Wordfence Login Security

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

Share of active installs on each version of this plugin · 96% run the current release. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Refined from the date this plugin crossed into its current band.

No paid tier is visible, so we don't put a figure on revenue or sale value: that would be guessing. The install base is a real asset to an acquirer, just not one public data lets us price. The recent download trend is too spiky to read.

1. ★★★★★ sprucelydesigned

   4mo ago

   Have used this plugin for years as a lightweight solution for 2FA. Now they’re forcing a switch to the full WF plugin.

   Read on wp.org ↗
2. ★★★★★ teddiesbyll

   6mo ago

   Although I had 2FA set with the app, someone was able to hack my site, change my password, disable 2FA and install a malicious plugin.

   Read on wp.org ↗
3. ★★★★★ Amie

   1.1y ago

   Does not include the ability to limit login attempts, add password complexity requirements, or anything that would comprise modern security best practices. It’s strictly a 2FA plugin, which is done more simply and better by other plugins. It does work tho.

   Read on wp.org ↗
4. ★★★★★ fenvi

   1.5y ago

   It is one of the few extensions that allows you to do this for free, I am very grateful to everyone at WordFence who works on this plugin. Thank you!

   Read on wp.org ↗
5. ★★★★★ maxim23

   1.8y ago

   <font _mstmutation=”1″></font>The security of the admin panel is protected, thanks for such a shield against hacking

   Read on wp.org ↗
6. ★★★★★ O.P.

   2.2y ago

   I have just installed it and look forward to complete its configuration soonest. From a brief outlook on the plugin functions they are sufficient and practical even for Woo users, if it is a case. I am only on a slighter disappointed side since the FIDO Trust Key option for 2FA isn’t on a list – for this I wish the developers to notice that this kind of security is simply ‘a Must’ these days for a reputable 2FA applications. Please add this function ASAP – even if in a paid plugin variation!

   Read on wp.org ↗
7. ★★★★★ Juanzo

   2.6y ago

   After testing several protections for different sites, this is might choice now. No issues with non techie clients getting blocked, and no bruteforce attacks on our sites. Thanks Wordfence for this lightweight alternative to your full fledged security plugin.

   Read on wp.org ↗
8. ★★★★★ wellshot

   2.6y ago

   It’s a good 2FA plugin and recaptcha also works alright. But basic login security is missing. It doesn’t stop bruteforce attack by limiting login attempts. That’s a necessary thing it should have but it doesn’t.

   Read on wp.org ↗

Recent releases and news for this plugin

1. — Version 1.1.16 Improvement: Migrated all deprecated JavaScript libraries in use to a Vue-based infrastructure Improvement: Better coverage of aria- accessibility attributes Fix: WordPress 7.0 compatibility fixes Note: The standalone Lo 1.1.16
2. — Version 1.1.15 Change: Reworked setting caching to avoid issues with some object caches 1.1.15
3. — Version 1.1.14 Improvement: General compatibility improvements and better error handling for PHP 8+ 1.1.14
4. — Version 1.1.12 Change: Revised the formatting of TOTP app URLs to prioritize the site’s own URL for better sorting and display Fix: Fixed the last captcha column in the users page so it no longer displays “(not required)” on 2FA users 1.1.12
5. — Version 1.1.11 Fix: Revised the behavior of the reCAPTCHA verification to use the documented expiration period of the token and response to avoid sending verification requests too frequently, which could artificially lower scores in so 1.1.11
6. — Version 1.1.10 Change: Removed the extra site link from the CAPTCHA verification email message to avoid confusion with the verify link Change: CAPTCHA verification when enabled now additionally applies to 2FA logins (may send an email 1.1.10

Automated install-time checks, tested on PHP 8.1.12 · WP 7.0.1

Translated into 9 languages, 2 at 90% or more

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

1. 2026-07-12 70K+ → 60K+ down after 1 days in tier
2. 2026-07-11 60K+ → 70K+ up after 1 days in tier
3. 2026-07-10 70K+ → 60K+ down after 336 days in tier
4. 2025-08-08 60K+ → 70K+ up after 630 days in tier
5. 2023-11-17 50K+ → 60K+ up

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

• Limit Login Attempts Security – Login Security, 2FA, Firewall, Brute Force Prevention 1M+ installs · 4.8★ · 3 shared tags A
• All-In-One Security (AIOS) – Security and Firewall 1M+ installs · 4.7★ · 3 shared tags A
• miniOrange 2FA – Two Factor Authentication for WordPress (OTP, SMS, Email, Google Authenticator) 10K+ installs · 4.5★ · 3 shared tags A
• Wordfence Security – Firewall, Malware Scan, and Login Security 5M+ installs · 4.7★ · 2 shared tags A
• Really Simple Security – Simple and Performant Security (formerly Really Simple SSL) 3M+ installs · 4.9★ · 2 shared tags A
• Kadence Security – Password, Two Factor Authentication, and Brute Force Protection 700K+ installs · 4.6★ · 2 shared tags A

Embed this report card

Drop a live Pulse card for Wordfence Login Security into a readme, a review or a deck. It updates itself.

Wordfence Login Security: 60K+ active installs, 3.9★ (26 reviews). Plugin Pulse (WP Mayor), as of 2026-08-25. https://plugins.wpmayor.com/plugin/wordfence-login-security