Two-factor authentication (2FA) adds a verification step after a password when visitors log in. WP 2FA Premium is the paid edition of WP 2FA for WordPress logins. It includes the free edition’s capabilities, with more authentication methods, policy controls, recovery options, trusted devices, white labeling and WooCommerce integration.

Administrators can enable 2FA for administrators, require it for all users or set policies for specific roles. Setup wizards guide configuration, including for users who do not have access to the WordPress dashboard.

Choose how users verify a login

WP 2FA works with passkeys, authenticator apps that use TOTP, and one-time codes by email. Compatible authenticator apps include Google Authenticator. Premium supports multiple passkeys per user for passwordless logins and adds YubiKey hardware keys, SMS, one-click email links and Authy push notifications. Zero-setup email 2FA can enroll users automatically without manual configuration.

Backup codes provide a recovery method when a user cannot access their usual authentication method. Premium also supports sending backup codes by email. The developer API can connect alternative 2FA methods such as WhatsApp or an OTP token. REST API endpoints are available for custom authentication flows and headless WordPress setups.

Set login requirements and recovery options

Policies can require users to set up 2FA immediately or give them a grace period. Administrators can also require 2FA after a password reset. Trusted devices let users skip 2FA for a configured period. If someone is locked out of their authentication method, administrators can allow that user’s next login without 2FA.

Customize setup and messages

Full white labeling lets administrators change text and visuals in setup wizards, emails, SMS messages and 2FA pages. Editable email templates provide further control over messages sent during authentication and recovery.

Extend 2FA to WooCommerce

One-click WooCommerce integration enables 2FA for customers and shop administrators, extending login controls to an online store.

Install and configure

Install and activate WP 2FA in WordPress, then follow the configuration wizard to pick authentication methods and policies. Configure the users or roles covered, review recovery options, and tailor email templates or white-labeled screens as needed. Premium users can contact support through one-to-one email.