Yubikey
Enhanced login security for WordPress by requiring the presentation of a One Time Password (OTP) from a registered Yubikey
5(1 reviews)
·40 active installs·Updated 11 months agoAs of April 2026, Yubikey is a WordPress MFA plugin with 40 active installations and a 5/5 rating from 1 reviews. It has been downloaded 995 times in total. Requires WordPress 5.2+ and PHP false+. Available on WordPress.org since 2008. Top alternative: Two Factor.
5/51 reviews
40active installs
995total downloads
18 yearssince 2008
Overview
This plugin dramatically enhances the security of your WordPress website by adding Multi Factor Authentication (MFA) in the form of One Time Passwords (OTP)
using Yubikey USB Tokens. In addition to providing your username and password to login, this plugin requests an OTP code
generated by a Yubikey, validates this via an API and only grants access if this check passes. The requirement to use an OTP can be set on a user by user
basis and there is also a feature to require users above a certain privilege level to always use OTP.
External services
This plugin connects to an API to validate the OTP tokens generated by your security key. This is required because storing the private keys
on the same web server as the site you wish to protect would be a security risk.
By default Yubico’s…
Screenshots
Ratings & Reviews
51 reviews
5 ★
1
4 ★
0
3 ★
0
2 ★
0
1 ★
0
Compatibility
| WordPress | 5.2+ requiredTested up to 6.8.5 |
| PHP | false+ required |
Top Alternatives to Yubikey
Frequently Asked Questions
Changelog
1.0.1
- Added restriction so plugin file cannot be accessed directly
- Added a description in the readme file that explains the use of the external Yubico validation service
Contributors
Plugin data sourced from WordPress.org. Analysis and metrics by PluginSift.