Plugin Pulse
← Pulse

Rublon Multi-Factor Authentication (MFA)

by Rublon · Security

Instant account security with effortless multi-factor authentication via Mobile Push, Mobile Passcode (TOTP), WebAuthn/U2F Security Keys, and more.

How scoring works →
85 Health · A
Maintenance 100/100
Rating quality 79/100
Support 70/100

85 health vs 64 average across 997 Security plugins

Directory ranking optimization

How it's scored →

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

96 / 100

Excellent listing optimization

Well tuned across the board

Update recency 100/100
WP compatibility 100/100
Rating quality 83/100
Listing tuning 100/100

Daily downloads

Since 2022-10-05 · 1,425 days · wp.org + Plugin Pulse archive

+71% vs prior 30d
11Downloads · Aug 26

30-day downloads

Rolling 30-day volume · peaks are release surges

192

now · peak 1.0K

18930d downloads · Aug 26

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

Rublon Multi-Factor · #9388 you miniOrange 2FA · #1605 Two Factor · #368 Wordfence Login Secu · #633

Rating trend

Star average over time · dips mark rough releases

4.2Stars · Aug 26

Update activity

How busy the existing users are, measured as downloads in the last 30 days for every 1,000 active sites. A spike means a new release everyone's pulling; a long, slow decline means an aging user base that updates less.

473per 1k installs · Aug 26

Release cadence

Occasionally updated
from wp.org release tags

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

1

releases in the last 12 months

3mo ago

latest release · v4.4.5

83

tagged releases on record

Recent releases

4.4.5 · 3mo ago4.4.4 · 2.2y ago4.4.3 · 2.8y ago4.4.2 · 3.3y ago4.4.1 · 3.3y ago4.4.0 · 3.3y ago4.3.2 · 3.7y ago4.3.1 · 3.8y ago4.3 · 4.2y ago4.2.2 · 4.3y ago4.2.1 · 4.4y ago4.2.0 · 4.4y ago4.0 · 4.6y ago3.2.12 · 7.4y ago

What its installed base runs

via wordpress.org

Share of active installs on each version of this plugin · 75% run the current release. Green is the current release; a big slice on older versions is a user base that has stopped updating.

v4.4 75%
v3.2 14%
v4.0 11%

Estimated active installs

The public count shows “400+”. Our estimate pins where the real number sits.

tracked estimate
400–500 ≈460

Refined from the date this plugin crossed into its current band.

Install history · since 2015-03-10 · 1,439 observations

400Installs · Aug 26

Estimated value

What this plugin might earn a year, and what it might sell for. Modeled from public signals; we don't see anyone's books.

Est. annual revenue

N/A

Est. acquisition value

N/A

No paid tier is visible, so we don't put a figure on revenue or sale value: that would be guessing. The install base is a real asset to an acquirer, just not one public data lets us price. A small install base leaves thin data to model from.

Details

Version
4.4.5
Last updated
16d ago
Added
2013-08-02 · 13 yrs old
Requires WP
5.0
Tested up to
7.1
Requires PHP
5.5.1

Recent reviews

All reviews on wp.org ↗
  1. turingagent
    7.0y ago

    Instantly and effectively broke my test site and prevented me from logging in once the site was back up. Absolute rubbish. Glad I tested it on our dev site rather than a client site.

    Read on wp.org ↗
  2. Anonymous User 15409766
    8.2y ago

    This is really one of most interesting two factors plugin for WordPress. Unfotunally, it says that my admin account is not protected and say to look at my profile to activate it. In the users view, there is a Rublon icon that say my account is protected. WTF ? There is no any options in the user profile page…

    Read on wp.org ↗
  3. kc001
    8.5y ago

    I started having problems last week when it started generating error #400 code instead of opening the wp dashboard right away. I was able to re-load the page to get to my dash. But the error messages continued until I took the plugin offline. Error messages stopped. Prior to that time, it was solid.

    Read on wp.org ↗
  4. MS416
    9.6y ago

    In the last two months I’ve been locked out from 3 or 4 of my websites by Rublon. I was using my usual laptop which worried me. Changed no settings, didn’t update anything major. Let me down one too many times and now looking for alternatives. DON”T USE THIS SOFTWARE. This topic was modified 9 years, 5 months ago by MS416.

    Read on wp.org ↗
  5. wonderdog4
    9.7y ago

    We have been using Rublon for about a year now. While it seems to work when it is turned on, there are definitely issues. Example: it is not set up to work with WPMU DEV support access. So every time we open the backdoor to allow support access, we have to deactivate Rublon. When we reactivate it a day or two later, we get an error message that says “Warning! Your account’s protection is disabled. Ask yor [sic] Administrator for more information.” So we send an email to support. The error message disappears a day or two after that with no explanation from Rublon support. This also happens whenever we have to deactivate plugins (including Rublon) to test for conflicts — which happens every few weeks. While we like the concept of two-factor authentication, we are still wondering if Rublon is the best tool to use for that purpose.

    Read on wp.org ↗
  6. marko2317
    9.8y ago

    Only one user per website and there is bug with ads..

    Read on wp.org ↗
  7. hartmutnz
    10.2y ago

    Plugin ok, BUT you need to pay if you want more than 1 login.. Also, the first screen still shows wp login form for everyone…then the 2 factor after that still giving people a chance to attempt login..

    Read on wp.org ↗
  8. bchignell
    10.3y ago

    After installing I never received the verification emails allowing me to login! Had to manually remove the plugin through FTP. Avoid this plugin! The whole concept of this plugin relies on email that fails to send!

    Read on wp.org ↗

Behavioral tests

via WP Hive

Automated install-time checks, tested on PHP 8.1.12 · WP 6.5.5

Low memory footprint
Low page-speed impact
Runs on latest PHP + WP
No PHP errors
No JS errors
Activates cleanly
No resource errors
No external HTTP errors
Optimized database use
Frequently updated

Languages

via translate.wordpress.org

Translated into 132 languages, 1 at 90% or more

Japanese 91%
German 75%
Polish 70%
Turkish 46%
Swedish 17%
Dutch 13%
Danish 12%
English (Canada) 12%
French (France) 12%
Greek 12%
Hebrew 12%
Indonesian 12%
Portuguese (Brazil) 12%
Russian 12%
Spanish (Spain) 12%
Bulgarian 11%
Chinese (China) 11%
Croatian 11%
Czech 11%
Finnish 11%
Hungarian 11%
Italian 11%
Norwegian (Bokmål) 11%
Portuguese (Portugal) 11%

Plus 108 more locales with partial translations.

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

  1. 2026-08-15 500+ → 400+ down after 2 days in tier
  2. 2026-08-13 400+ → 500+ up after 3 days in tier
  3. 2026-08-10 500+ → 400+ down after 3 days in tier
  4. 2026-08-07 400+ → 500+ up after 28 days in tier
  5. 2026-07-10 500+ → 400+ down after 26 days in tier
  6. 2026-06-14 400+ → 500+ up after 5 days in tier
  7. 2026-06-09 500+ → 400+ down after 5 days in tier
  8. 2026-06-04 400+ → 500+ up after 1 days in tier

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

Compare head to head →

Embed this report card

Drop a live Pulse card for Rublon Multi-Factor Authentication (MFA) into a readme, a review or a deck. It updates itself.

<iframe src="https://plugins.wpmayor.com/embed/rublon" width="480" height="300" style="border:0" loading="lazy" title="Rublon Multi-Factor Authentication (MFA) — Plugin Pulse"></iframe>
Preview card ↗

Rublon Multi-Factor Authentication (MFA): 400+ active installs, 4.2★ (88 reviews). Plugin Pulse (WP Mayor), as of 2026-08-29. https://plugins.wpmayor.com/plugin/rublon