Cloudbridge 2FA
Uncomplicated 2FA plugin for WordPress with e-mail OTP and authenticator app support.
Use with caution
Cloudbridge 2FA works, but test it on a staging site before relying on it in 2026. Was last updated 4 months ago, and scores 49/100 on our health check.
- Small user base (<10 active installs)
- Very few reviews so far
How does it stack up?
Side-by-side on installs, updates, ratings & support
Daily downloads
Download spikes usually follow a new release — each site that auto-updates counts as a download.
Rankings
Where Cloudbridge 2FA stands todayWordPress.org search rankings
Live position in the plugin search, top 100| Keyword | Position |
|---|---|
| 2FA | >100 |
| passwords | >100 |
| security | >100 |
About Cloudbridge 2FA
From the official readme · v2.0.1Description
This plugin provides uncomplicated 2FA functionality for WordPress. It will
allow you to require a second, one time password or OTP, code to be entered
when certain (or all) users attempt to log in to WordPress.
The plugin supports two factor methods:
- six-digit codes sent by e-mail
- standards-based authenticator apps using TOTP
The e-mail code has a limited lifetime (defaults to 15 minutes). Once a code
has been consumed, it is considered invalid.
Authenticator app setup is handled from the user’s own profile page. The plugin
provides a QR code, a manual setup key, and recovery codes for when the
authenticator app is not available.
You may configure that only certain roles are required to use 2FA, and it is
recommended that you enable 2FA for those users with privileged access.
You may also configure the plugin to allow certain roles to enable an OTP code
bypass, which will set a cookie in that user’s web browser. The cookies are
partially based on the username, so several users can share the same browser,
but still be required to always enter the OTP code, or bypass it if the cookie
is present.
You can add custom text to the OTP code entry form, and you can add custom text
to the OTP code e-mail message.
The plugin can be configured to allow it to be handled/managed only by specific
users, thus making it harder for someone to accidentally or intentionally
deactivate it. The implemented solution for this is by no means waterproof. If
someone, for example, has access to your WordPress installation by means of FTP
or similar, the plugin files can be physically removed (or moved out of your
WordPress installation), which basically deactivates the plugin as well.
Credits
The Cloudbridge 2FA Plugin was written by Joaquim Homrighausen while converting caffeine into code.
Cloudbridge 2FA is sponsored by WebbPlatsen i Sverige AB, Sweden.
Commercial support and customizations for this plugin is available from WebbPlatsen i Sverige AB in Sweden.
If you find this plugin useful, the author is happy to receive a donation, good review, or just a kind word.
If there is something you feel to be missing from this plugin, or if you have found a problem with the code or a feature, please do not hesitate to reach out to support@webbplatsen.se.
This plugin can also be downloaded from code.webbplatsen.net and GitHub
More detailed documentation is available at https://code.webbplatsen.net/documentation/cloudbridge-2fa/
Kudos to Kev Quirk for Simple CSS
QR code setup on the authenticated profile page uses QR Code Generator for JavaScript by Kazuhiko Arase (MIT license).
Installation
This section describes how to install the plugin and get it working.
- Upload the contents of the
cloudbridge-2fafolder to the/wp-content/plugins/directory - Activate the plugin through the ‘Plugins’ menu in WordPress
- Configure the plugin settings
Is the plugin locale aware
Cloudbridge 2FA uses standard WordPress functionality to handle localization/locale. The native language localization of the plugin is English. It has been translated to Swedish by the author.
Are there any incompatibilities
This is a hard question to answer. There are no known incompatibilities.
Changelog
2.0.1
- Fixed a settings-page regression where saving one tab could unset values on another tab
- Fixed the Bypass 2FA tab layout after the recent admin UI changes
- Restored returning to the active settings tab after saving
- Sent expired or stale login verification attempts back to the WordPress login screen so the user can start over cleanly
2.0.0
- Verified with PHP 7.4, 8.1, 8.2, 8.3, and 8.4
- Added authenticator app support using standards-based TOTP
- Added recovery codes for authenticator-enabled accounts
- Added QR code and manual setup key support to the user profile
- Reworked the admin settings so authenticator-app and e-mail OTP settings are easier to find
- Hardened redirect handling in login and OTP completion flows
- Added CSRF protection to configuration import
1.0.5
- Verified with WordPress 6.8 and 6.9
1.0.4
- Verified with WordPress 6.7
- Verified with Plugin Check (PCP)
- Corrected some checks for uninstall.php and made it more WP-CLI compatible
1.0.3
- Fix some incorrect links in plugin and README.txt
1.0.2
- Fix of minor PHP warning
Screenshots
For developers
Is this your plugin? Show off the numbers.
Add a live badge to your site, docs or GitHub README. It updates on its own — no account needed.
Best Cloudbridge 2FA alternatives
All 2FA plugins →
FAQ
Cloudbridge 2FA: quick answers
Straight answers, pulled from live WordPress.org data.
Live data from WordPress.org · checked Oct 21, 2026
Is Cloudbridge 2FA free?
Yes. Cloudbridge 2FA is free to download and use from the official WordPress.org plugin directory.
Is Cloudbridge 2FA safe to use in 2026?
Cloudbridge 2FA works, but test it on a staging site before relying on it in 2026. Was last updated 4 months ago, and scores 49/100 on our health check.
How many websites use Cloudbridge 2FA?
Cloudbridge 2FA is active on <10 WordPress websites and has been downloaded 1,677 times since it launched in June 2024. It was downloaded 59 times in the last 30 days.
Does Cloudbridge 2FA work with WordPress 7.1?
Cloudbridge 2FA is officially tested up to WordPress 7.0.7, while the latest release is 7.1.3. It may still work, but try it on a staging site first.
What PHP version does Cloudbridge 2FA need?
Cloudbridge 2FA requires PHP 7.4 or higher. Most hosts run PHP 8.x today, so it works on any modern WordPress hosting.
When was Cloudbridge 2FA last updated?
The latest version, 2.0.1, was released on June 24, 2026 (4 months ago).
Who makes Cloudbridge 2FA?
Cloudbridge 2FA is developed and maintained by joho68.
What are the best alternatives to Cloudbridge 2FA?
The most popular alternatives to Cloudbridge 2FA are Wordfence Security (5M+ installs), Really Simple Security (3M+ installs) and Limit Login Attempts Securi… (1M+ installs).
Powered by PageForge
Want thousands of pages that rank like these? Build them in an afternoon.
This directory runs on the same engine as PageForge. Turn any spreadsheet, CSV or API into thousands of fast, SEO-ready WordPress pages — with schema, internal links and AI-written copy baked in.
- CSV, Google Sheets & API data sources
- AI content, schema & internal links per page
- Works with Elementor, Gutenberg, Yoast & Rank Math
- Free on WordPress.org — no credit card
