Category · recomputed daily
authentication plugins
290 plugins in the directory carry the authentication tag. This page leads with what has moved in the last 90 days, because a ranked list of the biggest ones is available anywhere.
290
plugins
674,840+
combined reach
78
released in 90 days
51%
quiet 18 months+
2
movements in 90 days
What moved
Ownership changes, closures and long-silent plugins that shipped again, over a rolling 90-day window recomputed daily. Events older than 90 days drop off as new ones arrive. The part of this category that a directory listing cannot show. Nothing here says anything about intent.
| Date | Plugin | Installs | What happened |
|---|---|---|---|
| 02 Sep 2026 | LoginRadius CIAM | fewer than 10 | released after a long silence |
| 19 Aug 2026 | Login via Yandex – вход через Яндекс ID | 200+ | released after a long silence |
Most installed
The 50 most installed plugins carrying this tag, ordered by install band, which WordPress.org rounds to one significant digit. Ordering is adoption only. Nothing here is a recommendation, and no link on this page earns anything. The full directory, all categories together, is in the master list.
| Plugin | Installs | Rating | Last release |
|---|---|---|---|
| Limit Login Attempts Limit rate of login attempts, including by way of cookies, for each IP. Fully customizable. | 300,000+ | 4.6★ | 3 years ago · quiet |
| Two Factor Enable Two-Factor Authentication (2FA) using time-based one-time passwords (TOTP), email, and backup verification codes. | 100,000+ | 4.8★ | 5 months ago |
| WPS Limit Login WPS Limit login limit connection attempts by IP address | 100,000+ | 4.9★ | 23 days ago |
| WP-Members Membership Plugin The original WordPress membership plugin with content restriction, user login, custom registration fields, user profiles, and more. | 50,000+ | 4.6★ | 6 months ago |
| Google Authenticator Google Authenticator for your WordPress blog. | 20,000+ | 4.3★ | 14 days ago |
| Login by Auth0 Login by Auth0 provides improved username/password login, Passwordless login, Social login and Single Sign On for all your sites. | 10,000+ | 3.1★ | 2 years ago · quiet |
| Login for Google Apps Simple secure login and user management through your Google Workspace for WordPress (using oAuth2 and MFA if enabled). | 10,000+ | 4.6★ | 16 months ago |
| miniOrange 2FA – Two Factor Authentication for WordPress (OTP, SMS, Email, Google Authenticator) Free 2FA plugin for unlimited users with Passkey, Google Authenticator, Email/SMS OTP, Push Notification & passwordless login. | 10,000+ | 4.5★ | 11 days ago |
| WP Limit Login Attempts Limit rate of login attempts and block IP temporarily. Brute force attack protection. GDPR compliant. Captcha enabled. | 10,000+ | 4.6★ | 4 months ago |
| Two Factor (2FA) Authentication via Email Enable one-click login with this WordPress Two-Factor Authentication (2FA) plugin, utilizing email for added security. | 9,000+ | 5.0★ | 3 months ago |
| WP SAML Auth SAML authentication for WordPress. | 7,000+ | 4.5★ | 25 days ago |
| Log in with Google Minimal plugin that allows WordPress users to log in using Google. | 6,000+ | 4.6★ | 24 days ago |
| Authorizer Authorizer limits login attempts, restricts access to specific users, and authenticates against external sources (OAuth2, Google, LDAP, or CAS). | 5,000+ | 5.0★ | 4 days ago |
| authLdap Use your existing LDAP flexible as authentication backend for WordPress | 4,000+ | 5.0★ | 2 months ago |
| Active Directory Integration / LDAP Integration Active Directory Integration/LDAP Integration enables login & sync in WordPress with Active Directory/LDAP Directory credentials, 24/7 ACTIVE SUPPORT | 4,000+ | 4.9★ | 11 days ago |
| Duo Two-Factor Authentication Easily add Duo Security two-factor authentication to your WordPress website. Enable two-factor authentication for your admins and/or users. | 3,000+ | 3.7★ | 15 months ago |
| Shibboleth Allows WordPress to externalize user authentication and account creation to a Shibboleth Service Provider. | 3,000+ | 4.3★ | 2 months ago |
| Duo Universal Easily add Duo authentication to your WordPress website. Enable multi-factor authentication for your admins and/or users. | 2,000+ | 4.0★ | 8 months ago |
| Next Active Directory Integration Next Active Directory Integration allows WordPress to authenticate, authorize, create and update users against Microsoft Active Directory. | 2,000+ | 4.8★ | 11 days ago |
| WP Basic Authentication Basic Authentication for protected your development WordPress site like .htpasswd | 2,000+ | 5.0★ | 3 months ago |
| HivePress Authentication Allow users to sign in via third-party services. | 1,000+ | 5.0★ | 13 days ago |
| JSON API User Extends the JSON API Plugin to allow RESTful user registration, authentication & many other User Meta, BP functions. A Pro version is also available. | 1,000+ | 3.9★ | 2 months ago |
| Keyring An authentication framework that handles authorization/communication with most popular web services. | 1,000+ | 4.3★ | 3 years ago · quiet |
| Passwords Evolved A reimagining of WordPress authentication using modern security practices. | 1,000+ | 5.0★ | 18 months ago |
| Simple LDAP Login Integrating WordPress with LDAP shouldn't be difficult. Now it isn't. Simple LDAP Login provides all of the features, none of the hassles. | 1,000+ | 4.3★ | 23 months ago · quiet |
| WP 2-step verification Adds an extra layer of security to your Wordpress Account. Same as Google 2-step verification. | 1,000+ | 4.2★ | 11 months ago |
| Sessions Powerful sessions manager for WordPress with sessions limiter and full analytics reporting capabilities. | 900+ | 4.8★ | 19 days ago |
| WP Cassify The plugin is an Apereo CAS Client. It performs CAS authentication and autorization for Wordpress. | 800+ | 5.0★ | 3 months ago |
| Easy Basic Authentication – Add basic auth to site or admin area Secure your WordPress site with easy and effective basic authentication. Restrict access, monitor attempts, and enhance security. | 700+ | 5.0★ | 3 months ago |
| Logged-in-only A Plugin to lock down the whole site to prevent public access. | 700+ | 5.0★ | 6 days ago |
| HTTP Authentication Use an external authentication source in WordPress. | 600+ | 5.0★ | 2 years ago · quiet |
| Protect Login Add an additional layer of protection to your WordPress login and make sure bad actors have a hard time guessing your user's login credentials. | 600+ | 5.0★ | 2 months ago |
| IP Based Login IP Based Login allows you to directly login from an authorized IP without password. | 500+ | 4.9★ | 3 months ago |
| Whitelist IP For Limit Login Attempts This plugin allows you whitelist IP addresses so Limit Login Attempt plugin doesn't block them. | 500+ | 3.8★ | 10 years ago · quiet |
| wpDirAuth WordPress directory authentication plugin through LDAP and LDAPS (SSL). | 500+ | 4.7★ | 3 years ago · quiet |
| Firebase Authentication This plugin allows login into WordPress using Firebase user credentials and maps Firebase user data to WordPress user profile. | 400+ | 4.0★ | 12 days ago |
| Maestro Connector Give trusted web professionals admin access to your WordPress account. Revoke anytime. | 400+ | 3.0★ | 3.5 years ago · quiet |
| yubikey-plugin Enhanced Login Security for Your Wordpress blog. | 400+ | 3.8★ | 7.5 years ago · quiet |
| API Bearer Auth Access and refresh tokens based authentication plugin for the REST API. | 300+ | 5.0★ | 9 months ago |
| Membee Login Add member authentication and access role management to your WordPress site via Membee's powerful Member Single Sign-On web service. | 300+ | 3.4★ | 6 days ago |
| Force Login With Email Enable login in WordPress only with user e-mail address. | 200+ | — | 6 years ago · quiet |
| Login via Yandex – вход через Яндекс ID Wordpress плагин для входа через Яндекс позволяет легко регистрироваться и входить на сайт Wordpress и Woocommerce через YandexID. | 200+ | 5.0★ | 3 days ago |
| OAuth client Single Sign On for WordPress ( OAuth 2.0 SSO ) WordPress OAuth client SSO ( OAuth 2.0 & OpenID SSO ) plugin allows login ( Single Sign On ) with your OAuth Servers like AWS Cognito, Amazon, Az … | 200+ | 4.1★ | 3.5 years ago · quiet |
| SecSign The SecSign ID two-factor authentication WordPress Plugin will be discontinued. | 200+ | 4.6★ | 23 months ago · quiet |
| Sticklight Use WordPress authentication and permissions in external React applications via secure REST API endpoints. | 200+ | — | 3 months ago |
| wsecure lite wSecure hides admin URL so that default URL will no longer bring up the admin page. if who enter the secret key will be able to access admin area. | 200+ | 3.5★ | 2 months ago |
| Admintosh – WordPress admin customization and security tools login attempts, Firewall, reCAPTCHA, country restriction, Login History, change wp-login.php to anything make sure your site security. | 100+ | 5.0★ | 7 months ago |
| Biometric Authentication Passkeys are a safer and easier alternative to passwords. Simply use your fingerprint or face ID to log in with ease. | 100+ | 4.7★ | 2 years ago · quiet |
| DocCheck Login Open source DocCheck plugin for authenticating healthcare professionals via secure DocCheck login integration. | 100+ | 1.0★ | 3 months ago |
| Fail2WP Security plugin for WordPress with support for fail2ban. Tested with WordPress 5.5+ and PHP 7.4-8.4 | 100+ | 5.0★ | 2 months ago |
Nobody at wordpress.org assigns these. A plugin is in this category because its author typed the tag, and it is missing from it for the same reason. All categories