Google Authenticator

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

Share of active installs on each version of this plugin. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Refined from the date this plugin crossed into its current band.

No paid tier is visible, so we don't put a figure on revenue or sale value: that would be guessing. The install base is a real asset to an acquirer, just not one public data lets us price. A declining trend compresses what a buyer would pay.

1. ★★★★★ Paul

   5mo ago

   Hi Ivan, thanks so much for the update! I’ve used this for years and even started patching it myself to keep it compatible with newer PHP versions. So glad to see you’re still supporting it. Much appreciated!

   Read on wp.org ↗
2. ★★★★★ Trần Quân

   2.4y ago

   Great plugin, but I wish to use a QR code for scanning when I log in.

   Read on wp.org ↗
3. ★★★★★ Bart Bak

   3.3y ago

   Works! Uses WordPress UI, is super lightweight, not overdesigned, and is trivial to set up. Great job!

   Read on wp.org ↗
4. ★★★★★ ntalam

   3.3y ago

   Fatal error: Uncaught Firebase\JWT\BeforeValidException: Cannot handle token prior to 2023-04-30T20:30:33+0000 in …\one-tap-google-sign-in\includes\vendor\firebase\php-jwt\src\JWT.phpI understand it requires synchronization, but you need to handle this error properly. Cheers

   Read on wp.org ↗
5. ★★★★★ jjbbrr

   3.7y ago

   One of my sites got hacked and some spam blogs posted. Don’t know how they got access but decided to add 2FA as a preventative. Implemented for all authors. Works out of the box, simple interface without lots of bells and whistles.

   Read on wp.org ↗
6. ★★★★★ sianvdheide

   3.9y ago

   Since a few days the plugin stopped working. It used to work perfect. Users who have Google Authenticator activated can’t login anymore. They get the message that their username/password is invalid while it isn’t. They’re able to login again when I deactivate Google Authenticator in their profile. Is this a known bug, if so, how to fix this? Thanks in advance.

   Read on wp.org ↗
7. ★★★★★ Elenbaas

   4.0y ago

   Great little app. Easy to use and install, does the job. Saves me from having to use Wordfence, which is much resource heavier. This topic was modified 3 years, 10 months ago by Elenbaas.

   Read on wp.org ↗
8. ★★★★★ icedterminal

   4.2y ago

   This plugin works fine with PHP 7.4 and WP 6.0, if you’re using them. However, 7.4 ceases all support 28th Nov, 2022. At the time of my comment, this is 5 months away. Time is ticking. PHP 8.0 is in use on my server with WP 6.0. While WP works without issue, the plugin does not. Occasionally I get failures to authenticate. To get around this I have to login to the database and manually disable this plugin. The error log reports “Undefined array key” over and over. There is a different documented bug that has been solved by users you can find under the “Support” tab. The GitHub repo has gone untouched since 8th December, 2020. I fear this plugin has been abandoned. Unfortunate really. It’s dead simple to use with none of the extra stuff you don’t want that other plugins cram in.

   Read on wp.org ↗

Recent releases and news for this plugin

1. — Version 0.55 Improved PHP compatibility for PHP 7.4 through 8.5. Fixed deprecated and strict runtime issues in plugin code. Improved compatibility and safety of Base32 handling. 0.55
2. — Version 0.54 Fixed a bug in multisite. 0.54
3. — Version 0.53 Add a Polish translation 0.53
4. — Version 0.52 Add a Dutch translation Add a Portuguese translation 0.52
5. — Version 0.51 Fix a regression that broke app passwords 0.51
6. — Version 0.50 New maintainer ivankk Conditionally include base32 class 0.50

2 disclosed vulnerabilities on record for this plugin, all fixed in the current version. Sites on older versions stay exposed until they update.

1. Medium · 4.3 Google Authenticator <= 0.55 - Cross-Site Request Forgery ↗
   2026-08-03 CVE-2026-14204 Cross-Site Request Forgery (CSRF) Affects <= 0.55 Patched in 0.56
2. Medium · 6.5 Google Authenticator <= 0.47 - Improper Authentication ↗
   2016-04-28 Improper Authentication Affects <= 0.47 Patched in 0.48

Automated install-time checks, tested on PHP 8.1.12 · WP 7.0.1

Translated into 64 languages, 9 at 90% or more

Plus 40 more locales with partial translations.

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

1. 2025-10-17 30K+ → 20K+ down

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

• L Limit Login Attempts 300K+ installs · 4.6★ · 3 shared tags D
• WPS Limit Login 100K+ installs · 4.8★ · 3 shared tags A
• S Smart Passworded Pages 2K+ installs · 4.4★ · 3 shared tags D
• Loginizer 1M+ installs · 4.8★ · 2 shared tags A
• Security Optimizer – The All-In-One Protection Plugin 1M+ installs · 4.5★ · 2 shared tags A
• WP Ghost (Hide My WP Ghost) – Security & Firewall 100K+ installs · 4.5★ · 2 shared tags A

Embed this report card

Drop a live Pulse card for Google Authenticator into a readme, a review or a deck. It updates itself.

Google Authenticator: 20K+ active installs, 4.3★ (135 reviews). Plugin Pulse (WP Mayor), as of 2026-08-29. https://plugins.wpmayor.com/plugin/google-authenticator