WP 2FA Premium is the paid edition of WP 2FA, a add-on for adding two-factor authentication (2FA) to WordPress logins. It includes the free edition’s capabilities and adds authentication methods, account recovery controls, trusted devices, white labeling and WooCommerce integration. Two-factor authentication adds a verification step to login.

Administrators can enable 2FA for administrator accounts, require it for all visitors or set policies for specific roles. Setup wizards guide configuration and help users set up 2FA without access to the WordPress dashboard.

Authentication methods

WP 2FA supports authenticator apps that use TOTP, including Google Authenticator and other compatible apps, as well as one-time codes by email and passkeys. Premium supports multiple passkeys per user for passwordless logins. It adds YubiKey hardware keys, SMS, one-click email links and Authy push notifications. Zero-setup email 2FA can enroll users automatically without manual configuration.

Backup codes offer access if a user cannot reach their primary authentication method. Premium also supports sending backup codes by email. The developer API can connect other 2FA methods, such as WhatsApp or an OTP token. REST API endpoints support custom integrations, including headless WordPress setups.

Access policies

Administrators can require users to set up 2FA immediately or give them a grace period. Policies can also require 2FA after a password reset, adding a verification step during an account security event.

With trusted devices, users can skip 2FA for a configured period. If someone is locked out of their authentication method, administrators can allow that user’s next login without 2FA to help restore access.

Recovery and user experience

Full white labeling lets administrators change text and visuals in setup wizards, emails, SMS messages and 2FA pages. Editable email templates provide further control over authentication and recovery messages.

One-click WooCommerce integration enables 2FA for clients and store administrators. Premium users also have access to one-to-one email support.

Setup

Install and activate WP 2FA in WordPress, then use the configuration wizard to select authentication methods and policies. Configure the users or roles covered by those policies, review recovery options, and customize email templates or white-labeled screens as needed.