Google Authenticator for your WordPress blog.
As of April 2026, Google Authenticator is a WordPress otp plugin with 20K+ active installations and a 4.3/5 rating from 134 reviews. It has been downloaded 691K+ times in total. Requires WordPress 4.5+ and PHP false+. Available on WordPress.org since 2011. Last updated 3 years ago — may have compatibility concerns. Download volume is stable this week. Top alternative: miniOrange OTP Login, Verification and….
The Google Authenticator plugin for WordPress gives you two-factor authentication using the Google Authenticator app for Android/iPhone/Blackberry.
If you are security aware, you may already have the Google Authenticator app installed on your smartphone, using it for two-factor authentication on Gmail/Dropbox/Lastpass/Amazon etc.
The two-factor authentication requirement can be enabled on a per-user basis. You could enable it for your administrator account, but log in as usual with less privileged accounts.
If You need to maintain your blog using an Android/iPhone app, or any other software using the XMLRPC interface, you can enable the App password feature in this plugin,
but please note that enabling the App password feature will make your blog less secure.
Thanks to:
Oleksiy fo…
Great plugin, but I wish to use a QR code for scanning when I log in.
Works! Uses WordPress UI, is super lightweight, not overdesigned, and is trivial to set up. Great job!
Fatal error: Uncaught Firebase\JWT\BeforeValidException: Cannot handle token prior to 2023-04-30T20:30:33+0000 in …\one-tap-google-sign-in\includes\vendor\firebase\php-jwt\src\JWT.php
I understand it requires synchronization, but you need to handle this error properly.
Cheers
One of my sites got hacked and some spam blogs posted. Don’t know how they got access but decided to add 2FA as a preventative. Implemented for all authors. Works out of the box, simple interface without lots of bells and whistles.
Since a few days the plugin stopped working. It used to work perfect. Users who have Google Authenticator activated can’t login anymore. They get the message that their username/password is invalid while it isn’t. They’re able to login again when I deactivate Google Authenticator in their profile.
Is this a known bug, if so, how to fix this? Thanks in advance.
| WordPress | 4.5+ requiredTested up to 6.0.11 |
| PHP | false+ required |
Plugin data sourced from WordPress.org. Analysis and metrics by PluginSift.