Life Time Extra Credits Offer

*Add $100 or more to claim

Validity: Nov 24 - Dec 05, 2025

Google Authenticator

Google Authenticator

Google Authenticator for your WordPress blog.
Rating:
4.3
star-rating-1star-rating-2star-rating-3star-rating-4star-rating-5
Active Installations:
30000+
Last Updated:
Jul 04, 2022
WordPress Version:
4.5 or higher
Tested up to:
6.0.9

Enhanced Security

Protect your WordPress site with two-factor authentication using the Google Authenticator app.

Per-User Authentication

Enable two-factor authentication on a per-user basis, giving you control over who needs extra security measures.

Mobile Access

Maintain your blog on the go with the Android/iPhone app or other software using the XMLRPC interface.

App Password Feature

Enable the App password feature for convenient access to your blog, but be aware that it may decrease security.

0.54

  • Fixed a bug in multisite.

0.53

  • Add a Polish translation

0.52

  • Add a Dutch translation
  • Add a Portuguese translation

0.51

  • Fix a regression that broke app passwords

0.50

  • New maintainer ivankk
  • Conditionally include base32 class

0.49

  • More streamlined sign-up flow for users, configuration screen for admins.
  • Multisite support to either enable 2fa by role on a site, and/or on a network.
  • Added filter google_authenticator_needs_setup to determine if user needs to enable 2fa.
  • Added two part login process that can ask for 2fa code on a second login screen.
  • Fixed a security bug that continued check_otp even if authenticate had already returned an error.

0.48

  • Security fix / compatability with WordPress 4.5

0.47

  • Google chart API replaced with jquery-qrcode
  • QR codes now contain a heading saying WordPress (Feature request by Flemming Mahler)
  • Danish translation & updated .pot file.
  • Plugin now logs login attempts recognized as Man-in-the-middle attacks.

0.46

  • Man-in-the-middle attack protection added.
  • Show warning before displaying the QR code.
  • FAQ updated.

0.45

  • Spaces in the description field should now work on iPhones.
  • Some depricated function calls replaced.
  • Code inputfield easier to use for .jp users now.
  • Sanitize description field input.
  • App password hash function switched to one that doesn’t have rainbow tables available.
  • PHP notices occurring during app password login removed.

0.44

  • Installation/FAQ section updated.
  • Simplified Chinese translation by Kaijia Feng added.
  • Tabindex on loginpage removed, no longer needed, was used by older WordPress installations.
  • Inputfield renamed to “googleotp”.
  • Defaultdescription changed to “WordPressBlog” to avoid trouble for iPhone users.
  • Compatibility with Ryan Hellyer’s plugin http://geek.ryanhellyer.net/products/deactivate-google-authenticator/
  • Must enter all 6 code digits.

0.43

  • It’s now possible for an admin to hide the Google Authenticaator settings on a per-user basis. (Feature request by : Skate-O)

0.42

  • Autocomplete disabled on code input field. (Feature request by : hiphopsmurf)

0.41

  • Italian translation by Aldo Latino added.

0.40

  • Bugfix, typo corrected and PHP notices removed. Thanks to Dion Hulse for his patch.

0.39

  • Bugfix, Description was not saved to WordPress database when updating profile. Thanks to xxdesmus for noticing this.

0.38

  • Usability fix, input field for codes changed from password to text type.

0.37

  • The plugin now supports “relaxed mode” when authenticating. If selected, codes from 4 minutes before and 4 minutes after will work. 30 seconds before and after is still the default setting.

0.36

  • Bugfix, now an App password can only be used for XMLRPC/APP-Request logins.

0.35

  • Initial WordPress app support added (XMLRPC).

0.30

  • Code cleanup
  • Changed generation of secret key, to no longer have requirement of SHA256 on the server
  • German translation

0.20

  • Initial release

Great

By Trần Quân (tquanreal) on March 30, 2024

Great plugin, but I wish to use a QR code for scanning when I log in.

Simply a missing feature in .ORG

By Bart Bak (bartoszbak) on May 4, 2023

Works! Uses WordPress UI, is super lightweight, not overdesigned, and is trivial to set up. Great job!

error

By ntalam on April 30, 2023

Fatal error: Uncaught FirebaseJWTBeforeValidException: Cannot handle token prior to 2023-04-30T20:30:33+0000 in ...one-tap-google-sign-inincludesvendorfirebasephp-jwtsrcJWT.php

I understand it requires synchronization, but you need to handle this error properly.

Cheers

Works as expected

By jjbbrr on December 22, 2022

One of my sites got hacked and some spam blogs posted. Don't know how they got access but decided to add 2FA as a preventative. Implemented for all authors. Works out of the box, simple interface without lots of bells and whistles.

Plugin stopped working

By sianvdheide on October 21, 2022

Since a few days the plugin stopped working. It used to work perfect. Users who have Google Authenticator activated can't login anymore. They get the message that their username/password is invalid while it isn't. They're able to login again when I deactivate Google Authenticator in their profile. Is this a known bug, if so, how to fix this? Thanks in advance.

Cannot reset after re-install

By Elenbaas (relenbaas) on September 2, 2022

Great little app. Easy to use and install, does the job. Saves me from having to use Wordfence, which is much resource heavier.

Barely works

By icedterminal on June 4, 2022

This plugin works fine with PHP 7.4 and WP 6.0, if you're using them. However, 7.4 ceases all support 28th Nov, 2022. At the time of my comment, this is 5 months away. Time is ticking. PHP 8.0 is in use on my server with WP 6.0. While WP works without issue, the plugin does not. Occasionally I get failures to authenticate. To get around this I have to login to the database and manually disable this plugin. The error log reports "Undefined array key" over and over. There is a different documented bug that has been solved by users you can find under the "Support" tab. The GitHub repo has gone untouched since 8th December, 2020. I fear this plugin has been abandoned. Unfortunate really. It's dead simple to use with none of the extra stuff you don't want that other plugins cram in.

One on few my first-to-install plugin

By Marcin Pietrzak (iworks) on February 12, 2022

Awesome plugin, which is almost always in first group of plugin I've install on new website. Thank you for create and maintain it.

Works and gives me a better feeling with my site

By Martin Richter (martinrichter) on November 10, 2021

Does what it promises. Was easy to install. Hopefully we get updates...

Does what it says

By syhussaini on August 31, 2021

It is a straightforward tool and does what it says. Very easy to use and setup. Thank you.
Try other plugins too!

GEO Visitor Control

Take control of your website visitors with GEO Visitor Control – block countries, IPs, manage bots, log blocked sessions, and customize everything wit …

Try Demo More Details

WP Last Login

Make the last login for each user visible in the user overview.

Try Demo More Details

Malcure Malware Scanner — #1 Toolset for WordPress Malware Removal

No. 1 Plugin for malware removal – Ultra-precision, comprehensive, detects viruses, infections & over 50,000+ security threats & vulnerabilities.

Try Demo More Details
Screenshots
Author Site Author Site

Try Google Authenticator With InstaWP

Contact Sales

Reach out to us to explore how InstaWP can benefit your business.