Add secure email-based 2FA authentication to WordPress logins with OTP verification, recovery codes, a grace period, and flexible user targeting.
Alternatives to Rat Two-Factor Authentication
Plugins below are selected for functional relevance and current directory signals. Active-install counts do not affect this ranking.
Relevant replacements
WordPress plugins with similar use cases
Compatibility and update metadata provide context, not a quality guarantee. Review each plugin’s details for your site.
WP-OTPv0.7.0
Make your WordPress login extra secure with One Time Passwords.
Brain 2FAv1.3.0
Add two-factor authentication and passwordless passkey sign-in to WordPress accounts.
OtpPalv2.5.1
Client-side plugin for OtpPal – Send and verify OTPs via WhatsApp.
CAS Antivirusv3.1
Free WordPress security plugin with malware scanner, HTTP Security Headers, WordPress core restoration and TOTP Two-Factor Authentication.
A simple, secure 2FA plugin that adds a verification screen after login, requiring a code from your authenticator app.
OOSOFT 2FA Securityv1.0.2
Enterprise-grade Two-Factor Authentication for WordPress with TOTP, Email OTP, backup codes, and role-based enforcement.
Require two-factor authentication for selected user roles. An add-on for the Two Factor plugin.
SPIDY 2FA LOGINv2.0.9
Two-factor authentication (2FA) via email, SMS or biometric login (WebAuthn/FIDO2) for WordPress. Simple, free, no third-party app required.
Configify 2FAv1.0.0
Flexible Two-Factor Authentication for WordPress. Choose Google Authenticator (TOTP), Math CAPTCHA, or Google reCAPTCHA — with a security audit log.