Duo Security

Duo Security provides two-factor authentication as a service to protect against account takeover and data theft. Using the Duo plugin you can easily add Duo two-factor authentication to your WordPress website in just a few minutes!
Rather than relying on a password alone, which can be phished or guessed, Duo’s authentication service adds a second layer of security to your WordPress accounts. Duo enables your admins or users to verify their identities using something they have—like their mobile phone or a hardware token—which provides strong authentication and dramatically enhances account security.
Duo is easy to setup and use. With Duo there’s no extra hardware or complicated software to install, just sign up for Duo’s service and install the plugin. Then you can set which user roles you want to enable two-factor authentication for—admins, editors, authors, contributors, and/or subscribers—without setting up user accounts, directory synchronization, servers, or hardware.
When they log in, your users have multiple ways they can authenticate, including:
<ul>
<li>One-tap authentication using Duo’s mobile app (our fastest, easiest way to authenticate)</li>
<li>One-time passcodes generated by Duo’s mobile app (works even with no cell coverage)</li>
<li>One-time passcodes delivered to any SMS-enabled phone (works even with no cell coverage)</li>
<li>Phone callback to any phone (mobile or landline!)</li>
<li>One-time passcodes generated by an OATH-compliant hardware token (if you’re feeling all old school)</li>
</ul>
Protect your WordPress website in minutes with Duo.
<h3>End of Support Notice</h3>
Support for the traditional Duo Prompt experience using the Duo WordPress plugin ended on September 30, 2024. Please use the new <a href="https://wordpress.org/plugins/duo-universal/" rel="ugc">Duo Universal plugin for WordPress</a>. Read more about the End of Suppport and migration to the new plugin on our <a href="https://duo.com/docs/wordpress" rel="nofollow ugc">Duo for WordPress – Duo Universal Prompt</a> documentation page

Duo Two-Factor Authentication

Easily add Duo Security two-factor authentication to your WordPress website. Enable two-factor authentication for your admins and/or users.

The Duo Universal plugin protects against account takeover by augmenting WordPress logins with multi-factor authentication. Adding Duo is easy and can be done in just a few minutes!
By leveraging Duo’s Universal Prompt, authentications can now use passkeys, biometrics and hardware tokens in addition to phone-based authentication methods. This keeps accounts secure if an attacker learns a user’s login credentials and provides flexible authentication options.
Duo is easy to set up and use. With Duo there’s no extra hardware or complicated software to install, just sign up for Duo’s service and install the plugin. Then you can set which user roles you want to enable multi-factor authentication for admins, editors, authors, contributors, and/or subscribers without setting up user accounts, directory synchronization, servers, or hardware. Users can enroll in Duo authentication and add MFA devices to their accounts as they log into the site.
This plugin reaches out to Duo’s MFA cloud service for the configured user roles which provides an additional layer of authentication. 
For more information about Duo’s privacy policy see https://duo.com/legal/cisco-online-privacy-statement 
Duo’s terms of service can be found here https://duo.com/legal/terms 
Terms of support using Duo’s cloud service are provided here https://duo.com/support
Support for Duo users without a subscription is provided on a best-effort basis via email.

Duo Universal

Easily add Duo authentication to your WordPress website. Enable multi-factor authentication for your admins and/or users.

Duo Two-Factor Authentication vs Duo Universal