Wordfence Login Security

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory searches this plugin turns up in, and which way each one is moving. WordPress.org publishes no history of search positions, so this starts the day we first tracked a keyword and never backfills.

Not enough tracked days yet to call a direction. Momentum needs at least three keywords measured a week or more apart.

wp.org is where the directory puts the plugin for that search. On merit is where it would sit if results were ranked on rating, support and updates, without the install boost. The last column is how far the wp.org position moved, from our first reading in the last 90 days to the latest.

1 search this plugin appeared in over the last 90 days. 4 of its tags aren't in the top 24 for their own search.

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

Share of active installs on each version of this plugin · 96% run the current release. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Crossed into this band 4 months ago; a band this size takes about a year or more to cross, which places it about 70% of the way through.

1. ★★★★★ sprucelydesigned

   6mo ago

   Have used this plugin for years as a lightweight solution for 2FA. Now they’re forcing a switch to the full WF plugin.

   Read on wp.org ↗
2. ★★★★★ teddiesbyll

   8mo ago

   Although I had 2FA set with the app, someone was able to hack my site, change my password, disable 2FA and install a malicious plugin.

   Read on wp.org ↗
3. ★★★★★ Amie

   1.3y ago

   Does not include the ability to limit login attempts, add password complexity requirements, or anything that would comprise modern security best practices. It’s strictly a 2FA plugin, which is done more simply and better by other plugins. It does work tho.

   Read on wp.org ↗
4. ★★★★★ fenvi

   1.7y ago

   It is one of the few extensions that allows you to do this for free, I am very grateful to everyone at WordFence who works on this plugin. Thank you!

   Read on wp.org ↗
5. ★★★★★ maxim23

   2.0y ago

   <font _mstmutation=”1″></font>The security of the admin panel is protected, thanks for such a shield against hacking

   Read on wp.org ↗
6. ★★★★★ O.P.

   2.4y ago

   I have just installed it and look forward to complete its configuration soonest. From a brief outlook on the plugin functions they are sufficient and practical even for Woo users, if it is a case. I am only on a slighter disappointed side since the FIDO Trust Key option for 2FA isn’t on a list – for this I wish the developers to notice that this kind of security is simply ‘a Must’ these days for a reputable 2FA applications. Please add this function ASAP – even if in a paid plugin variation!

   Read on wp.org ↗
7. ★★★★★ Juanzo

   2.7y ago

   After testing several protections for different sites, this is might choice now. No issues with non techie clients getting blocked, and no bruteforce attacks on our sites. Thanks Wordfence for this lightweight alternative to your full fledged security plugin.

   Read on wp.org ↗
8. ★★★★★ wellshot

   2.7y ago

   It’s a good 2FA plugin and recaptcha also works alright. But basic login security is missing. It doesn’t stop bruteforce attack by limiting login attempts. That’s a necessary thing it should have but it doesn’t.

   Read on wp.org ↗

Recent releases and news for this plugin

1. — Version 1.1.16 Improvement: Migrated all deprecated JavaScript libraries in use to a Vue-based infrastructure Improvement: Better coverage of aria- accessibility attributes Fix: WordPress 7.0 compatibility fixes Note: The standalone Lo 1.1.16
2. — Version 1.1.15 Change: Reworked setting caching to avoid issues with some object caches 1.1.15
3. — Version 1.1.14 Improvement: General compatibility improvements and better error handling for PHP 8+ 1.1.14
4. — Version 1.1.12 Change: Revised the formatting of TOTP app URLs to prioritize the site’s own URL for better sorting and display Fix: Fixed the last captcha column in the users page so it no longer displays “(not required)” on 2FA users 1.1.12
5. — Version 1.1.11 Fix: Revised the behavior of the reCAPTCHA verification to use the documented expiration period of the token and response to avoid sending verification requests too frequently, which could artificially lower scores in so 1.1.11
6. — Version 1.1.10 Change: Removed the extra site link from the CAPTCHA verification email message to avoid confusion with the verify link Change: CAPTCHA verification when enabled now additionally applies to 2FA logins (may send an email 1.1.10

Automated install-time checks, tested on PHP 8.1.12 · WP 7.0.1

Translated into 9 languages, 2 at 90% or more

Whether ChatGPT and Claude name this plugin when asked the category question, and whether the readme gives them something to quote.

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

1. 2026-07-12 70K+ → 60K+ down after 1 days in tier
2. 2026-07-11 60K+ → 70K+ up after 1 days in tier
3. 2026-07-10 70K+ → 60K+ down after 336 days in tier
4. 2025-08-08 60K+ → 70K+ up after 630 days in tier
5. 2023-11-17 50K+ → 60K+ up after 416 days in tier
6. 2022-09-27 40K+ → 50K+ up after 312 days in tier
7. 2021-11-19 30K+ → 40K+ up after 306 days in tier
8. 2021-01-17 20K+ → 30K+ up after 156 days in tier

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

Embed this report card

Drop a live Pulse card for Wordfence Login Security into a readme, a review or a deck. It updates itself.

Wordfence Login Security: 60K+ active installs, 3.9★ (26 reviews). Plugin Pulse (WP Mayor), as of 2026-10-31. https://plugins.wpmayor.com/plugin/wordfence-login-security