How to Enable Two-Factor Authentication in WordPress
WordPress · Self-help guide
Two-factor authentication adds an extra layer of protection to WordPress logins. Even if a password is guessed or stolen, the attacker still needs the second verification step. To enable it, install a trusted security plugin that supports two-factor authentication. Open the plugin settings and enable 2FA for administrator accounts first. Use an authenticator app, email code, or another supported method. Save backup codes somewhere secure in case you lose access to your phone. Test the login process in a private browser window before logging out of your main session. Encourage editors and shop managers to use 2FA as well. If a user loses access, an administrator may need to reset their 2FA settings.