Duo Two-Factor Authentication

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

Share of active installs on each version of this plugin · 100% run the current release. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Refined from the date this plugin crossed into its current band.

No paid tier is visible, so we don't put a figure on revenue or sale value: that would be guessing. The install base is a real asset to an acquirer, just not one public data lets us price. A small install base leaves thin data to model from.

Fans call it easy to set up and a solid MFA layer, while others report it suddenly failing, stale releases with no PHP 8 support, and developers who don't answer.

1. ★★★★★ dsitechmktg

   2.6y ago

   Love having this plugin because it adds an excellent layer of much needed security

   Read on wp.org ↗
2. ★★★★★ ChrisKnight

   3.6y ago

   This used to be an awesome plugin. It offered seamless integration with Duo, blocking admin access to my site in the case of a password compromise or brute force attack. Sadly, it recently just stopped working. No Duo verification page, no errors in the logs; and the only way to get back into my site was ssh in and delete the plugin. Duo has apparently given up on the plugin, according to their github repo.They should just pull this plugin from listings.

   Read on wp.org ↗
3. ★★★★★ sotte

   3.7y ago

   Best 2FA addon for WordPress – if it wasn’t so neglected. No updates for half a year, no PHP 8. Too bad. Could have been so great. Now it’s out. This topic was modified 3 years, 7 months ago by sotte. Reason: Correction

   Read on wp.org ↗
4. ★★★★★ chueyise

   4.2y ago

   I use Duo Security for many different apps and it works great. The negative reviews typically mean the person is not familiar with how to implement Duo Security correctly.

   Read on wp.org ↗
5. ★★★★★ webdraco

   5.7y ago

   The configuration and integration was super easy and I am using this for my Office 365 and VPN access as well. It’s great to be able to use a single MFA for multiple application.

   Read on wp.org ↗
6. ★★★★★ techguysa

   6.0y ago

   Sure tiny bit of setting up to phone etc Works perfectly fine. the constant nagging up updates annoying but okay. Just wish on DUO site i can add my other administrator in without hassle

   Read on wp.org ↗
7. ★★★★★ doubleb53

   6.0y ago

   Its a solid plugin for allowing MFA to be integrated into your website. It allows you to use the DUO app on your phone, call your phone or enter a passcode. Make sure to setup a Duo account before installing and activating the app. I would also suggest that you “test” the login after install while still logged into your website on another computer as a just in case. I am not sure why people are dumping on this plugin. I only have a few users and it seems to work fine and I am thankful they provided this app to the store.

   Read on wp.org ↗
8. ★★★★★ rbizy

   6.2y ago

   Do not use. A Huge wordpress logo is at the top of the Duo login screen for all to see. It cannot be removed. Support are pretty useless saying “well that is how it works” yet you wont find that on any of their documentation. Also, it lets you use SMS only as an option yet your users see a weird message asking them to “choose an option” (there is only one). Plus the entire wording of their web prompt is simply confusing – a horrible UX which they charge $3 USD per use for! I wish I never heard of Duo – has cost me a fortune and now need to unwind it from this project. Trust me – Abort – if you are using the wordpress plugin. This topic was modified 6 years, 1 month ago by rbizy.

   Read on wp.org ↗

Recent releases and news for this plugin

1. — Version 2.5.7 WordPress 5.6 support 2.5.7
2. — Version 2.5.6 Bug fixes 2.5.6
3. — Version 2.5.5 Bug fixes 2.5.5
4. — Version 2.5.4 Update Duo WebSDK to version 2.6 2.5.4
5. — Version 2.5.3 Update Duo-Web-v2.js 2.5.3
6. — Version 2.5.2 WordPress 4.5 support Updated iframe style to be consistent with documentation 2.5.2

Automated install-time checks, tested on PHP 7.4.8 · WP 5.6

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

1. 2026-02-14 4K+ → 3K+ down after 246 days in tier
2. 2025-06-13 5K+ → 4K+ down after 195 days in tier
3. 2024-11-30 6K+ → 5K+ down after 29 days in tier
4. 2024-11-01 7K+ → 6K+ down after 104 days in tier
5. 2024-07-20 8K+ → 7K+ down after 114 days in tier
6. 2024-03-28 9K+ → 8K+ down

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

• Duo Universal 2K+ installs · 3.9★ · 4 shared tags B
• SecSign 200+ installs · 4.3★ · 3 shared tags C
• Force Login With Email 200+ installs · 3.6★ · 3 shared tags D
• L Limit Login Attempts 300K+ installs · 4.6★ · 2 shared tags D
• WPS Limit Login 100K+ installs · 4.8★ · 2 shared tags A
• WP-Members Membership Plugin 50K+ installs · 4.6★ · 2 shared tags A

Embed this report card

Drop a live Pulse card for Duo Two-Factor Authentication into a readme, a review or a deck. It updates itself.

Duo Two-Factor Authentication: 3K+ active installs, 3.7★ (39 reviews). Plugin Pulse (WP Mayor), as of 2026-08-29. https://plugins.wpmayor.com/plugin/duo-wordpress