1
Wordfence Security Included
TOTP authenticator-app 2FA, including WooCommerce integration.
80feature score
WordPress Security Plugins with Two-factor authentication
Second login factor via authenticator app, email or similar. 11 of the 12 plugins we track include it.
2
Sucuri Security Included
Authenticator-app 2FA with one-time backup codes (added in 2.5/2.8).
87feature score
3
Defender Security Included
Authenticator app, backup codes and email fallback; can be enforced per role.
79feature score
4
Shield Security Included
Email codes, authenticator apps and YubiKey OTP in the free plugin.
84feature score
5
MalCare Security Included
Email-based 2FA; free covers 2 admin users, rising to all users on Fortify.
80feature score
6
Kadence Security (formerly Solid Security) Included
2FA via authenticator app, email or backup codes in the free plugin.
77feature score
7
WP Cerber Security Included
Two-factor authentication for WordPress accounts.
69feature score
8
All-In-One Security (AIOS) Included
TOTP 2FA via Google/Microsoft Authenticator or Authy; advanced options in Premium.
61feature score
9
Really Simple Security Included
Free email 2FA enforceable per role; TOTP is Pro.
54feature score
10
Patchstack Paid version Personal protection
Two-factor authentication is included with paid protection.
60feature score
11
Limit Login Attempts Reloaded Included
Built-in 2FA is part of the free plugin.
33feature score