WP 2FA Premium for WordPress Security
WP 2FA Premium is the paid edition of WP 2FA. It includes the free edition’s two-factor authentication features and adds more login methods, account recovery options, trusted devices, white labeling, and WooCommerce integration.
Choose authentication methods
WP 2FA supports authenticator apps using TOTP, including Google Authenticator and other TOTP-compatible apps, as well as one-time codes sent by email. Premium adds multiple passkeys per user, YubiKey hardware keys, SMS, one-click email links, and Authy push notifications. Zero-setup email 2FA can enroll users automatically without manual configuration.
Users can also use backup codes for recovery; Premium adds backup codes over email. The developer API supports integrations with alternative methods such as WhatsApp or an OTP token. REST API endpoints are available for custom authentication flows and headless WordPress setups.
Set policies and recovery options
Administrators can enable 2FA for WordPress admin accounts, require it for everyone, or apply policies to specific roles. Policies can require users to set up 2FA immediately or give them a grace period. Administrators can also require 2FA after a password reset.
Trusted devices let users skip 2FA for a configured period. To help with account recovery, administrators can allow the next login without 2FA for a user who is locked out of their authentication method.
Customize and connect your site
White labeling lets administrators change text and visuals in setup wizards, emails, SMS messages, and 2FA pages. Email templates are editable. One-click WooCommerce integration enables 2FA for customers and store administrators.
Setup and support
Install and activate WP 2FA, then use its configuration wizard to choose authentication methods and policies. Set the rules for users or roles, review recovery options, and customize the emails or screens as needed. Premium users can contact support one-to-one by email.