WP Theme Checker
← all plugins

Two Factor

slug: two-factor

WordPress plugin by WordPress.org · detected on 291 sites in our index (5.46% of WordPress sites scanned)

Enable Two-Factor Authentication (2FA) using time-based one-time passwords (TOTP), email, and backup verification codes.

291
Sites detected
5.46%
Market share
of our WP index
#52
Rank
among indexed plugins
2026-05-22
Last detected

Where Two Factor sits in the WordPress plugin ecosystem

Two Factor is the #52 most-detected WordPress plugin in our scan index of 5,328 sites — appearing on roughly 5.46% of WordPress sites we've fingerprinted. Most sites running Two Factor are hosted on WordPress.com (50% of identified hosts). The most common companion plugin is Akismet Anti-spam: Spam Protection, present on 78% of Two Factor sites. The most frequent theme is Newspack Katharine.

Every data point here comes from actual scans of public WordPress sites — not vendor case studies or curated showcases. We don't accept submissions; everything you see is detected automatically when a site is scanned through the tool.

Plugins commonly used with Two Factor

From co-occurrence analysis across sites running Two Factor in our index.

Themes commonly running Two Factor

Top themes on sites using this plugin.

Hosting providers running Two Factor

Limited to sites where we identified the hosting provider.

Sites using Two Factor

Most-recently-scanned sites detected with this plugin.

How we detect Two Factor

Five-vector detection — /wp-content/plugins/two-factor/ asset paths, /wp-json/ REST API namespaces, HTML signature patterns, sitemap XML comments, and asset-probe HEAD requests against the top-100 popular plugins on wordpress.org. Each detected plugin carries provenance pills showing which sources corroborated it — cross-vector matches indicate high-confidence detections. More on how detection works.

Reviewed by Matt Hall · founder of Scepter Marketing · 10+ years building WordPress sites
·
Last reviewed: 2026-05-22
·How we detect this →

Data comes from real-time scans of public WordPress sites — not vendor case studies or curated showcases. Every claim on this page traces back to a specific detection in our scan corpus, observable via our methodology. Affiliate links are disclosed per the affiliate disclosure.