts we detected, with links to the source.

No open risk signals. Signals appear here when we detect an ownership change, closure, vulnerability or decline.

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
DavidAnderson20 Mar 2015 to 26 Oct 2026, 171 commits

1 committer recorded. No ownership changes recorded since 3 Nov 2026.

Maintenance

Last release
9 days ago
Releases, 24 months
5
Tested up to
7.1 current
Requires PHP
5.6 supported 8.2+
Releases per quarter for Two Factor Authentication
Q1 20240
Q2 20241
Q3 20240
Q4 20243
Q1 20250
Q2 20250
Q3 20251
Q4 20251
Q1 20260
Q2 20260
Q3 20260
Q4 20261

Last release 26 Oct 2026. Tested with WordPress 7.1 (current).

Support

Support history appears after our first snapshots of the forum counts.

Security record

PublishedIssueCVSSAffectedFixed inDays to patch
18 Dec 2018Two Factor Authentication <= 1.3.12 - Cross-Site Request Forgery8.8< 1.3.131.3.131
20 Apr 2015Two Factor Authentication < 1.1.10 - Cross-Site Scripting6.1< 1.1.101.1.101

Source: Wordfence Intelligence.

Reputation

Average rating 4.3 in Q1 2024.

Rating distribution
5 star62
4 star2
3 star3
2 star1
1 star9
Latest low reviews

Momentum

20,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for Two Factor Authentication
4 May 2026347
11 May 2026542
18 May 2026553
25 May 2026589
1 Jun 2026492
8 Jun 2026467
15 Jun 2026554
22 Jun 2026500
29 Jun 2026494
6 Jul 2026602
13 Jul 2026503
20 Jul 2026626
27 Jul 2026582
3 Aug 2026572
10 Aug 2026575
17 Aug 2026620
24 Aug 2026599
31 Aug 2026560
7 Sep 2026664
14 Sep 2026622
21 Sep 2026741
28 Sep 2026627
5 Oct 2026636
12 Oct 2026538
19 Oct 20261,236
26 Oct 202611,896
2 Nov 2026581

Weekly downloads over the last 4 weeks are 252% above the 27-week average.

Healthier alternatives

Same category, higher Canary Score. Never sponsored.

LoginizerScore 93 · 1,000,000+FluentAuth - Login Security, Two-Factor Authentication, Passkeys & Social LoginScore 93 · 10,000+All In One LoginScore 92 · 60,000+

Facts

Version1.17.0
AuthorDavid Anderson / Team Updraft
Added20 Mar 2015
Last updated26 Oct 2026
Active installs20,000+
Requires WordPress5.3
Tested up to7.1.4
Requires PHP5.6
CategorySecurity & Privacy > Security Scanning & Malware Protection
Tags2FA, TFA, two factor, two factor auth, google authenticator

Other plugins by this author: UpdraftPlus: WP Backup & Migration Plugin, WP-Optimize - Cache, Compress images, Minify & Clean database to boost page speed & performance, All-In-One Security (AIOS) - Security and Firewall, Redux Framework, Easy Updates Manager, Internal Link Juicer: SEO Auto Linker for WordPress, WPGet API - Connect to any external REST API, Upload Larger Plugins, UpdraftCentral Dashboard, Testimonial Slider, European VAT Compliance Assistant for WooCommerce, Use Administrator Password

Questions

Is Two Factor Authentication still maintained?

Two Factor Authentication was last updated on 26 Oct 2026. Its Canary status is Healthy.

Is Two Factor Authentication safe?

Two Factor Authentication has no open unpatched vulnerabilities on record. 0 vulnerabilities were published in the last 24 months. Its Canary status is Healthy.

Who owns Two Factor Authentication?

The wordpress.org author is David Anderson / Team Updraft. Recent committers: DavidAnderson, plugin-master. We have recorded no ownership change.

What can I use instead of Two Factor Authentication?

Plugins in the same category with a higher Canary Score: Loginizer, FluentAuth - Login Security, Two-Factor Authentication, Passkeys & Social Login, All In One Login.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews, Wordfence Intelligence.Plugin data refreshed 3 Nov 2026.Report a data issue