fluentAuth
★ 4.0 · 10k+ installsGet FluentAuth
Get started · free

Install FluentAuth in about a minute.

Free and open source, on the WordPress.org directory. No account, no API key, no credit card or paid feature unlocks.

Optional

Tell us where to send set-up tips and the download starts straight away.

Set-up tips, login-security advice and release notes. One or two emails a month, unsubscribe anytime.

No thanks, download from WordPress.org ↗View source on GitHub

The download is FluentAuth 3.0.0, which adds passkeys, authenticator apps, a security checklist and the recovery tools. See what is new →

100% freeGPL · open sourceNo account required
Three ways to install

Pick whatever fits your workflow.

  1. 1
    In your admin, open Plugins → Add New.
  2. 2
    Search for FluentAuth.
  3. 3
    Click Install Now, then Activate.
  4. ✓
    FluentAuth appears in your admin menu. You're ready.
Requirements

What it needs to run.

WordPress
5.0+
PHP
7.3+
Licence
GPLv2+
Plugin price
$0

Logs live in their own database table. Custom forms and enabled sign-in methods can load front-end assets; file checks fetch official reference files from WordPress.org.

Everything's included

The features shown here are included.

We may introduce a Pro version in the future. The features shown on this site will remain available in the free plugin. We will not remove them or move them behind a paywall.

Explore the features →
✓
Two-factor login by passkey, authenticator app or emailed code
✓
Attempt limits, IP access rules and core hardening
✓
Magic links and Google, GitHub and Facebook login
✓
Login redirects, custom forms, login page designer, system emails
✓
Audit logs, email alerts and core file integrity scans
Right after install

Three steps to a protected site.

01
Apply recommended settings

One click turns on the attempt limit, blocks XML-RPC, hides usernames and enables two-factor by email for admins.

02
Enrol your second factor

Enrol a passkey or an authenticator app, keep your recovery codes somewhere safe and test the sign-in in a separate window.

03
Choose who gets emails

Alerts when an administrator signs in or an address is blocked, and a weekly digest for the rest.

Take the rest of the tips with you.

Set-up guidance, login-security advice and new-feature updates by email, one or two a month.

No spam, no selling. Unsubscribe anytime.

Security your visitors will never feel.

Free, open source, and light by design. Join the WordPress sites already running FluentAuth.

Download from WordPress.orgRead the docs

100% free · GPL · no account required