Census › Plugin profiles › Two Factor
Two Factor
Figures from the Plugin Directory Census · as of 28 Aug 2026
100,000
Active installs, lower bound
Group: 100,000 to 999,999 installs
154
Days since the last release
Group median: 12
4.8
out of 5, from 208 ratings
Group median: 4.7 (10+ ratings)
50.0%
Support threads marked resolved, two months
Group: 68.2%
Full profile on wordpress.orgShow on the mapCompare with your own plugins
What is Two Factor and who is behind it?
Two Factor is a WordPress plugin in the “Security” field, made by WordPress.org. It has been listed in the directory since 10 Aug 2015, so for 11 years. WordPress.org has 15 plugins with at least 10,000 installs in the census. With 100,000 to 199,999 active installs it belongs to the 100,000 to 999,999 installs group; its last release came 154 days before the reference date, and it is tested up to WordPress 6.9.
This is how the author describes the plugin on wordpress.org:
“Enable Two-Factor Authentication (2FA) using time-based one-time passwords (TOTP), email, and backup verification codes.”
Self-description on wordpress.org, retrieved on 10 Sept 2026
When was Two Factor last released?
The last release of Two Factor came 154 days before the reference date; the group median is 12 days.
How many installs does Two Factor have?
Two Factor had 100,000 to 199,999 active installs on the reference date. Within its group, 219 plugins had a higher band and 179 plugins the same band.
The API reports installs only as a lower bound with one significant figure: 100,000 means at least 100,000 and at most 199,999.
Which WordPress version is Two Factor tested with?
No directory notice: tested up to WordPress 6.9, while core stood at 7.1 on the reference date. The notice appears once the field falls below 6.9; that applied to 8.0% of the group.
How does Two Factor compare with its group?
The group holds 399 listed plugins. 89.0% of them had a more recent last release than Two Factor; 5.3% had no release for more than 365 days.
| Figure | Two Factor | Group, 399 plugins |
|---|---|---|
| Days since the last release | 154 | median 12 |
| Rating | 4.8 (208) | median 4.7 (10+ ratings) |
| Support threads marked resolved | 50.0% | 68.2% |
| Tested up to | 6.9 | 47.6% on 7.1 |
| Requires PHP | 7.2 | most often 7.4 (41.6%) |
All values on the reference date
| Slug | two-factor |
|---|---|
| Author | WordPress.org |
| Active installs | 100,000 to 199,999 |
| Last release | 154 days before the reference date |
| Tested up to | WordPress 6.9 · core on the reference date: 7.1 |
| Requires WordPress | 6.8 |
| Requires PHP | 7.2 |
| Rating | 4.8 out of 5 from 208 ratings |
| Support threads, two months | 1 of 2 marked resolved |
| Listed since | 10 Aug 2015 |
| Total downloads | 1,754,256, updates included |
| Tags | 2fa, authentication, mfa, security, totp |
Tags
| Tag | Plugins with 10,000+ installs and this tag | Rank by installs | Median days since release |
|---|---|---|---|
| 2fa | 12 | 4 | 16 |
| authentication | 9 | 2 | 154 |
| mfa | 2 | 1 | 78 |
| security | 79 | 20 | 16 |
| totp | 1 | 1 | 154 |
Rank 1 has the highest installation band among plugins with 10,000+ installs and this tag; equal bands share a rank.
Class of 2015
Two Factor has been listed since 10 Aug 2015. Of the 201 plugins with 10,000+ installs added in 2015, 83.1% released within the 365 days before the reference date.
Same group, shared tags
Not a recommendation; the same figures for comparison. Alphabetical.
| Plugin | Active installs | Last release | Rating |
|---|---|---|---|
| Activity Log | 200,000 to 299,999 | 2 days before the reference date | 4.3 (74) |
| Admin Menu Editor | 300,000 to 399,999 | 9 days before the reference date | 4.6 (312) |
| Advanced Access Manager | 100,000 to 199,999 | 95 days before the reference date | 4.2 (420) |
| Anti-Malware Security and Brute-Force Firewall | 100,000 to 199,999 | 60 days before the reference date | 4.9 (783) |
| BBQ Firewall | 100,000 to 199,999 | 19 days before the reference date | 4.9 (160) |
| CloudSecure WP Security | 100,000 to 199,999 | 1 day before the reference date | 5.0 (2) |
| InfiniteWP Client | 200,000 to 299,999 | 9 days before the reference date | 4.4 (177) |
| Jetpack Protect | 100,000 to 199,999 | 16 days before the reference date | 4.6 (123) |
Do you maintain Two Factor?
If you maintain Two Factor, you can link to this profile, for example from your readme or your website. Both snippets show this badge:
HTML
<a href="https://hafenstudios.com/en/census/plugins/two-factor/"><img src="https://hafenstudios.com/census/plugins/badge-en.svg" alt="Two Factor in the Plugin Directory Census 01/2026" width="220" height="40"></a>
Markdown
[](https://hafenstudios.com/en/census/plugins/two-factor/)
The image is loaded from hafenstudios.com; as with every request, our server records the usual access data, which is deleted after 14 days. If you prefer not to, use a plain text link.
A value is wrong? Write to moin@hafenstudios.com; a documented correction leads to a new version.
How to cite
hafenstudios (2026): Two Factor, profile in the Plugin Directory Census 01/2026, reference date 28 Aug 2026. https://hafenstudios.com/en/census/plugins/two-factor/
Source and status
All values come from the full pull of the public wordpress.org API on 28 Aug 2026 (reference time 21:56:30 UTC). The analysis and text on this page are available under CC BY 4.0; the raw values come from the public wordpress.org API and are in the raw data. How the count was made is set out in the method, what the fields do not say under limits. hafenstudios builds WordPress plugins itself, see the conflict of interest. Corrections to moin@hafenstudios.com; a documented correction leads to a new version. From issue 02 this page will also show the change since the previous reference date. Collected and prepared by Horst Wenzel.
Plugin names and trademarks belong to their owners. hafenstudios is not affiliated with the authors named here.
