A WordPress plugin that extends, the WordPress plugin Two-Factor to automatically enable Two-Factor for newly registered users.

• PHP 8.1+
• WordPress 6.7+
• Two-Factor 0.10.0+

Download the plugin ZIP file from this repository.

1. Upload the ZIP file via the Plugins > Add New > Upload Plugin section of your WordPress dashboard.
2. Activate the plugin from the Plugins menu.

Run the following via WP-CLI

wp cli plugin install https://github.com/timnashcouk/two-factor-enforced/releases/latest/two-factor-enforced.zip --activate 

Once activated, the plugin will set all newly registered users to use the default Two-Factor Email Provider which uses the email they registered with.

If you wish to only have specifical roles such as administrator enforced then this can be set:

• Through a define
• Through a filter

Within wp-config.php or similar config adding the following:

define( 'TWO_FACTOR_ENFORCED_ROLES', [ 'administrator' ] );

This will limit the enforcement to just admin users

The following can be used to filter the roles

    return ['administrator'];
});

By default the plugin will enable email as the default provider for a user. This can be changed via filters.

add_filter('two_factor_enforced_default_providers', function (array $default_providers, int $user_id): array { return ['Two_Factor_Email', 'Two_Factor_Debug']; }, 10, 2); 

and

php add_filter('two_factor_enforced_primary_provider', function (string $default_primary_provider, int $user_id): string { return 'Two_Factor_Debug'; }, 10, 2); 

Issues with code please do open a Github Issue. The plugin is supplied as is with no formal support.

See CHANGELOG.md for notable changes per version.