WP 2FA Premium for WordPress Security

WP 2FA Premium is the paid edition of the WP 2FA add-on for adding two-factor authentication (2FA) to WordPress logins. It includes the free edition’s capabilities and adds authentication methods, policy controls, recovery options, trusted devices, white labeling and WooCommerce integration.

After a password, 2FA asks users for an additional verification step. Administrators can enable it for administrator accounts, require it for all users, or apply policies to selected roles. Setup wizards guide configuration, including for users without access to the WordPress dashboard.

Choose how users authenticate

WP 2FA works with authenticator apps that use TOTP, including Google Authenticator and other compatible apps, plus one-time codes by email and passkeys. Premium enables multiple passkeys per user for passwordless logins. It also adds YubiKey hardware keys, SMS, one-click email links and Authy push notifications. Zero-setup email 2FA can enroll users automatically without manual configuration.

Backup codes provide a recovery method when a user cannot access their primary authentication method. Premium also adds backup codes over email. The developer API can integrate alternative 2FA methods, such as WhatsApp or an OTP token. REST API endpoints support custom authentication flows and headless WordPress setups.

Set login and recovery policies

Policies can require users to set up 2FA immediately or allow a grace period. Administrators can also require 2FA after a password reset. Trusted devices let users skip 2FA for a configured period. For account recovery, the next user login can be allowed without 2FA to help someone locked out of their authentication method.

Customize messages and shop access

White labeling lets administrators change text and visuals in setup wizards, emails, SMS messages and 2FA pages. Editable email templates provide further control over authentication and recovery messages.

One-click WooCommerce integration enables 2FA for customers and store administrators. Premium users also have one-to-one email support.

Install and configure

Install and activate WP 2FA in WordPress, then use the configuration wizard to choose authentication methods and policies. Set the rules for users or roles, review recovery options, and customize email templates or white-labeled screens as needed.