Cloudusk 2FA – Two Factor Authentication is a free and easy-to-use two-factor authentication (2FA) plugin for WordPress.
It adds an extra layer of security to your WordPress login by requiring a time-based one-time password (TOTP) in addition to a username and password. This helps protect WordPress user accounts from unauthorized access caused by weak or compromised passwords, brute-force attacks, and automated login attempts.
Cloudusk 2FA uses industry-standard TOTP (RFC 6238) and works with popular authenticator apps such as Google Authenticator, Authy, and Microsoft Authenticator. No SMS, email codes, or third-party services are required.
The plugin is designed to be lightweight and user-friendly, with a simple setup process that can be completed directly from the user profile screen.
Features
- TOTP-based two-factor authentication for WordPress
- Compatible with Google Authenticator, Authy, Microsoft Authenticator, and other TOTP apps
- QR code-based setup
- Backup recovery codes to prevent lockouts
- No SMS, email, or external services required
- Lightweight and performance-friendly
- Works with the default WordPress login flow
- Fully free to use
Privacy
Cloudusk 2FA does not send any data to external services. All authentication is handled locally within your WordPress installation.
Screenshots
Two-factor authentication setup screen
Backup recovery codes screen
Enter code from 2FA app to enable it screen
Settings to specifiy 2FA requirement for differenet roles screen