Duo Two-Factor Authentication
Easily add Duo Security two-factor authentication to your WordPress website. Enable two-factor authentication for your admins and/or users.
Use with caution
Duo Two-Factor Authentication works, but test it on a staging site before relying on it in 2026. It runs on 3K+ sites, is rated 3.7/5 and was last updated 1 year ago, and scores 42/100 on our health check.
- No update in over a year
- Only tested up to WordPress 6.0 (latest is 7.1)
How does it stack up?
Side-by-side on installs, updates, ratings & support
Daily downloads
Download spikes usually follow a new release — each site that auto-updates counts as a download.
Rankings
Where Duo Two-Factor Authenticati… stands todayWordPress.org search rankings
Live position in the plugin search, top 100| Keyword | Position |
|---|---|
| authentication | >100 |
| Authenticator | #63 |
| login | >100 |
| two factor | #64 |
| username | >100 |
Version adoption
Share of active sites per release.
Rating breakdown
★★★★★★★★★★ 3.7 from 39 reviews
About Duo Two-Factor Authentication
From the official readme · v2.5.7Description
Duo Security provides two-factor authentication as a service to protect against account takeover and data theft. Using the Duo plugin you can easily add Duo two-factor authentication to your WordPress website in just a few minutes!
Rather than relying on a password alone, which can be phished or guessed, Duo’s authentication service adds a second layer of security to your WordPress accounts. Duo enables your admins or users to verify their identities using something they have—like their mobile phone or a hardware token—which provides strong authentication and dramatically enhances account security.
Duo is easy to setup and use. With Duo there’s no extra hardware or complicated software to install, just sign up for Duo’s service and install the plugin. Then you can set which user roles you want to enable two-factor authentication for—admins, editors, authors, contributors, and/or subscribers—without setting up user accounts, directory synchronization, servers, or hardware.
When they log in, your users have multiple ways they can authenticate, including:
- One-tap authentication using Duo’s mobile app (our fastest, easiest way to authenticate)
- One-time passcodes generated by Duo’s mobile app (works even with no cell coverage)
- One-time passcodes delivered to any SMS-enabled phone (works even with no cell coverage)
- Phone callback to any phone (mobile or landline!)
- One-time passcodes generated by an OATH-compliant hardware token (if you’re feeling all old school)
Protect your WordPress website in minutes with Duo.
End of Support Notice
Support for the traditional Duo Prompt experience using the Duo WordPress plugin ended on September 30, 2024. Please use the new Duo Universal plugin for WordPress. Read more about the End of Suppport and migration to the new plugin on our Duo for WordPress – Duo Universal Prompt documentation page
Installation
Integrating Duo two-factor authentication with WordPress is a breeze.
See our instructions at duo.com
Frequently asked questions
How do I get started with Duo?
Before installing the plugin, you’ll need to sign up for a free account at https://duo.com/.
Is Duo’s two-factor service really free?
Yes, Duo is free up to 10 users and no credit card is required to get started! Paid plans for more than 10 users start at only $1/user/month.
WordPress integration is great, but what if I want to protect my own web applications with two-factor?
If you’re interested in protecting other web applications with Duo’s two-factor authentication, check out all our online documentation to see all of our drop-in integrations and to access our APIs and web SDK.
Changelog
Wordpress 5.6 support
2.5.7
- WordPress 5.6 support
2.5.6
- Bug fixes
2.5.5
- Bug fixes
2.5.4
- Update Duo WebSDK to version 2.6
2.5.3
- Update Duo-Web-v2.js
2.5.2
- WordPress 4.5 support
- Updated iframe style to be consistent with documentation
Screenshots
For developers
Is this your plugin? Show off the numbers.
Add a live badge to your site, docs or GitHub README. It updates on its own — no account needed.
Best Duo Two-Factor Authentication alternatives
All authentication plugins →
FAQ
Duo Two-Factor Authentication: quick answers
Straight answers, pulled from live WordPress.org data.
Live data from WordPress.org · checked Sep 28, 2026
Is Duo Two-Factor Authentication free?
Yes. Duo Two-Factor Authentication is free to download and use from the official WordPress.org plugin directory.
Is Duo Two-Factor Authentication safe to use in 2026?
Duo Two-Factor Authentication works, but test it on a staging site before relying on it in 2026. It runs on 3K+ sites, is rated 3.7/5 and was last updated 1 year ago, and scores 42/100 on our health check.
How many websites use Duo Two-Factor Authentication?
Duo Two-Factor Authentication is active on 3K+ WordPress websites and has been downloaded 193,464 times since it launched in May 2011. It was downloaded 1,063 times in the last 30 days.
Does Duo Two-Factor Authentication work with WordPress 7.1?
Duo Two-Factor Authentication is officially tested up to WordPress 6.0.16, while the latest release is 7.1.2. It may still work, but try it on a staging site first.
When was Duo Two-Factor Authentication last updated?
The latest version, 2.5.7, was released on June 6, 2025 (1 year ago).
Who makes Duo Two-Factor Authentication?
Duo Two-Factor Authentication is developed and maintained by Duo Security.
What are the best alternatives to Duo Two-Factor Authentication?
The most popular alternatives to Duo Two-Factor Authentication are Limit Login Attempts (300K+ installs), WPS Limit Login (100K+ installs) and Two Factor (100K+ installs).
Powered by PageForge
Want thousands of pages that rank like these? Build them in an afternoon.
This directory runs on the same engine as PageForge. Turn any spreadsheet, CSV or API into thousands of fast, SEO-ready WordPress pages — with schema, internal links and AI-written copy baked in.
- CSV, Google Sheets & API data sources
- AI content, schema & internal links per page
- Works with Elementor, Gutenberg, Yoast & Rank Math
- Free on WordPress.org — no credit card
