WordPress Plugin Spotlight: Make Login Safer with Two Factor

The Two Factor plugin adds a second authentication step to WordPress login.

Under Plugins → Add New, search for Two Factor and check that the publisher is WordPress.org.

After installing and activating it, open Users → Profile.

In Two-Factor Options, choose the authenticator app method, TOTP.

Follow the instructions there to connect your app and confirm the requested code.

Generate recovery codes and store them securely so you can regain access if you lose your phone.

Select a primary method and save your profile; activating the plugin alone is not enough.

Each user must configure two-factor authentication for their own account separately.

Test login in another browser and keep your current administrator session open until the test succeeds.

Check compatibility separately for a custom login form or popup; installation alone does not guarantee integration.

Official sources — Checked: October 5, 2026

• WordPress.org — Two Factor: Official Plugin Guide