Title: FluentAuth – The Ultimate Authorization & Security Plugin for WordPress Author: Shahjahan Jewel Published: Desembre 12, 2022 Last modified: Desembre 3, 2025 --- Search plugins ![](https://ps.w.org/fluent-security/assets/banner-772x250.png?rev=2835145) ![](https://ps.w.org/fluent-security/assets/icon.svg?rev=2832369) # FluentAuth – The Ultimate Authorization & Security Plugin for WordPress By [Shahjahan Jewel](https://profiles.wordpress.org/techjewel/) [Download](https://downloads.wordpress.org/plugin/fluent-security.2.1.1.zip) * [Details](https://bal.wordpress.org/plugins/fluent-security/#description) * [Reviews](https://bal.wordpress.org/plugins/fluent-security/#reviews) * [Installation](https://bal.wordpress.org/plugins/fluent-security/#installation) * [Development](https://bal.wordpress.org/plugins/fluent-security/#developers) [Support](https://wordpress.org/support/plugin/fluent-security/) ## Description Boost Your Website’s Security with Login/Signup Security, Two-Factor Email Authentication, Login/Logout Redirects, Social Logins, Detailed Audit Logs, and More. FluentAuth is the lightest and blazing fast security plugin for WordPress. **Highlighted Features** * Two-Factor Authentication for Login * Magic Login via Email * Social Login / Register * Limit Login Attempts * Dynamic Login Redirects * Detailed Audit Logs * Core Security Enhancement * Security Email Notifications * Super Fast Solution * Restrict /wp-admin for low level user roles **What’s new in version 2.0** **🚀 Two-Factor Authentication for Login** Ensure secure access to your admin panel with Two-Factor Login via email for high-level user roles like Administrator / Editor. Even if a password gets compromised, only the right person will be able to log in with the additional authentication step. **🚀 Magic Login via Email** Simplify the login process for end users like customers and subscribers. No more password resets or forgotten passwords that cause users to leave your site. With our improved flow and features, users can log in to your site simply by typing their username or email address and clicking on a secure one- time use link sent to their email. **🚀 Social Login / Register** Allow users to log in to your site with their GitHub, Facebook or Google accounts. This feature is lightweight and easy to enable. **🚀 Limit Login Attempts** Protect your site against brute force attacks by blocking excessive login attempts. Our simple yet powerful tools also improve site security and performance, and allow for customizable lockout timings. **🚀 Dynamic Login Redirects** Easily redirect users to specific pages after they log in or log out. Our drag-and-drop builder lets you customize the login and logout flow for different types of businesses. **🚀 Detailed Audit Logs** Track exactly when users log in to your site and via which method (normal login form, magic URL, or social media) with our powerful audit logs. **🚀 Core Security Enhancement** XML-RPC is a common target for WordPress attacks, but most sites don’t actually need it. This plugin enables you to disable XML-RPC, Remote Application Login, and protect the wp-users listing for REST API for enhanced security. **🚀 Security Email Notifications** As a business owner, it’s important to know when high-level users like administrators, editors, and authors log in to your site, or if someone unauthorized is trying to log in. Our plugin includes email notifications to alert you of these events. **🚀 Super Fast Solution** We’ve built this plugin to be super-fast and simple yet powerful, using the latest technologies like WordPress REST-API, VueJS V3, Vue- Router, and Element-Plus for UI building. We also use custom database tables to store audit logs, so they don’t interfere with your default WordPress database tables. **🚀 Restrict /wp-admin for low level user roles** If you want to restrict /wp- admin access for subscribers or other low level user roles then you can easily enable that and select the user roles that you want to restrict /wp-admin access. **🚀 Customize WordPress Signup Emails** Customize the WordPress default signup emails with your own branding and content. This feature allows you to create a more personalized experience for your users, enhancing their engagement with your site. **🚀 Custom Login/Signup Shortcodes** Create custom login and signup forms using shortcodes. This feature allows you to easily integrate login and signup forms into your pages or posts, providing a seamless user experience. **🚀 Disable Admin Email Notifications on User Signup** Disable the default WordPress admin email notifications that are sent when a new user signs up. This feature helps you manage your email notifications more effectively, reducing clutter in your inbox. **🚀 Scan WordPress Core File Changes** FluentAuth includes a feature to scan WordPress core files for changes, helping you identify any unauthorized modifications. This is crucial for maintaining the integrity of your WordPress installation and ensuring that your site remains secure. ### Why FluentAuth? To improve the security and user experience of a WordPress website, the default authentication system may need to be enhanced with additional plugins. One common issue that WordPress site owners face is their site getting hacked. This is often due to hackers using brute-force attacks to guess passwords and gain access to the admin panel, leading to site takeover. Additionally, the use of common passwords on multiple sites can put all of them at risk if one password is compromised. Using multiple security plugins can be detrimental to the performance of a WordPress website. These plugins, which are often bloated, intercept every WordPress request and run it through a large number of unnecessary rules, resulting in increased server resource usage and slower site performance. To avoid this issue, consider using a comprehensive security solution that offers multiple features in one package, instead of relying on multiple individual plugins. This will help save server resources and improve the overall performance of your website. To Solve these issues, we decided to build FluentAuth and made it free. ### Replace Multiple Plugins with FluentAuth FluentAuth has been designed to provide light-weight security solution while adding better UX and performance of your site. If you use FluentAuth then you don’t need the following plugins **For Login Limit and ban brute force attacks** * Limit Login Attempts Reloaded * WPS Limit Login **For Login & Logout Redirections** * LoginWP (Formerly Peter’s Login Redirect) * Sky Login Redirect * WP Login and Logout Redirect **For Login & Logout Redirections** * LoginWP (Formerly Peter’s Login Redirect) * Sky Login Redirect * WP Login and Logout Redirect **For Hide Admin Bar and Access Restriction** * Hide Admin Bar * Hide Admin Bar Based on User Roles * Auto Hide Admin Bar * Hide Admin Bar from Non-Admins ### User Guides * [Getting Started with FluentAuth](https://fluentauth.com/docs/getting-started/) * [Login / Logout Redirects](https://fluentauth.com/docs/login-redirects/) * [Register/Login Shortcodes in FluentAuth](https://fluentauth.com/docs/shortcodes/) * [Configure Login with GitHub](https://fluentauth.com/docs/github-auth-connection/) * [Configure Login with Google](https://fluentauth.com/docs/google-auth-connection/) ### Other Plugins By The Same Team * [FluentCart A New Era of eCommerce – Faster, Lighter, and Simpler](https://wordpress.org/plugins/fluent-cart/) * [FluentCRM – Email Marketing, Newsletter, Email Automation and CRM Plugin for WordPress](https://wordpress.org/plugins/fluent-crm/) * [Fluent Forms – Fastest WordPress Form Builder Plugin](https://wordpress.org/plugins/fluentform/) * [Ninja Tables – Best WP DataTables Plugin for WordPress](https://wordpress.org/plugins/ninja-tables/) * [Ninja Charts – Best WP Charts Plugin for WordPress](https://wordpress.org/plugins/ninja-charts/) * [WPPayForm – Stripe Payments Plugin for WordPress](https://wordpress.org/plugins/wp-payment-form/) * [Mautic Integration For Fluent Forms](https://wordpress.org/plugins/mautic-for-fluent-forms/) * [Fluent Forms PDF – PDF Entries for Fluent Forms](https://wordpress.org/plugins/fluentforms-pdf/) * [FluentSMTP – WordPress Mail SMTP, SES, SendGrid, MailGun Plugin](https://wordpress.org/plugins/fluent-smtp/) ### CONTRIBUTE If you want to contribute to this project or just report a bug, you are more than welcome. Please check repository from [Github](https://github.com/WPManageNinja/fluent-security/). ## Screenshots * [[ * Reporting Dashboard * [[ * Login Security Settings * [[ * Social Logins Frontend * [[ * Custom Login/Signup Shortcodes * [[ * Dynamic Login Redirects * [[ * Detailed Audit Logs * [[ * Social Login Settings * [[ * System Emails Customization * [[ * Login/Signup Page Customizer * [[ * WordPress Core Files Integrity Check ## Installation This section describes how to install the plugin and get it working. 1. Just search for FluentAuth in WordPress Plugins and click install and activate. OR 1. Upload the plugin files to the `/wp-content/plugins/fluent-auth` directory, or install the plugin through the WordPress plugins screen directly. 2. Activate the plugin through the \’Plugins\’ screen in WordPress 3. Use the `FluentAuth` -> `Settings` screen to configure the plugin ## FAQ ### Is it a GDPR-Compliant? All the data will be saved and managed into WordPress. it’s 100% GDPR-Compliant. ### Will it is a performance issue for WordPress? Absolutely not! From the very first, We were careful about this. It stores all the logs data in custom database tables, so it will not affect your WordPress database. We built the application with VueJS. Also, The Admin UI is super fast as It’s a SPA and communicates over ajax. ## Reviews ![](https://secure.gravatar.com/avatar/563cf7c0120ef71493bb06128669b9cec3734d8f65f1a754482636eb278b297d? s=60&d=retro&r=g) ### 󠀁[Great help in debugging](https://wordpress.org/support/topic/great-help-in-debugging/)󠁿 [gfa7](https://profiles.wordpress.org/gfa7/) Març 23, 2026 Got superior support for resolving a conflict and finding issues in somebody else’s code. Thanks again! ![](https://secure.gravatar.com/avatar/e735c0134cea7608ce96389d0fd7e28f6028b21d6f5588208b335653926b3b1d? s=60&d=retro&r=g) ### 󠀁[Pretty Great Plugin](https://wordpress.org/support/topic/pretty-great-plugin-7/)󠁿 [unknowncreative](https://profiles.wordpress.org/unknowncreative/) Desembre 11, 2025 Over all it works and does a dam good jobonly current complaint/bug, is that login with google still requires a code to be sent and entered.Hope to see this plugin for years and years to come ![](https://secure.gravatar.com/avatar/55715a2b7ede500fed12457acae41c12a1c1653c9ada140e8ac2a0d1a6029523? s=60&d=retro&r=g) ### 󠀁[Superb for my use case](https://wordpress.org/support/topic/superb-for-my-use-case/)󠁿 [zchas42](https://profiles.wordpress.org/zchas42/) Novembre 8, 2025 I wanted to implement a login system with the requirement for users to enter an email code on login. This mitigates login sharing among users. Very effective, did the job perfectly. Raised one support ticket query which was responded to with a“ right first time” solution within 24 hours. Very happy. ![](https://secure.gravatar.com/avatar/67685d3feeb0e207400e65ce119eea52edd91d6f22e7472a423e6d3d3a5bf92f? s=60&d=retro&r=g) ### 󠀁[2fa issue](https://wordpress.org/support/topic/thank-you-3672/)󠁿 [Ankit Punia](https://profiles.wordpress.org/fossist/) Setembre 30, 2025 3 replies When I enter the 2fa code for the first time, it refreshes the page and does not log in. 2nd time when I enter the password and 2fa email code, it works. I am on hostinger. Using litespeed cache and fluentsmtp plugin. Any help would be greatly appreciated. ![](https://secure.gravatar.com/avatar/8445d2e450805d0983e6d1ebe6bb5e5214c8924fc6c1453a63728db8637da492? s=60&d=retro&r=g) ### 󠀁[Great security plugin and replacement for ThemeMyLogin](https://wordpress.org/support/topic/great-security-plugin-and-replacement-for-thememylogin/)󠁿 [Manni02](https://profiles.wordpress.org/manni02/) Setembre 8, 2025 I had been using Theme-My-Login for many years, including after it became paid-for, but it had many compatibility issues and support wasn’t always worth the yearly license fee, so I started looking at other options. I’m a huge fan of Fluent plugins, and I gave a try to FluentPlugins 2.0, as it provided the improvements I was looking for: customizable login and register forms, login redirects, customization of system emails and a few other features that made it a much stronger alternative than its V1.0 (which I had looked at but wasn’t advanced enough for my use). V2.0 is free, it works great, it allowed me to replace Theme-My-Login and a few other plugins, and it’s both light and compatible with all my installed plugins. It also works seamlessly with all the other plugins from the fluent family, which I highly recommend as well, both in their free and paid-for versions. Support is great, as always. A cosmetic issue I had is about to be resolved in the next release and I was provided a .css early to resolve it without having to wait for this upcoming release. The main downside for me is that the magic login feature doesn’t work for our website. I reported the issue and I hope it will be solved at some point in the future. Fluent support has offered to look at our website, as it’s not a general issue, but unfortunately for various reasons we can’t allow third party access. This issue would probably have been resolved by support, had this been possible. One last issue is that the login redirect feature doesn’t work in our website, but I use Uncanny Toolkit for this, so it’s not a huge problem. Regarding missing features, I would like Fluent Security to offer simultaneous login protection, similar to what’s offered by the excellent Loggedin plugin, as it would be really useful for membership sites. This feature request is noted, so I hope it will be implemented at some point, but in the meantime the two plugins work fine together, along with the additional security offered by Wordfence. Overall, I’m very happy with the plugin, and highly recommended. I only hope that a few issues will be fixed and features implemented so that I can get rid of a few more plugins. This is the only reason why I didn’t give it 5 stars. I’ll revise this review when/if some of the features mentioned above are implemented. ![](https://secure.gravatar.com/avatar/789b9d96f589939b945d93cdada540496eea12485a649c0e797501c17b60a66b? s=60&d=retro&r=g) ### 󠀁[Great Plugin](https://wordpress.org/support/topic/great-plugin-40781/)󠁿 [Michael Maguire](https://profiles.wordpress.org/bagebi/) Agost 24, 2025 A very useful plugin and also free. [ Read all 29 reviews ](https://wordpress.org/support/plugin/fluent-security/reviews/) ## Contributors & Developers “FluentAuth – The Ultimate Authorization & Security Plugin for WordPress” is open source software. The following people have contributed to this plugin. Contributors * [ Shahjahan Jewel ](https://profiles.wordpress.org/techjewel/) * [ WPManageNinja ](https://profiles.wordpress.org/wpmanageninja/) * [ Mahmudul Hasan Arif ](https://profiles.wordpress.org/adreastrian/) “FluentAuth – The Ultimate Authorization & Security Plugin for WordPress” has been translated into 8 locales. Thank you to [the translators](https://translate.wordpress.org/projects/wp-plugins/fluent-security/contributors) for their contributions. [Translate “FluentAuth – The Ultimate Authorization & Security Plugin for WordPress” into your language.](https://translate.wordpress.org/projects/wp-plugins/fluent-security) ### Interested in development? [Browse the code](https://plugins.trac.wordpress.org/browser/fluent-security/), check out the [SVN repository](https://plugins.svn.wordpress.org/fluent-security/), or subscribe to the [development log](https://plugins.trac.wordpress.org/log/fluent-security/) by [RSS](https://plugins.trac.wordpress.org/log/fluent-security/?limit=100&mode=stop_on_copy&format=rss). ## Changelog #### 2.1.1 – Date: Dec 03, 2025 * Introducing One-Tap Login via Google Social Auth Connection * Improved Translation & Localization * Security: Improved Data Security and Sanitization and compitable with latest WordPress security standards * Bug Fixes and Performance Improvements #### 2.0.3 – Date: Jun 11, 2025 * Typo and Smartcode fixed on Custom Emails * WP_Error Notice fixed #### 2.0.2 – Date: Jun 11, 2025 * Fixed: Login Redirect Issue * Fixed Typo on Admin Menu * Fixed Styling Issues #### 2.0.0 – Date: Jun 09, 2025 * Introduing Login/Signup Page Customizer * Added Login with Facebook * Added Syststem Emails Custimizations * Introducing WordPress Core Files Integrity Check * Configurable: One-Click Login via Email as primary login method * UI & UX Improvements * Disable Signup on social media connection when global signup is disabled #### 1.1.0 – Date: Dec 16, 2014 * Added hooks for 3rd party developers * Improvement on Authentication flow #### 1.0.8 – Date: Dec 02, 2024 * Added Additional Hooks for Regsitration and Signup * Improved UI & UX * Fixed translation issues #### 1.0.7 – Date: Jul 26, 2024 * Added Email verification on User Regstration Flow * PHP 8.x compatability issue fixed * JS errors fixed on Magic Links Shortcodes #### 1.0.6 – Date: Jan 28, 2024 * Fix Compatibility issue with PHP 8.x * Upgrade Internal Libraries * Improved Login with Google * Improved UI & UX #### 1.0.5 – Date: May 04, 2023 * Added Login or Signup with Google Social Auth Connection * Magic Login URL token is now hashed to improve the security #### 1.0.4 – Date: Feb 04, 2023 * Added Daily/Weekly/Monthly Email reporting Feature * Made Login Form as Custom (no login url expose) * Two-Factor Authentication Improvement #### 1.0.2 – Date: Dec 17, 2022 * Fix UI issue on dashboard * Login with GitHub improvement * Do Two-Factor Authentication even for social login for selected user roles * Added more hooks for developers #### 1.0.2 – Date: Dec 16, 2022 * Improved UI & UX * Added feature to block /wp-admin access and hide admin bar for low-level user roles * Fix conflict issue with LearnDash and other wp-users REST-API * Improved IP Address for login verification. #### 1.0.0 – Date: Dec 12, 2022 * Initial Release ## Meta * Version **2.1.1** * Last updated **4 mesos ago** * Active installations **10.000+** * WordPress version ** 5.0 or higher ** * Tested up to **6.9.4** * PHP version ** 7.3 or higher ** * Languages * [Dutch](https://nl.wordpress.org/plugins/fluent-security/), [Dutch (Belgium)](https://nl-be.wordpress.org/plugins/fluent-security/), [English (US)](https://wordpress.org/plugins/fluent-security/), [Japanese](https://ja.wordpress.org/plugins/fluent-security/), [Korean](https://ko.wordpress.org/plugins/fluent-security/), [Portuguese (Brazil)](https://br.wordpress.org/plugins/fluent-security/), [Russian](https://ru.wordpress.org/plugins/fluent-security/), [Slovak](https://sk.wordpress.org/plugins/fluent-security/), i [Vietnamese](https://vi.wordpress.org/plugins/fluent-security/). * [Translate into your language](https://translate.wordpress.org/projects/wp-plugins/fluent-security) * Tags * [login limit](https://bal.wordpress.org/plugins/tags/login-limit/)[Login Logs](https://bal.wordpress.org/plugins/tags/login-logs/) [xml-rpc](https://bal.wordpress.org/plugins/tags/xml-rpc/) * [Advanced View](https://bal.wordpress.org/plugins/fluent-security/advanced/) ## Ratings 4 out of 5 stars. * [ 16 5-star reviews ](https://wordpress.org/support/plugin/fluent-security/reviews/?filter=5) * [ 2 4-star reviews ](https://wordpress.org/support/plugin/fluent-security/reviews/?filter=4) * [ 7 3-star reviews ](https://wordpress.org/support/plugin/fluent-security/reviews/?filter=3) * [ 3 2-star reviews ](https://wordpress.org/support/plugin/fluent-security/reviews/?filter=2) * [ 1 1-star review ](https://wordpress.org/support/plugin/fluent-security/reviews/?filter=1) [Add my review](https://wordpress.org/support/plugin/fluent-security/reviews/#new-post) [See all reviews](https://wordpress.org/support/plugin/fluent-security/reviews/) ## Contributors * [ Shahjahan Jewel ](https://profiles.wordpress.org/techjewel/) * [ WPManageNinja ](https://profiles.wordpress.org/wpmanageninja/) * [ Mahmudul Hasan Arif ](https://profiles.wordpress.org/adreastrian/) ## Support Issues resolved in last two months: 1 out of 3 [View support forum](https://wordpress.org/support/plugin/fluent-security/)