{"id":4132,"date":"2022-03-23T10:30:00","date_gmt":"2022-03-23T15:30:00","guid":{"rendered":"https:\/\/wpengine.com\/blog\/two-factor-authentication-wordpress\/"},"modified":"2022-03-23T10:30:00","modified_gmt":"2022-03-23T15:30:00","slug":"two-factor-authentication-wordpress","status":"publish","type":"post","link":"https:\/\/wpengine.com\/blog\/two-factor-authentication-wordpress\/","title":{"rendered":"Two Factor Authentication (2FA) For WordPress"},"content":{"rendered":"<p>It\u2019s vital to create a strong password to secure your WordPress website. However, a password alone won\u2019t deliver adequate protection against many threats that pose a serious risk to your site, such as <a data-analytics-action-type=\"link\" data-analytics-link-location=\"Post Content\" data-analytics-link-type=\"internal\" href=\"https:\/\/wpengine.com\/blog\/11-top-wordpress-security-concerns-how-wp-engine-takes-care-of-them-for-you\/\" target=\"_blank\" rel=\"noreferrer noopener\">brute force attacks<\/a>. <\/p>\n\n\n\n<p>If unauthorized users gain access to your back end, you may lose your website, and even put your visitors at risk. For this reason, you need a plan to maintain WordPress security.<\/p>\n\n\n\n<p>Using <a data-analytics-action-type=\"link\" data-analytics-link-location=\"Post Content\" data-analytics-link-type=\"internal\" href=\"https:\/\/wpengine.com\/blog\/two-factor-authentication\/\" target=\"_blank\" rel=\"noreferrer noopener\">Two Factor Authentication (2FA)<\/a>, you can add an additional layer of security to your WordPress sites. It\u2019s relatively simple to set up, and this feature will significantly reduce the risk of unauthorized users gaining access to your site.<\/p>\n\n\n\n<p>In this post, we\u2019ll introduce 2FA and explain how it can be used in WordPress. We\u2019ll then show you how to implement this feature using plugins. <\/p>\n\n\n\n<p>Let\u2019s get started!<\/p>\n\n\n\n\n\n<h2 id=\"toc-what-is-two-factor-authentication-2fa-for-wordpress\" class=\"wp-block-heading\">What Is Two Factor Authentication (2FA) For WordPress?<\/h2>\n\n\n\n<p><a data-analytics-action-type=\"link\" data-analytics-link-location=\"Post Content\" data-analytics-link-type=\"outbound\" href=\"https:\/\/en.wikipedia.org\/wiki\/Multi-factor_authentication\" target=\"_blank\" rel=\"noreferrer noopener\">Two Factor Authentication (2FA)<\/a> is a layer of security that requires both a password and an additional verification of the user\u2019s identity. This verification comes from something only the authorized user can access, such as text and voice messages, email links, QR codes, or push notifications. 2FA is secure, because attackers don\u2019t have access to these external channels.<\/p>\n\n\n\n<h2 id=\"toc-why-do-i-need-two-factor-authentication\" class=\"wp-block-heading\">Why Do I Need Two-Factor Authentication?<\/h2>\n\n\n\n<p>Two-factor authentication (also known as two-step authentication or two-step verification) helps prevent bad actors from gaining access to your sites and potentially hurting your business. It\u2019s a second line of defense to help keep the bad guys out and ensures that even if your password is compromised, your account will remain secure as long as that second factor stays out of reach for an attacker.<\/p>\n\n\n\n<p>WordPress two factor authentication is an opt-in feature, meaning you only have to use it if you want to. But it\u2019s free, and it adds an extra layer of protection, so why not?<\/p>\n\n\n\n<h2 id=\"toc-how-does-2fa-for-wordpress-work\" class=\"wp-block-heading\">How Does 2FA for WordPress Work?<\/h2>\n\n\n\n<figure class=\"wp-block-image aligncenter wp-image-2101 size-full\"><img decoding=\"async\" src=\"https:\/\/wpengine.com\/wp-content\/uploads\/2018\/03\/2FA1.png\" alt=\"wordpress two factor authentication\" class=\"wp-image-2101\"><figcaption class=\"wp-element-caption\">This <a data-analytics-action-type=\"link\" data-analytics-link-location=\"Post Content\" data-analytics-link-type=\"outbound\" href=\"https:\/\/www.google.com\/landing\/2step\/\" target=\"_blank\" rel=\"noreferrer noopener\">example from Google<\/a> demonstrates how 2FA works on your website.<\/figcaption><\/figure>\n\n\n\n<p>On a typical (i.e. non-2FA) WordPress login page, the user enters a username and password and is automatically granted access to the website\u2019s back end. This means anyone who figures out your username and password can easily gain access to all aspects of your website.<\/p>\n\n\n\n<p>As mentioned above, 2FA can help prevent this from happening. So how does it work in WordPress? <\/p>\n\n\n\n<p>With 2FA set up, when you enter your password and username on the login page, a notification will be sent to your phone or email address. This notification will contain a one-time pin, or possibly a link or QR code.<\/p>\n\n\n\n<p>To access the website, you then must do as the text message or email instructs\u2014such as clicking on the link or entering the PIN on your site.<\/p>\n\n\n\n<h2 id=\"toc-how-secure-is-2fa\" class=\"wp-block-heading\">How Secure Is 2FA?<\/h2>\n\n\n\n<p>When compared to standard password protection, <a data-analytics-action-type=\"link\" data-analytics-link-location=\"Post Content\" data-analytics-link-type=\"internal\" href=\"https:\/\/wpengine.com\/blog\/15-ways-harden-wordpress-security\/\" target=\"_blank\" rel=\"noreferrer noopener\">2FA is much more secure<\/a>. <\/p>\n\n\n\n<p>After all, it requires leveraging something you alone possess (your phone, your private email account, etc) in order to gain access to your site. This means the likelihood of a website hack is reduced, making 2FA the best way to better prevent various security issues (particularly brute force attacks).<\/p>\n\n\n\n<p>Now that you understand the benefits of 2FA and how it works, let\u2019s discuss how you can actually incorporate this feature into your WordPress site.<\/p>\n\n\n\n<h2 id=\"toc-how-do-i-get-started-with-two-factor-authentication\" class=\"wp-block-heading\">How Do I Get Started with Two Factor Authentication?<\/h2>\n\n\n\n<p>If you\u2019re a WP Engine customer, you can <a data-analytics-action-type=\"link\" data-analytics-link-location=\"Post Content\" data-analytics-link-type=\"internal\" href=\"https:\/\/wpengine.com\/support\/multi-factor-authentication\/\" target=\"_blank\" rel=\"noreferrer noopener\">enable 2FA in the WP Engine User Portal<\/a>. If your site is not hosted on WP Engine, you can still implement a two factor authentication method (or even a multi-factor authentication method), but it requires the help of <a data-analytics-action-type=\"link\" data-analytics-link-location=\"Post Content\" data-analytics-link-type=\"internal\" href=\"https:\/\/wpengine.com\/resources\/wordpress-plugins\/\" target=\"_blank\" rel=\"noreferrer noopener\">WordPress plugins<\/a>.&nbsp;<\/p>\n\n\n\n<h2 id=\"toc-wordpress-2fa-plugins\" class=\"wp-block-heading\">WordPress 2FA Plugins<\/h2>\n\n\n\n<p>As a WP Engine customer, you can <a data-analytics-action-type=\"link\" data-analytics-link-location=\"Post Content\" data-analytics-link-type=\"internal\" href=\"https:\/\/wpengine.com\/blog\/two-factor-authentication\/\" target=\"_blank\" rel=\"noreferrer noopener\">implement 2FA<\/a> via the User Portal. Non-WP Engine users can also implement 2FA, but it requires the help of <a data-analytics-action-type=\"link\" data-analytics-link-location=\"Post Content\" data-analytics-link-type=\"internal\" href=\"https:\/\/wpengine.com\/resources\/wordpress-plugins\/\" target=\"_blank\" rel=\"noreferrer noopener\">WordPress plugins<\/a>. Here are a few WordPress 2FA plugin options you can try out for yourself.<\/p>\n\n\n\n<h3 id=\"toc-rublon-two-factor-authentication\" class=\"wp-block-heading\"><a data-analytics-action-type=\"link\" data-analytics-link-location=\"Post Content\" data-analytics-link-type=\"outbound\" href=\"https:\/\/wordpress.org\/plugins\/rublon\/\" target=\"_blank\" rel=\"noreferrer noopener\">Rublon Two-Factor Authentication<\/a><\/h3>\n\n\n\n<figure class=\"wp-block-image aligncenter\"><img decoding=\"async\" src=\"https:\/\/wpengine.com\/wp-content\/uploads\/2018\/03\/2FA3.jpg\" alt=\"wordpress 2FA plugin: Rublon Two-Factor Authentication\" class=\"wp-image-2102\"><\/figure>\n\n\n\n<p><a data-analytics-action-type=\"link\" data-analytics-link-location=\"Post Content\" data-analytics-link-type=\"outbound\" href=\"https:\/\/wordpress.org\/plugins\/rublon\/\" target=\"_blank\" rel=\"noreferrer noopener\">Rublon Two-Factor Authentication<\/a> is a simple 2FA WordPress plugin, enabling you to rapidly secure your website against unauthorized logins. <\/p>\n\n\n\n<p>When first logging into your WordPress account with the security plugin installed, you\u2019ll be required to click the verification link that\u2019s sent to your email address. You can then choose to save your device, which means you\u2019ll no longer need to verify your identity while using the same browser.<\/p>\n\n\n\n<p>This is an excellent option for websites with only one user, although it can be applied to multi-user websites as well (if you upgrade to the paid version).<\/p>\n\n\n\n<p><strong>Pros<\/strong>: This plugin offers one-click installation and activation, and requires no configuration or training.<\/p>\n\n\n\n<p><strong>Cons<\/strong>: It only supports email verification, which can be less secure than text messages or push notifications.<\/p>\n\n\n\n<p><strong>Cost<\/strong>: The personal (one website) plugin is free, but a business (multi-website) version can be purchased by <a data-analytics-action-type=\"link\" data-analytics-link-location=\"Post Content\" data-analytics-link-type=\"outbound\" href=\"https:\/\/wordpress.org\/plugins\/rublon\/\" target=\"_blank\" rel=\"noreferrer noopener\">contacting the sales team<\/a>.<\/p>\n\n\n\n<h3 id=\"toc-duo-two-factor-authentication\" class=\"wp-block-heading\"><a data-analytics-action-type=\"link\" data-analytics-link-location=\"Post Content\" data-analytics-link-type=\"outbound\" href=\"https:\/\/wordpress.org\/plugins\/duo-wordpress\/\" target=\"_blank\" rel=\"noreferrer noopener\">Duo Two-Factor Authentication<\/a><\/h3>\n\n\n\n<figure class=\"wp-block-image aligncenter\"><img decoding=\"async\" src=\"https:\/\/wpengine.com\/wp-content\/uploads\/2018\/03\/2FA4.jpg\" alt=\"WordPress two factor authentication plugin: Duo Two-Factor Authentication\" class=\"wp-image-2103\"><\/figure>\n\n\n\n<p>As one of the more advanced 2FA plugins, <a data-analytics-action-type=\"link\" data-analytics-link-location=\"Post Content\" data-analytics-link-type=\"outbound\" href=\"https:\/\/wordpress.org\/plugins\/duo-wordpress\/\" target=\"_blank\" rel=\"noreferrer noopener\">Duo Two-Factor Authentication<\/a> enables you to set up 2FA based on WordPress user roles. <\/p>\n\n\n\n<p>For example, you can require that Authors and Editors use 2FA to log in, while Subscribers just need to enter their password.<\/p>\n\n\n\n<p>Duo Two-Factor Authentication also provides various options for verification, including via SMS, a mobile app, or a phone call.<\/p>\n\n\n\n<p><strong>Pros<\/strong>: This plugin supports user role configuration, and includes various verification methods.<\/p>\n\n\n\n<p><strong>Cons<\/strong>: There\u2019s no support for <a data-analytics-action-type=\"link\" data-analytics-link-location=\"Post Content\" data-analytics-link-type=\"internal\" href=\"https:\/\/wpengine.com\/support\/what-is-wordpress-multisite\/\" target=\"_blank\" rel=\"noreferrer noopener\">WordPress Multisite<\/a> and this plugin has not been tested with the latest version of WordPress.<\/p>\n\n\n\n<p><strong>Price<\/strong>: The free plugin enables 2FA for up to 10 users on your website, but you can increase that limit starting at <a data-analytics-action-type=\"link\" data-analytics-link-location=\"Post Content\" data-analytics-link-type=\"outbound\" href=\"https:\/\/duo.com\/pricing\" target=\"_blank\" rel=\"noreferrer noopener\">$3 per user per month<\/a>.<\/p>\n\n\n\n<h3 id=\"toc-minioranges-google-authenticator\" class=\"wp-block-heading\"><a data-analytics-action-type=\"link\" data-analytics-link-location=\"Post Content\" data-analytics-link-type=\"outbound\" href=\"https:\/\/wordpress.org\/plugins\/miniorange-2-factor-authentication\/\" target=\"_blank\" rel=\"noreferrer noopener\">miniOrange\u2019s Google Authenticator<\/a><\/h3>\n\n\n\n<figure class=\"wp-block-image aligncenter\"><img decoding=\"async\" src=\"https:\/\/wpengine.com\/wp-content\/uploads\/2018\/03\/2FA5.jpg\" alt=\"two step verification plugin: miniOrange's Google Authenticator for WordPress\" class=\"wp-image-2104\"><\/figure>\n\n\n\n<p>Finally, <a data-analytics-action-type=\"link\" data-analytics-link-location=\"Post Content\" data-analytics-link-type=\"outbound\" href=\"https:\/\/wordpress.org\/plugins\/miniorange-2-factor-authentication\/\" target=\"_blank\" rel=\"noreferrer noopener\">miniOrange\u2019s Google Authenticator<\/a> offers a variety of verification methods to protect your website from unauthorized access\u2014including QR codes, email messages, and push notifications. <\/p>\n\n\n\n<p>As with Duo Two-Factor Authenticator, you can use this plugin to set 2FA for specific user roles.<\/p>\n\n\n\n<p>miniOrange\u2019s Google Authenticator can be configured to require a username, strong password, and factor, or just a username and factor.<\/p>\n\n\n\n<p><strong>Pros<\/strong>: This plugin supports specific-role 2FA, and offers a wide array of verification methods (including QR, SMS, phone calls, and push notifications).<\/p>\n\n\n\n<p><strong>Cons<\/strong>: The free version is fairly limited in terms of features.<\/p>\n\n\n\n<p><strong>Cost<\/strong>: The free plugin offers 2FA for only one user, but you can upgrade starting at $15 per year.<\/p>\n\n\n\n<hr class=\"wp-block-separator aligncenter has-alpha-channel-opacity\">\n\n\n\n<p>It\u2019s important to remember that your WordPress website is only as secure as your Admin login page, and a password alone is not enough. Implementing a two-factor authenticator can help keep your site visitors safe. <\/p>\n\n\n\n<p>If you\u2019re ready to switch to a <a data-analytics-action-type=\"link\" data-analytics-link-location=\"Post Content\" data-analytics-link-type=\"internal\" href=\"https:\/\/wpengine.com\/wordpress-hosting\/\" target=\"_blank\" rel=\"noreferrer noopener\">host<\/a> that offers peace of mind, you can check out WP Engine\u2019s <a data-analytics-action-type=\"link\" data-analytics-link-location=\"Post Content\" data-analytics-link-type=\"internal\" href=\"https:\/\/wpengine.com\/managed-wordpress-hosting\/\" target=\"_blank\" rel=\"noreferrer noopener\">managed hosting for WordPress<\/a>!<\/p>","protected":false},"excerpt":{"rendered":"<p>It\u2019s vital to create a strong password to secure your WordPress website. However, a password alone won\u2019t deliver adequate protection against many threats that pose a serious risk to your site, such as brute force attacks. If unauthorized users gain access to your back end, you may lose your website, and even put your visitors [&hellip;]<\/p>\n","protected":false},"author":21,"featured_media":2100,"comment_status":"","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"mediapress_draft_name":"","_mediapress_is_draft_copy":false,"footnotes":""},"audience":[],"blog-category":[121],"buyer-stage":[],"company-and-culture":[],"content-type":[54],"location":[],"persona":[106],"product":[],"topic":[96],"use-cases":[],"class_list":["post-4132","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","blog-category-best-practices","content-type-blog","persona-developer","topic-security"],"time_to_read":6,"acf":{"hero_image_alt_text":"","display_author_bio":false,"featured_on_hub_page":false,"featured_on_tag_page":false,"featured_on_category_page":false,"wp_engine_pick":false,"taxonomy_selector":{"":null,"taxonomy-audience":false,"taxonomy-buyer-stage":false,"taxonomy-company-and-culture":false,"taxonomy-content-type":[54],"taxonomy-location":false,"taxonomy-persona":[106],"taxonomy-product":false,"taxonomy-topic":[96],"taxonomy-use-cases":false}},"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.4 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Set Up WordPress Two-Factor Authentication<\/title>\n<meta name=\"description\" content=\"Secure your WordPress site with 2FA. Learn how to easily implement two-factor authentication using plugins and software for enhanced security.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/wpengine.com\/blog\/two-factor-authentication-wordpress\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Set Up WordPress Two-Factor Authentication\" \/>\n<meta property=\"og:description\" content=\"Secure your WordPress site with 2FA. Learn how to easily implement two-factor authentication using plugins and software for enhanced security.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/wpengine.com\/blog\/two-factor-authentication-wordpress\/\" \/>\n<meta property=\"og:site_name\" content=\"WP Engine\u00ae\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/wpengine\/\" \/>\n<meta property=\"article:published_time\" content=\"2022-03-23T15:30:00+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/wpengine.com\/wp-content\/uploads\/2018\/03\/wordpress-security.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1\" \/>\n\t<meta property=\"og:image:height\" content=\"1\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Sam Rodriguez\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@wpengine\" \/>\n<meta name=\"twitter:site\" content=\"@wpengine\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Sam Rodriguez\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"6 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/wpengine.com\\\/blog\\\/two-factor-authentication-wordpress\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/wpengine.com\\\/blog\\\/two-factor-authentication-wordpress\\\/\"},\"author\":{\"name\":\"Sam Rodriguez\",\"@id\":\"https:\\\/\\\/wpengine.com\\\/#\\\/schema\\\/person\\\/9625524bbe6079f6f8795d393dc2c22f\"},\"headline\":\"Two Factor Authentication (2FA) For WordPress\",\"datePublished\":\"2022-03-23T15:30:00+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/wpengine.com\\\/blog\\\/two-factor-authentication-wordpress\\\/\"},\"wordCount\":1124,\"publisher\":{\"@id\":\"https:\\\/\\\/wpengine.com\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/wpengine.com\\\/blog\\\/two-factor-authentication-wordpress\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/wpengine.com\\\/wp-content\\\/uploads\\\/2018\\\/03\\\/wordpress-security.jpg\",\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/wpengine.com\\\/blog\\\/two-factor-authentication-wordpress\\\/\",\"url\":\"https:\\\/\\\/wpengine.com\\\/blog\\\/two-factor-authentication-wordpress\\\/\",\"name\":\"Set Up WordPress Two-Factor Authentication\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/wpengine.com\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/wpengine.com\\\/blog\\\/two-factor-authentication-wordpress\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/wpengine.com\\\/blog\\\/two-factor-authentication-wordpress\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/wpengine.com\\\/wp-content\\\/uploads\\\/2018\\\/03\\\/wordpress-security.jpg\",\"datePublished\":\"2022-03-23T15:30:00+00:00\",\"description\":\"Secure your WordPress site with 2FA. Learn how to easily implement two-factor authentication using plugins and software for enhanced security.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/wpengine.com\\\/blog\\\/two-factor-authentication-wordpress\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/wpengine.com\\\/blog\\\/two-factor-authentication-wordpress\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/wpengine.com\\\/blog\\\/two-factor-authentication-wordpress\\\/#primaryimage\",\"url\":\"https:\\\/\\\/wpengine.com\\\/wp-content\\\/uploads\\\/2018\\\/03\\\/wordpress-security.jpg\",\"contentUrl\":\"https:\\\/\\\/wpengine.com\\\/wp-content\\\/uploads\\\/2018\\\/03\\\/wordpress-security.jpg\",\"caption\":\"Two Factor Authentication (2FA) For WordPress\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/wpengine.com\\\/blog\\\/two-factor-authentication-wordpress\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/wpengine.com\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Two Factor Authentication (2FA) For WordPress\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/wpengine.com\\\/#website\",\"url\":\"https:\\\/\\\/wpengine.com\\\/\",\"name\":\"WP Engine\u00ae\",\"description\":\"Managed Hosting for WordPress\",\"publisher\":{\"@id\":\"https:\\\/\\\/wpengine.com\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/wpengine.com\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/wpengine.com\\\/#organization\",\"name\":\"WP Engine\",\"url\":\"https:\\\/\\\/wpengine.com\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/wpengine.com\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/wpengine.com\\\/wp-content\\\/uploads\\\/2025\\\/09\\\/WPEngine_OGImage-1.webp\",\"contentUrl\":\"https:\\\/\\\/wpengine.com\\\/wp-content\\\/uploads\\\/2025\\\/09\\\/WPEngine_OGImage-1.webp\",\"width\":1200,\"height\":630,\"caption\":\"WP Engine\"},\"image\":{\"@id\":\"https:\\\/\\\/wpengine.com\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/www.facebook.com\\\/wpengine\\\/\",\"https:\\\/\\\/x.com\\\/wpengine\",\"https:\\\/\\\/www.instagram.com\\\/wpengine\\\/\",\"https:\\\/\\\/www.linkedin.com\\\/company\\\/wpengine\\\/\",\"https:\\\/\\\/www.youtube.com\\\/channel\\\/UCJeAEAxX69v24CUBZ0WBYSg\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/wpengine.com\\\/#\\\/schema\\\/person\\\/9625524bbe6079f6f8795d393dc2c22f\",\"name\":\"Sam Rodriguez\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/933722cf8761e0c08fbced6085998032df460c5ecfa2481d9cd16f569f3da2c1?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/933722cf8761e0c08fbced6085998032df460c5ecfa2481d9cd16f569f3da2c1?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/933722cf8761e0c08fbced6085998032df460c5ecfa2481d9cd16f569f3da2c1?s=96&d=mm&r=g\",\"caption\":\"Sam Rodriguez\"},\"url\":\"https:\\\/\\\/wpengine.com\\\/blog\\\/author\\\/sam-rodriguez\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Set Up WordPress Two-Factor Authentication","description":"Secure your WordPress site with 2FA. Learn how to easily implement two-factor authentication using plugins and software for enhanced security.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/wpengine.com\/blog\/two-factor-authentication-wordpress\/","og_locale":"en_US","og_type":"article","og_title":"Set Up WordPress Two-Factor Authentication","og_description":"Secure your WordPress site with 2FA. Learn how to easily implement two-factor authentication using plugins and software for enhanced security.","og_url":"https:\/\/wpengine.com\/blog\/two-factor-authentication-wordpress\/","og_site_name":"WP Engine\u00ae","article_publisher":"https:\/\/www.facebook.com\/wpengine\/","article_published_time":"2022-03-23T15:30:00+00:00","og_image":[{"url":"https:\/\/wpengine.com\/wp-content\/uploads\/2018\/03\/wordpress-security.jpg","width":1,"height":1,"type":"image\/jpeg"}],"author":"Sam Rodriguez","twitter_card":"summary_large_image","twitter_creator":"@wpengine","twitter_site":"@wpengine","twitter_misc":{"Written by":"Sam Rodriguez","Est. reading time":"6 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/wpengine.com\/blog\/two-factor-authentication-wordpress\/#article","isPartOf":{"@id":"https:\/\/wpengine.com\/blog\/two-factor-authentication-wordpress\/"},"author":{"name":"Sam Rodriguez","@id":"https:\/\/wpengine.com\/#\/schema\/person\/9625524bbe6079f6f8795d393dc2c22f"},"headline":"Two Factor Authentication (2FA) For WordPress","datePublished":"2022-03-23T15:30:00+00:00","mainEntityOfPage":{"@id":"https:\/\/wpengine.com\/blog\/two-factor-authentication-wordpress\/"},"wordCount":1124,"publisher":{"@id":"https:\/\/wpengine.com\/#organization"},"image":{"@id":"https:\/\/wpengine.com\/blog\/two-factor-authentication-wordpress\/#primaryimage"},"thumbnailUrl":"https:\/\/wpengine.com\/wp-content\/uploads\/2018\/03\/wordpress-security.jpg","inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/wpengine.com\/blog\/two-factor-authentication-wordpress\/","url":"https:\/\/wpengine.com\/blog\/two-factor-authentication-wordpress\/","name":"Set Up WordPress Two-Factor Authentication","isPartOf":{"@id":"https:\/\/wpengine.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/wpengine.com\/blog\/two-factor-authentication-wordpress\/#primaryimage"},"image":{"@id":"https:\/\/wpengine.com\/blog\/two-factor-authentication-wordpress\/#primaryimage"},"thumbnailUrl":"https:\/\/wpengine.com\/wp-content\/uploads\/2018\/03\/wordpress-security.jpg","datePublished":"2022-03-23T15:30:00+00:00","description":"Secure your WordPress site with 2FA. Learn how to easily implement two-factor authentication using plugins and software for enhanced security.","breadcrumb":{"@id":"https:\/\/wpengine.com\/blog\/two-factor-authentication-wordpress\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/wpengine.com\/blog\/two-factor-authentication-wordpress\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/wpengine.com\/blog\/two-factor-authentication-wordpress\/#primaryimage","url":"https:\/\/wpengine.com\/wp-content\/uploads\/2018\/03\/wordpress-security.jpg","contentUrl":"https:\/\/wpengine.com\/wp-content\/uploads\/2018\/03\/wordpress-security.jpg","caption":"Two Factor Authentication (2FA) For WordPress"},{"@type":"BreadcrumbList","@id":"https:\/\/wpengine.com\/blog\/two-factor-authentication-wordpress\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/wpengine.com\/"},{"@type":"ListItem","position":2,"name":"Two Factor Authentication (2FA) For WordPress"}]},{"@type":"WebSite","@id":"https:\/\/wpengine.com\/#website","url":"https:\/\/wpengine.com\/","name":"WP Engine\u00ae","description":"Managed Hosting for WordPress","publisher":{"@id":"https:\/\/wpengine.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/wpengine.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/wpengine.com\/#organization","name":"WP Engine","url":"https:\/\/wpengine.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/wpengine.com\/#\/schema\/logo\/image\/","url":"https:\/\/wpengine.com\/wp-content\/uploads\/2025\/09\/WPEngine_OGImage-1.webp","contentUrl":"https:\/\/wpengine.com\/wp-content\/uploads\/2025\/09\/WPEngine_OGImage-1.webp","width":1200,"height":630,"caption":"WP Engine"},"image":{"@id":"https:\/\/wpengine.com\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/wpengine\/","https:\/\/x.com\/wpengine","https:\/\/www.instagram.com\/wpengine\/","https:\/\/www.linkedin.com\/company\/wpengine\/","https:\/\/www.youtube.com\/channel\/UCJeAEAxX69v24CUBZ0WBYSg"]},{"@type":"Person","@id":"https:\/\/wpengine.com\/#\/schema\/person\/9625524bbe6079f6f8795d393dc2c22f","name":"Sam Rodriguez","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/933722cf8761e0c08fbced6085998032df460c5ecfa2481d9cd16f569f3da2c1?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/933722cf8761e0c08fbced6085998032df460c5ecfa2481d9cd16f569f3da2c1?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/933722cf8761e0c08fbced6085998032df460c5ecfa2481d9cd16f569f3da2c1?s=96&d=mm&r=g","caption":"Sam Rodriguez"},"url":"https:\/\/wpengine.com\/blog\/author\/sam-rodriguez\/"}]}},"mediapress_workflow_parent_id":null,"_links":{"self":[{"href":"https:\/\/wpengine.com\/wp-json\/wp\/v2\/posts\/4132","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/wpengine.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/wpengine.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/wpengine.com\/wp-json\/wp\/v2\/users\/21"}],"replies":[{"embeddable":true,"href":"https:\/\/wpengine.com\/wp-json\/wp\/v2\/comments?post=4132"}],"version-history":[{"count":0,"href":"https:\/\/wpengine.com\/wp-json\/wp\/v2\/posts\/4132\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/wpengine.com\/wp-json\/wp\/v2\/media\/2100"}],"wp:attachment":[{"href":"https:\/\/wpengine.com\/wp-json\/wp\/v2\/media?parent=4132"}],"wp:term":[{"taxonomy":"audience","embeddable":true,"href":"https:\/\/wpengine.com\/wp-json\/wp\/v2\/audience?post=4132"},{"taxonomy":"blog-category","embeddable":true,"href":"https:\/\/wpengine.com\/wp-json\/wp\/v2\/blog-category?post=4132"},{"taxonomy":"buyer-stage","embeddable":true,"href":"https:\/\/wpengine.com\/wp-json\/wp\/v2\/buyer-stage?post=4132"},{"taxonomy":"company-and-culture","embeddable":true,"href":"https:\/\/wpengine.com\/wp-json\/wp\/v2\/company-and-culture?post=4132"},{"taxonomy":"content-type","embeddable":true,"href":"https:\/\/wpengine.com\/wp-json\/wp\/v2\/content-type?post=4132"},{"taxonomy":"location","embeddable":true,"href":"https:\/\/wpengine.com\/wp-json\/wp\/v2\/location?post=4132"},{"taxonomy":"persona","embeddable":true,"href":"https:\/\/wpengine.com\/wp-json\/wp\/v2\/persona?post=4132"},{"taxonomy":"product","embeddable":true,"href":"https:\/\/wpengine.com\/wp-json\/wp\/v2\/product?post=4132"},{"taxonomy":"topic","embeddable":true,"href":"https:\/\/wpengine.com\/wp-json\/wp\/v2\/topic?post=4132"},{"taxonomy":"use-cases","embeddable":true,"href":"https:\/\/wpengine.com\/wp-json\/wp\/v2\/use-cases?post=4132"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}