{"id":179934,"date":"2024-02-27T16:57:09","date_gmt":"2024-02-27T16:57:09","guid":{"rendered":"https:\/\/wordpress.org\/plugins\/duo-universal-two-factor-authentication\/"},"modified":"2026-01-06T18:31:55","modified_gmt":"2026-01-06T18:31:55","slug":"duo-universal","status":"publish","type":"plugin","link":"https:\/\/bn.wordpress.org\/plugins\/duo-universal\/","author":7927820,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_crdt_document":"","version":"1.2.1","stable_tag":"1.2.1","tested":"6.9.4","requires":"6.0.0","requires_php":"7.3.16","requires_plugins":null,"header_name":"Duo Universal","header_author":"Duo Security","header_description":"This plugin enables Duo two-factor authentication for WordPress logins.","assets_banners_color":"","last_updated":"2026-01-06 18:31:55","external_support_url":"","external_repository_url":"","donate_link":"","header_plugin_uri":"http:\/\/wordpress.org\/extend\/plugins\/duo-universal\/","header_author_uri":"http:\/\/www.duosecurity.com","rating":4,"author_block_rating":0,"active_installs":2000,"downloads":16261,"num_ratings":1,"support_threads":0,"support_threads_resolved":0,"author_block_count":0,"sections":["description","installation","faq","changelog"],"tags":{"1.0.0":{"tag":"1.0.0","author":"duosecurity","date":"2024-03-25 19:25:27"},"1.1.0":{"tag":"1.1.0","author":"duosecurity","date":"2025-04-29 17:30:18"},"1.2.0":{"tag":"1.2.0","author":"duosecurity","date":"2025-05-21 20:51:38"},"1.2.1":{"tag":"1.2.1","author":"duosecurity","date":"2026-01-06 18:31:55"}},"upgrade_notice":{"1.1.0":"<ul>\n<li>All 2FA sessions will be reset after the upgrade; users will need to re-login.<\/li>\n<\/ul>"},"ratings":{"1":0,"2":0,"3":0,"4":1,"5":0},"assets_icons":{"icon-128x128.png":{"filename":"icon-128x128.png","revision":3042151,"resolution":"128x128","location":"assets","locale":""},"icon-256x256.png":{"filename":"icon-256x256.png","revision":3042151,"resolution":"256x256","location":"assets","locale":""}},"assets_banners":[],"assets_blueprints":{},"all_blocks":[],"tagged_versions":["1.0.0","1.1.0","1.2.0","1.2.1"],"block_files":[],"assets_screenshots":[],"screenshots":[],"jetpack_post_was_ever_published":false},"plugin_section":[],"plugin_tags":[710,9212,602,224775,9217],"plugin_category":[38],"plugin_contributors":[80632],"plugin_business_model":[],"class_list":["post-179934","plugin","type-plugin","status-publish","hentry","plugin_tags-authentication","plugin_tags-authenticator","plugin_tags-login","plugin_tags-muti-factor","plugin_tags-two-factor","plugin_category-authentication","plugin_contributors-duosecurity","plugin_committers-duosecurity"],"banners":[],"icons":{"svg":false,"icon":"https:\/\/ps.w.org\/duo-universal\/assets\/icon-128x128.png?rev=3042151","icon_2x":"https:\/\/ps.w.org\/duo-universal\/assets\/icon-256x256.png?rev=3042151","generated":false},"screenshots":[],"raw_content":"<!--section=description-->\n<p>The Duo Universal plugin protects against account takeover by augmenting WordPress logins with multi-factor authentication. Adding Duo is easy and can be done in just a few minutes!<\/p>\n\n<p>By leveraging Duo\u2019s Universal Prompt, authentications can now use passkeys, biometrics and hardware tokens in addition to phone-based authentication methods. This keeps accounts secure if an attacker learns a user\u2019s login credentials and provides flexible authentication options.<\/p>\n\n<p>Duo is easy to set up and use. With Duo there\u2019s no extra hardware or complicated software to install, just sign up for Duo\u2019s service and install the plugin. Then you can set which user roles you want to enable multi-factor authentication for admins, editors, authors, contributors, and\/or subscribers without setting up user accounts, directory synchronization, servers, or hardware. Users can enroll in Duo authentication and add MFA devices to their accounts as they log into the site.<\/p>\n\n<p>This plugin reaches out to Duo's MFA cloud service for the configured user roles which provides an additional layer of authentication.\nFor more information about Duo's privacy policy see https:\/\/duo.com\/legal\/cisco-online-privacy-statement\nDuo's terms of service can be found here https:\/\/duo.com\/legal\/terms\nTerms of support using Duo's cloud service are provided here https:\/\/duo.com\/support<\/p>\n\n<p>Support for Duo users without a subscription is provided on a best-effort basis via email.<\/p>\n\n<!--section=installation-->\n<p>Integrating Duo MFA with WordPress is a breeze.\nSee <a href=\"https:\/\/duo.com\/docs\/wordpress\">our instructions<\/a> at duo.com<\/p>\n\n<!--section=faq-->\n<p>How do I get started with Duo?\nBefore installing the plugin, you\u2019ll need to sign up for a free account at https:\/\/duo.com\/.<\/p>\n\n<p>Is Duo\u2019s two-factor service really free?\nYes, Duo is free up to 10 users and no credit card is required to get started! Paid plans for more than 10 users start at only $3\/user\/month.<\/p>\n\n<!--section=changelog-->\n<h4>1.2.1<\/h4>\n\n<ul>\n<li>Adds support for new Duo certificate authorities.<\/li>\n<\/ul>\n\n<h4>1.2.0<\/h4>\n\n<ul>\n<li>Updated dependencies to require duo_universal_php v1.1.0<\/li>\n<\/ul>\n\n<h4>1.1.0<\/h4>\n\n<ul>\n<li>Refactored 2FA session management\n\n<ul>\n<li>Switching between multisites will no longer logout the current user.<\/li>\n<li>Clearing Wordpress caches will no longer logout all users.<\/li>\n<li>There is no longer a 48 hour Duo session separate from the Wordpress session.<\/li>\n<\/ul><\/li>\n<li>Fix plugin file paths on clustered hosting environments.<\/li>\n<li>Fixed debug logging to properly enable when using the WP_DEBUG constant.<\/li>\n<\/ul>\n\n<h4>1.0.0<\/h4>\n\n<ul>\n<li>Initial Release<\/li>\n<\/ul>","raw_excerpt":"Easily add Duo authentication to your WordPress website. Enable multi-factor authentication for your admins and\/or users.","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/bn.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin\/179934","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/bn.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin"}],"about":[{"href":"https:\/\/bn.wordpress.org\/plugins\/wp-json\/wp\/v2\/types\/plugin"}],"replies":[{"embeddable":true,"href":"https:\/\/bn.wordpress.org\/plugins\/wp-json\/wp\/v2\/comments?post=179934"}],"author":[{"embeddable":true,"href":"https:\/\/bn.wordpress.org\/plugins\/wp-json\/wporg\/v1\/users\/duosecurity"}],"wp:attachment":[{"href":"https:\/\/bn.wordpress.org\/plugins\/wp-json\/wp\/v2\/media?parent=179934"}],"wp:term":[{"taxonomy":"plugin_section","embeddable":true,"href":"https:\/\/bn.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_section?post=179934"},{"taxonomy":"plugin_tags","embeddable":true,"href":"https:\/\/bn.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_tags?post=179934"},{"taxonomy":"plugin_category","embeddable":true,"href":"https:\/\/bn.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_category?post=179934"},{"taxonomy":"plugin_contributors","embeddable":true,"href":"https:\/\/bn.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_contributors?post=179934"},{"taxonomy":"plugin_business_model","embeddable":true,"href":"https:\/\/bn.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_business_model?post=179934"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}