WordPress plugin
WP 2FA Premium for WordPress Security
WP 2FA Premium extends WordPress two-factor authentication with additional login methods, account recovery options and controls for how users set up and use 2FA. Administrators can enable 2FA for administrators, require it for all users or set policies for specific roles. Guided setup wizards help users configure authentication, including without access to the WordPress dashboard.
WP 2FA Premium extends WordPress two-factor authentication with additional login methods, account recovery options and controls for how users set up and use 2FA. Administrators can enable 2FA for administrators, require it for all users or set policies for specific roles. Guided setup wizards help users configure authentication, including without access to the WordPress dashboard.
Choose how users verify a login
WP 2FA works with authenticator apps that use TOTP, including Google Authenticator and other compatible apps, as well as one-time codes by email. It also supports passkeys. Premium allows multiple passkeys per user and adds YubiKey hardware keys, SMS, one-click email links and Authy push notifications. Zero-setup email 2FA can enroll users automatically without manual configuration.
Backup codes provide a recovery method when a user cannot access their primary authentication method. Premium also adds backup codes over email. The developer API can integrate alternative methods such as WhatsApp or an OTP token, while REST API endpoints support custom authentication flows and headless WordPress setups.
Set policies and recovery options
Administrators can require users to set up 2FA immediately or allow a grace period. Policies can also require 2FA after a password reset. For account recovery, the next login can be allowed without 2FA to help a user who is locked out of their authentication method.
Trusted devices let users skip 2FA for a configured period. This offers a way to reduce repeated verification on selected devices, while policies determine who must enroll and when.
Customize messages and shop logins
Full white labeling lets administrators change text and visuals in setup wizards, emails, SMS messages and 2FA pages. Editable email templates provide further control over authentication and recovery messages. One-click WooCommerce integration enables 2FA for clients and store administrators.
Setup and support
Install and activate WP 2FA, then use the configuration wizard to choose authentication methods and policies. Set rules for users or roles, review recovery options, and tailor email templates or white-labeled screens as needed. Premium users can access one-to-one email support.