Compatibility: Currently, the migration tool is compatible with “Wordfence Login Security.” According to their announcement, the plugin is scheduled to be discontinued on or around July 1, 2026. If you are looking for an alternative choice, try Ultimate Security.
We are actively working on expanding this list, and support for more security plugins will be added in future updates.
The Migration tool allows you to safely move your compatible 2FA and login protection settings from another security plugin directly into Ultimate Security. Currently, Ultimate Security is compatible. This feature ensures a smooth transition while keeping your current security configuration intact. Navigate to Ultimate Security > Maintenance & Tools > Migration.

How it Works
The migration process is designed to be safe and non-destructive:
- Read-Only: The plugin only reads your existing data; it never modifies or deletes your source data.
- Snapshot: A snapshot of your settings is taken before any changes are made, allowing you to roll back if necessary.
- Safe Skipping: Users already using Ultimate Security 2FA are left untouched
Migration Steps
1. Detect
The plugin will automatically scan your WordPress installation for compatible security data. You will see a “Detection checklist” confirming that the necessary tables and files have been found.
Click the Continue to Preview button to proceed.
2. Preview
In this step, the plugin provides a summary of the migration:

- Will be migrated: Displays the number of users with 2FA and any detected reCAPTCHA settings.
- Will be skipped: Lists any entries that cannot be migrated.
- Important Notes: Review the system notes regarding specific settings that may not be migrated due to differences in plugin functionality.
3. Start Migration
When you are ready, click the Start Migration button. A confirmation pop-up will appear reiterating that a snapshot will be taken first. Click Start Migration again to finalize the process.

4. Migration Success
Once finished, you will see a success message. Important: Before deactivating your old security plugin, follow these manual steps:

- Test a login using a migrated administrator account.
- Ask users to regenerate their backup codes.
- Review reCAPTCHA behavior on your login and registration forms.
- Deactivate the old security plugin only after verifying that all logins work as expected.
Rollback
If you encounter any issues after the migration, you can revert your changes to the pre-migration state.

- On the Migration screen, click Rollback This Migration.
- A confirmation modal will appear, explaining that this will restore your settings as they were captured before the migration.
- Click Rollback to confirm.
The system will restore your settings and provide a success notification once complete. Your original source plugin data remains unchanged throughout this process.

If you encounter any difficulties during the process, our support team is available to assist you in securing your site seamlessly.