WordPress authentication plugins

Limit rate of login attempts, including by way of cookies, for each IP. Fully customizable.

Install this plugin on unlimited sites and manage them all from a central dashboard. This plugin communicates with your InfiniteWP Admin Panel.

Enable Two-Factor Authentication (2FA) using time-based one-time passwords (TOTP), email, and backup verification codes.

WPS Limit login limit connection attempts by IP address

The original WordPress membership plugin with content restriction, user login, custom registration fields, user profiles, and more.

Google Authenticator for your WordPress blog.

Limit rate of login attempts and block IP temporarily. Brute force attack protection. GDPR compliant. Captcha enabled.

Simple secure login and user management through your Google Workspace for WordPress (using oAuth2 and MFA if enabled).

Creates unique passwords for applications to authenticate users without revealing their main passwords.

Login by Auth0 provides improved username/password login, Passwordless login, Social login and Single Sign On for all your sites.

Enable one-click login with this WordPress Two-Factor Authentication (2FA) plugin, utilizing email for added security.

SAML authentication for WordPress.

Use your email address instead of a username to log into your WordPress.

Minimal plugin that allows WordPress users to log in using Google.

Authorizer limits login attempts, restricts access to specific users, and authenticates against external sources (OAuth2, Google, LDAP, or CAS).

Use your existing LDAP flexible as authentication backend for WordPress

Active Directory Integration/LDAP Integration enables login & sync in WordPress with Active Directory/LDAP Directory credentials, 24/7 ACTIVE SUPPORT

Turn WordPress into a private intranet in one click. Restrict access to logged-in members, with auto-logout and login redirect.

Easily add Duo Security two-factor authentication to your WordPress website. Enable two-factor authentication for your admins and/or users.

Allows WordPress to externalize user authentication and account creation to a Shibboleth Service Provider.

Customize and secure your WordPress login page with logo, backgrounds, templates, custom login URL, reCAPTCHA protection, and login activity logs — no …

Next Active Directory Integration allows WordPress to authenticate, authorize, create and update users against Microsoft Active Directory.

Basic Authentication for protected your development WordPress site like .htpasswd

Easily add Duo authentication to your WordPress website. Enable multi-factor authentication for your admins and/or users.

Adds an extra layer of security to your Wordpress Account. Same as Google 2-step verification.

Extends the JSON API Plugin to allow RESTful user registration, authentication & many other User Meta, BP functions. A Pro version is also available.

Integrating WordPress with LDAP shouldn't be difficult. Now it isn't. Simple LDAP Login provides all of the features, none of the hassles.

An authentication framework that handles authorization/communication with most popular web services.

Allows WordPress to provide and consumer OpenIDs for authentication of users and comments.

A reimagining of WordPress authentication using modern security practices.

Enable face authentication login with ease

Allow users to sign in via third-party services.

Powerful sessions manager for WordPress with sessions limiter and full analytics reporting capabilities.

wSecure hides admin URL so that default URL will no longer bring up the admin page. Only people who enter the secret key will be able to access admin …

The plugin is an Apereo CAS Client. It performs CAS authentication and autorization for Wordpress.

A Plugin to lock down the whole site to prevent public access.

One-tap mobile number & email based social login.

Secure your WordPress site with easy and effective basic authentication. Restrict access, monitor attempts, and enhance security.

IP Based Login allows you to directly login from an authorized IP without password.

WordPress directory authentication plugin through LDAP and LDAPS (SSL).

This plugin allows you whitelist IP addresses so Limit Login Attempt plugin doesn't block them.

Add an additional layer of protection to your WordPress login and make sure bad actors have a hard time guessing your user's login credentials.

Use an external authentication source in WordPress.

Instant account security with effortless multi-factor authentication via Mobile Push, Mobile Passcode (TOTP), WebAuthn/U2F Security Keys, and more.

This plugin allows login into WordPress using Firebase user credentials and maps Firebase user data to WordPress user profile.

This plugin protects your Wordpress and Buddypress login, comments, and new user/new blog signup process against spambots with a simple math question.

Give trusted web professionals admin access to your WordPress account. Revoke anytime.

WordPress Limit Login Attempts Plus plugin for Login Protection by Felix Moira

Enhanced Login Security for Your Wordpress blog.

CAS Maestro allows you to configure your centralized authentication service, CAS, for an integrated log in with WordPress. LDAP is optional.

Improves the security of the login page against brute-force attacks. Records every attempts to login.…

Access and refresh tokens based authentication plugin for the REST API.

Add member authentication and access role management to your WordPress site via Membee's powerful Member Single Sign-On web service.

Changes the cookie default path to / (i.e. the whole domain.com not just domain.com/blog) with an option to go across subdomains

WP login attempts is a very lightweight plugin that lets you customize your WordPress admin login page easily and safely.

An easy and secure passwordless add-on for your website.

The SecSign ID two-factor authentication WordPress Plugin will be discontinued.

WordPress OAuth client SSO ( OAuth 2.0 & OpenID SSO ) plugin allows login ( Single Sign On ) with your OAuth Servers like AWS Cognito, Amazon, Az …

Limit rate of login attempts, including by way of cookies, for each IP. Fully customizable.

Control whether Remember Me is selected on the WordPress Login Form, without using any JavaScript.