Active installationsNewAdoption metric — not a quality score
WordPress.org ratingNo WordPress.org ratings yet
Official packageDirect from WordPress.org
Repository metrics are context, not quality scores. Active installations measure adoption and can strongly reflect a plugin’s age and historical popularity. Ratings, recent updates and “Tested up to” metadata also do not guarantee modern code, error-free operation, security, feature completeness or suitability for a particular site. Why active installs don’t tell the whole story →
WP PlugIndex currently records Digipacket Login Security with Two-Factor Authentication version 1.0.1 as active, updated 4mo ago and tested up to WordPress 7.0.
Overview
About this plugin
Digipacket Login Security adds strong, standards-based two-factor authentication to any WordPress site. It uses the TOTP algorithm (RFC 6238), so it works with Google Authenticator, Authy, Microsoft Authenticator, FreeOTP and any standard authenticator app — with no external service or cloud dependency. Everything runs on your own server.
Key features
TOTP compatible with Google Authenticator and all standard apps.
Choice of method — each user picks an authenticator app (TOTP) or a one-time code sent by e-mail at login.
QR Code enrolment rendered locally on the user profile screen (no external image service).
Mandatory code verification after every login.
Single-use backup codes for account recovery if the device is lost.
Brute-force protection — lock an account after a configurable number of failed attempts, for a configurable duration. Blocks further sign-ins even with the correct password during the lockout window.
Security e-mail alerts — notify the account owner when repeated wrong-password attempts or too many incorrect 2FA codes are detected.
Login notifications — e-mail the user and/or the administrator (per selected roles) with sign-in details (user, date, IP, browser).
Login screen warning — optional full-screen security notice that visitors must accept before signing in.
Enforce 2FA by role with a configurable grace period.
Admin reset of a user’s 2FA from the Users list, plus a 2FA status column.
Audit log of all security events with filtering by role or user.
Modern admin interface — dashboard, focused settings tabs and an About page.
Translatable — ships with French (fr_FR) and English.
Privacy & external services
By default, Digipacket Login Security does not send any data to external services. All secrets, codes and logs are stored in your own WordPress database, and e-mails are sent through your site’s standard wp_mail() function.
org so the message can be delivered to your chosen Telegram chat. This only happens while the feature is enabled and configured.
Topics listed for this plugin in the WordPress.org directory.
brute force
login security
two factor authentication
2fa
totp
Compatibility & maintenance
Compatibility & maintenance
Tested up to WordPress 7.0
Not yet marked as tested with WordPress 7.1. WordPress.org currently lists Tested up to 7.0.
Current WordPress releaseWordPress 7.1
WordPress.org Tested up to7.0
Minimum requirementsWordPress 6.0 · PHP 8.2
Update activity20 Jun 20264mo ago
“Tested up to” is directory metadata supplied by the plugin author. WP PlugIndex does not turn an older declaration into a claim that the plugin is incompatible.
Changes recorded by WP PlugIndex
Recent tracked changes
No tracked version or compatibility changes have been recorded by WP PlugIndex yet.
Tracking & source
WP PlugIndex tracks public WordPress.org directory metadata and records selected version, compatibility and availability changes as they are detected.
