How to Add Two-Factor Authentication in WordPress

Many online services, including Google, now allow you to use two-factor authentication, which provides a better way to protect your login data. While it powers most WordPress websites, it should come as no surprise that the same functionality is available to WordPress users. In this article, we will discuss several ways to enable two-factor authentication in WordPress.

What is Two-Factor Authentication?

Two-factor authentication is a type of authentication in which a user is allowed to access content only after passing two tests. One is usually a password, a PIN, or similar test, while the other may be a physical object such as a bank card number or a natural feature of the user, such as a fingerprint.

You can also use email for this, i.e. the person trying to log in not only knows your login data (username and password), but can also access your email. It is easy to understand why two or more identification factors provide better security. We will show you how to add two factor authentication in WordPress. WordPress 2-Step VerificationA completely free plugin, in three free and easy ways:

Before continuing, the first thing you need to do is install and activate the WordPress 2-Step Verification plugin. If you don’t know how to install and activate a plugin, you can check out our handy tutorial.

2-Step Verification Using Email

After installing the plugin, you need to navigate to: Users/2-Step Verification using your left pane menu.

Once there, click on it To start To set up your 2-step verification

You will then be asked to set up an email address. Enter your e-mail address in the field and click Next.

You will then receive a code in your email inbox. Copy the six-digit code, paste it into the specified field and click. Next.

This way you confirm that 2-step verification is working and it will work that way for your users as well. Just click to activate it. Hungry button.

You will then receive another verification code in your mailbox. To complete the activation, you must enter the specified field.

You now have fully functioning two-factor authentication. When you log in using your password, a six-digit code will be sent to your e-mail address. You will need to further verify your login using the randomly generated six-digit code that will be sent to your email. This means that anyone wishing to log in must use not only a password, but also a code they will receive in their email.

You can also add other email addresses for easier access while keeping the extra step of security.

As we said earlier, you can use the same plugin to create alternative second steps. you can use Google Authenticator app to generate codes in case your device is offline or one time printable backup codes for when your e-mail is inaccessible. Any of these sign-in factors Trash can symbol.

You can also install App passwords If you log into WordPress using apps that don’t support 2-Step Verification or skip step two Devices you trust.

2-Step Verification using Google Authenticator

Click to install Google Authenticator To create under Authenticator app and select the type of device you will use. We’ll show you how this works for Android devices, but it works pretty much the same for iOS.

You will be presented with a set of instructions. First, you need to download Google Authenticator Create an account from Google Playstore and scan the QR code.

You will receive a randomly generated, frequently changing six-digit code. You need to enter this code in the appropriate field.

After doing this, you will use Google Authenticator for each login. It depends on your device, but the app works regardless of whether your phone is connected to the internet or not, so your device doesn’t need to be online for authentication to work, making it a bit easier than email. This also means that the person who wants to log in must not only know the password, but also have access to your mobile device.

2-Step Verification Using Backup Codes

To generate bulk disposable codes, click on it. To create under Backup Codesand you will be shown a series of codes that you can download, print or take notes. You can also create another set.

You can use these one-time codes to log in when you cannot access your phone or e-mail.

As a result

As you can see, setting up two-factor authentication in WordPress is both easy and free, making your website more secure from hackers. Even if the database holding your passwords is compromised, even if you lose a device, even if your password is stolen by someone trying to damage your website or content, they will still have an extra hoop to bypass. With a well-chosen plugin, your WordPress website can be more secure than ever and at no extra cost.