FluentAuth – Login Security, Two-Factor Authentication, Passkeys & Social Login

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory searches this plugin turns up in, and which way each one is moving. WordPress.org publishes no history of search positions, so this starts the day we first tracked a keyword and never backfills.

wp.org is where the directory puts the plugin for that search. On merit is where it would sit if results were ranked on rating, support and updates, without the install boost. The last column is how far the wp.org position moved, from our first reading in the last 90 days to the latest.

529 searches this plugin appeared in over the last 90 days, 20 listed. 417 left out as unrelated or noise (years, numbers, stray words).

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

Share of active installs on each version of this plugin. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Crossed into this band 13 months ago; a band this size takes about a year or more to cross, which places it about 90% of the way through.

1. ★★★★★ r0sc0

   5mo ago

   This is a great plugin. Even better has been the support I have received from the team.

   Read on wp.org ↗
2. ★★★★★ richard0508

   5mo ago

   There is no way to customize the login and registration fields. Even when using the provided shortcuts, these pages still cannot be customized as needed. The documentation is so brief that it is difficult to find any truly useful information. After integrating Google Sign-In and Google Registration, users who register with a Google account get stuck on the login page and are never redirected, making the registration process unusable. FluentAuth customer service team didn’t solve my problem at all. They spent two whole weeks repeatedly telling me that I was just stuck on the login issue, which was a complete waste of my time. In the end, I had to fix it myself. The actual issue was that after completing the registration, the page cache got completely stuck and failed to pass the data to the account login. This caused an infinite loop on the login page, making it absolutely impossible to log in. This is clearly a flaw in your system’s design and has absolutely nothing to do with any third-party plugins. This topic was modified 4 weeks, 1 day ago by richard0508.

   Read on wp.org ↗
3. ★★★★★ DeepBlue

   6mo ago

   Fluent Auth / Fluent Security is a nice security plugin with all the most important security features, but without the unecessary and the bloat

   Read on wp.org ↗
4. ★★★★★ gfa7

   7mo ago

   Got superior support for resolving a conflict and finding issues in somebody else’s code. Thanks again!

   Read on wp.org ↗
5. ★★★★★ unknowncreative

   11mo ago

   Over all it works and does a dam good jobonly current complaint/bug, is that login with google still requires a code to be sent and entered.Hope to see this plugin for years and years to come

   Read on wp.org ↗
6. ★★★★★ zchas42

   12mo ago

   I wanted to implement a login system with the requirement for users to enter an email code on login. This mitigates login sharing among users. Very effective, did the job perfectly. Raised one support ticket query which was responded to with a “right first time” solution within 24 hours. Very happy.

   Read on wp.org ↗
7. ★★★★★ Manni02

   1.1y ago

   I had been using Theme-My-Login for many years, including after it became paid-for, but it had many compatibility issues and support wasn’t always worth the yearly license fee, so I started looking at other options. I’m a huge fan of Fluent plugins, and I gave a try to FluentPlugins 2.0, as it provided the improvements I was looking for: customizable login and register forms, login redirects, customization of system emails and a few other features that made it a much stronger alternative than its V1.0 (which I had looked at but wasn’t advanced enough for my use). V2.0 is free, it works great, it allowed me to replace Theme-My-Login and a few other plugins, and it’s both light and compatible with all my installed plugins. It also works seamlessly with all the other plugins from the fluent family, which I highly recommend as well, both in their free and paid-for versions. Support is great, as always. A cosmetic issue I had is about to be resolved in the next release and I was provided a .css early to resolve it without having to wait for this upcoming release. The main downside for me is that the magic login feature doesn’t work for our website. I reported the issue and I hope it will be solved at some point in the future. Fluent support has offered to look at our website, as it’s not a general issue, but unfortunately for various reasons we can’t allow third party access. This issue would probably have been resolved by support, had this been possible. One last issue is that the login redirect feature doesn’t work in our website, but I use Uncanny Toolkit for this, so it’s not a huge problem. Regarding missing features, I would like Fluent Security to offer simultaneous login protection, similar to what’s offered by the excellent Loggedin plugin, as it would be really useful for membership sites. This feature request is noted, so I hope it will be implemented at some point, but in the meantime the two plugins work fine together, along with the additional security offered by Wordfence. Overall, I’m very happy with the plugin, and highly recommended. I only hope that a few issues will be fixed and features implemented so that I can get rid of a few more plugins. This is the only reason why I didn’t give it 5 stars. I’ll revise this review when/if some of the features mentioned above are implemented.

   Read on wp.org ↗
8. ★★★★★ Michael Maguire

   1.2y ago

   A very useful plugin and also free.

   Read on wp.org ↗

Recent releases and news for this plugin

1. — Version 2.1.2 Hardened Security Scan and Settings endpoints with stricter input validation and sanitization Sanitized social auth redirect cookie to prevent storing untrusted values Added client token verification in Google One-Tap lo 2.1.2
2. — Version 2.1.1 Introducing One-Tap Login via Google Social Auth Connection Improved Translation & Localization Security: Improved Data Security and Sanitization and compitable with latest WordPress security standards Bug Fixes and Perf 2.1.1
3. — Version 2.0.3 Typo and Smartcode fixed on Custom Emails WP_Error Notice fixed 2.0.3
4. — Version 2.0.2 Fixed: Login Redirect Issue Fixed Typo on Admin Menu Fixed Styling Issues 2.0.2
5. — Version 2.0.0 Introduing Login/Signup Page Customizer Added Login with Facebook Added Syststem Emails Custimizations Introducing WordPress Core Files Integrity Check Configurable: One-Click Login via Email as primary login method UI & 2.0.0
6. — Version 1.1.0 Added hooks for 3rd party developers Improvement on Authentication flow 1.1.0

All 3 disclosed vulnerabilities are patched in the current version (3.1.0). Sites still on an older version should update.

1. Patched Medium · 5.3 FluentAuth – Login Security, Two-Factor Authentication, Passkeys & Social Login <= 2.1.2 - Unauthenticated Email Verification Bypass ↗
   2026-09-17 CVE-2026-78296 Insufficient Verification of Data Authenticity Affects <= 2.1.2 Patched in 3.0.0
2. Patched Medium · 6.4 FluentAuth - Auth Security Plugin <= 2.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'fluent_auth_reset_password' Shortcode ↗
   2025-12-15 CVE-2025-13728 Improper Neutralization of Input During Web Page Generation Affects <= 2.0.3 Patched in 2.1.0
3. Patched Medium · 6.5 FluentAuth <= 1.0.1 - IP Spoofing to Protection Mechanism Bypass ↗
   2022-12-27 CVE-2022-4746 Use of Less Trusted Source Affects <= 1.0.1 Patched in 1.0.2

Translated into 14 languages, 1 at 90% or more

Whether ChatGPT and Claude name this plugin when asked the category question, and whether the readme gives them something to quote.

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

1. 2025-10-11 9K+ → 10K+ up after 74 days in tier
2. 2025-07-29 8K+ → 9K+ up after 3 days in tier
3. 2025-07-26 9K+ → 8K+ down after 4 days in tier
4. 2025-07-22 8K+ → 9K+ up after 83 days in tier
5. 2025-04-30 7K+ → 8K+ up after 107 days in tier
6. 2025-01-13 6K+ → 7K+ up after 5 days in tier
7. 2025-01-08 7K+ → 6K+ down after 2 days in tier
8. 2025-01-06 6K+ → 7K+ up after 3 days in tier

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

Embed this report card

Drop a live Pulse card for FluentAuth – Login Security, Two-Factor Authentication, Passkeys & Social Login into a readme, a review or a deck. It updates itself.

FluentAuth – Login Security, Two-Factor Authentication, Passkeys & Social Login: 10K+ active installs, 4.1★ (35 reviews). Plugin Pulse (WP Mayor), as of 2026-11-01. https://plugins.wpmayor.com/plugin/fluent-security