Title: Duo Universal Author: Duo Security Published: February 27, 2024 Last modified: January 6, 2026 --- Search plugins ![](https://ps.w.org/duo-universal/assets/icon-256x256.png?rev=3042151) # Duo Universal By [Duo Security](https://profiles.wordpress.org/duosecurity/) [Download](https://downloads.wordpress.org/plugin/duo-universal.1.2.1.zip) * [Details](https://wordpress.org/plugins/duo-universal/#description) * [Reviews](https://wordpress.org/plugins/duo-universal/#reviews) * [Installation](https://wordpress.org/plugins/duo-universal/#installation) * [Development](https://wordpress.org/plugins/duo-universal/#developers) [Support](https://wordpress.org/support/plugin/duo-universal/) ## Description The Duo Universal plugin protects against account takeover by augmenting WordPress logins with multi-factor authentication. Adding Duo is easy and can be done in just a few minutes! By leveraging Duo’s Universal Prompt, authentications can now use passkeys, biometrics and hardware tokens in addition to phone-based authentication methods. This keeps accounts secure if an attacker learns a user’s login credentials and provides flexible authentication options. Duo is easy to set up and use. With Duo there’s no extra hardware or complicated software to install, just sign up for Duo’s service and install the plugin. Then you can set which user roles you want to enable multi-factor authentication for admins, editors, authors, contributors, and/or subscribers without setting up user accounts, directory synchronization, servers, or hardware. Users can enroll in Duo authentication and add MFA devices to their accounts as they log into the site. This plugin reaches out to Duo’s MFA cloud service for the configured user roles which provides an additional layer of authentication. For more information about Duo’s privacy policy see https://duo.com/legal/cisco-online-privacy-statement Duo’s terms of service can be found here https://duo.com/legal/terms Terms of support using Duo’s cloud service are provided here https://duo.com/support Support for Duo users without a subscription is provided on a best-effort basis via email. ## Installation Integrating Duo MFA with WordPress is a breeze. See [our instructions](https://duo.com/docs/wordpress) at duo.com ## FAQ How do I get started with Duo? Before installing the plugin, you’ll need to sign up for a free account at https://duo.com/. Is Duo’s two-factor service really free? Yes, Duo is free up to 10 users and no credit card is required to get started! Paid plans for more than 10 users start at only $3/user/month. ## Reviews ![](https://secure.gravatar.com/avatar/0dfee48f079ea75aeabd2b523d3e88a4d8d27630c723fb436670975ecf34c75d? s=60&d=retro&r=g) ### 󠀁[A Good Login Plugin for WP](https://wordpress.org/support/topic/this-is-the-best-free-passkey-login-plugin/)󠁿 [ankushdas](https://profiles.wordpress.org/ankushdas/) May 7, 2024 I use Wordfence on my websites for essential security protection. Sure, the 2FA method is available for free, and is plenty good for most.However, I have been fascinated with log-in prompts recently, and it saves so much time with the websites that support it. So, I thought, why not add it to my WordPress site? And, in my journey to explore, I found Duo Universal. It’s entirely free for up to 10 users – meaning, 10 WordPress applications, (don’t get confused when it asks to create a “Trial account”). Unfortunately, the passkeys functionality is only applicable to the devices you created it in during the trial period. While you can use existing passkeys on the OS you created it in, you cannot create new ones after the trial period ends.Wish the pricing plan was geared towards individuals, but the premium edition needs you to purchase a subscription for 10 users at once, at the very least :/Moreover, you get to customize your branded logo + background for free. I have tested the plugin on two of my websites (WordPress 6.5.2) with different combination of plugins that include: Wordfence, SEOPress, RankMath, Really Simple SSL, Akismet, Malcare, Updraft Backups, and LightSpeed Cachep. s: I hope more people rate it, and the information for the plugin is updated to “ Tested with latest WordPress version” [ Read all 1 review ](https://wordpress.org/support/plugin/duo-universal/reviews/) ## Contributors & Developers “Duo Universal” is open source software. The following people have contributed to this plugin. Contributors * [ Duo Security ](https://profiles.wordpress.org/duosecurity/) [Translate “Duo Universal” into your language.](https://translate.wordpress.org/projects/wp-plugins/duo-universal) ### Interested in development? [Browse the code](https://plugins.trac.wordpress.org/browser/duo-universal/), check out the [SVN repository](https://plugins.svn.wordpress.org/duo-universal/), or subscribe to the [development log](https://plugins.trac.wordpress.org/log/duo-universal/) by [RSS](https://plugins.trac.wordpress.org/log/duo-universal/?limit=100&mode=stop_on_copy&format=rss). ## Changelog #### 1.2.1 * Adds support for new Duo certificate authorities. #### 1.2.0 * Updated dependencies to require duo_universal_php v1.1.0 #### 1.1.0 * Refactored 2FA session management - Switching between multisites will no longer logout the current user. - Clearing WordPress caches will no longer logout all users. - There is no longer a 48 hour Duo session separate from the WordPress session. * Fix plugin file paths on clustered hosting environments. * Fixed debug logging to properly enable when using the WP_DEBUG constant. #### 1.0.0 * Initial Release ## Meta * Version **1.2.1** * Last updated **3 months ago** * Active installations **2,000+** * WordPress version ** 6.0.0 or higher ** * Tested up to **6.9.4** * PHP version ** 7.3.16 or higher ** * Tags * [authentication](https://wordpress.org/plugins/tags/authentication/)[Authenticator](https://wordpress.org/plugins/tags/authenticator/) [login](https://wordpress.org/plugins/tags/login/)[two factor](https://wordpress.org/plugins/tags/two-factor/) * [Advanced View](https://wordpress.org/plugins/duo-universal/advanced/) ## Ratings 4 out of 5 stars. * [ 0 5-star reviews ](https://wordpress.org/support/plugin/duo-universal/reviews/?filter=5) * [ 1 4-star review ](https://wordpress.org/support/plugin/duo-universal/reviews/?filter=4) * [ 0 3-star reviews ](https://wordpress.org/support/plugin/duo-universal/reviews/?filter=3) * [ 0 2-star reviews ](https://wordpress.org/support/plugin/duo-universal/reviews/?filter=2) * [ 0 1-star reviews ](https://wordpress.org/support/plugin/duo-universal/reviews/?filter=1) [Your review](https://wordpress.org/support/plugin/duo-universal/reviews/#new-post) [See all reviews](https://wordpress.org/support/plugin/duo-universal/reviews/) ## Contributors * [ Duo Security ](https://profiles.wordpress.org/duosecurity/) ## Support Issues resolved in last two months: 0 out of 1 [View support forum](https://wordpress.org/support/plugin/duo-universal/)