Back to plugin directory
#70 rankedTier S

Kadence Security – Password, Two Factor Authentication, and Brute Force Protection

By Nexcess

View on WordPress.org
Active installs700K+
WP Rank score91.8
Rating4.6 / 5
Reviews3,992
Version10.0.6
Last updatedOct 14, 2026

Overview

This WordPress security plugin combines login protections, brute-force defenses and controls for different user groups. Its Pro edition adds security monitoring, automated vulnerability patching and further login options.

Kadence Security – Password, Two Factor Authentication, and Brute Force Protection is ranked #70 among WordPress.org plugins by WP Rank with a score of 91.8. It has 700,000+ active installs and 40,233,648 total downloads. Users rate it 4.6 out of 5 across 3,992 reviews. It was downloaded 98,384 times in the last 15 days. The latest release (10.0.6) was published on Oct 14, 2026. It is tested up to WordPress 7.1.4 and requires PHP 7.4. 38% of its 13 support threads are resolved.

Install Trend

Based on the last 15 days of WordPress.org download stats.

98,384 downloads (15d)
10-2310-2410-2510-2610-2710-2810-2910-3010-3111-0111-0211-0311-0411-05
Kadence Security – Password, Two Factor Authentication, and Brute Force Protection

Compatibility

Requires WordPress6.5
Tested up to7.1.4
Requires PHP7.4
AddedOct 23, 2010

Description

Login security and brute-force protection

Kadence Security concentrates on login defenses, with additional controls for blocking repeat offenders.

Two-factor authentication supports authenticator apps, email and backup codes, while password requirements let administrators set a policy for users. Local and network brute-force protection are available alongside user bans. Pro adds reCAPTCHA, passwordless login and trusted-device controls, so sites needing those options should account for the paid edition.

Security templates and controls for different user groups

Six site templates provide starting points, while user-group settings allow security requirements to differ by role.

  • Site templates: Ecommerce, Network, Non-Profit, Blog, Portfolio and Brochure options help match settings to a site’s purpose.
  • User groups: Set different requirements for groups such as clients or customers, including two-factor authentication, access to security settings and password policies.
  • Temporary administrator access: Pro privilege escalation grants temporary admin-level access, which may suit workflows where elevated access should not be permanent.

Pro monitoring and vulnerability protection

The Pro dashboard brings security activity and account information together, with automated vulnerability patching as an additional protection layer.

Its statistics cover brute-force attacks, banned users, active lockouts, site scan results and user security. Patchstack-powered automated patching is also included in Pro. This is useful for teams seeking a central view of security activity, but these monitoring and patching features require Pro.

Changes to existing sites require a backup

Back up an existing site before enabling features, because the plugin can make significant changes to databases and files.

  • Before setup: Make a complete backup before applying features to an existing site.
  • Site risk: Changes to files and database content can cause problems, even if they are uncommon; a backup gives you a recovery point.
  • Security limits: The plugin can address common attack methods but cannot prevent every possible attack, so it should be part of broader security practices.

Recent maintenance, but support resolution remains limited

Kadence Security was updated within the past few weeks, while its support-resolution share is low.

  • Maintenance: The recent update points to ongoing maintenance, a useful sign for site owners weighing a security plugin.
  • Support record: Of 12 listed support threads, 25% are marked resolved. That limited resolution figure is worth considering if you expect to rely on support.

Kadence Security is widely installed and has excellent user ratings, making it a credible option for sites that want login protections and security settings tailored by user group. The trade-off is that several advanced controls, monitoring features and automated patching require Pro, while the support-resolution share is modest. Back up before enabling features and check that the included controls match your site’s needs.