=== WP 2FA - Two-factor authentication for WordPress ===
Contributors: WPWhiteSecurity, robert681
Plugin URI: https://wp2fa.io
License: GPLv3
License URI: https://www.gnu.org/licenses/gpl.html
Tags: 2FA, two-factor authentication, multi step authentication, 2-factor authentication, WordPress authentication, two step authentication
Requires at least: 5.0
Tested up to: 5.8.3
Stable tag: 2.1.0
Requires PHP: 7.0.0

Harden your website login page; add two-factor authentication (2FA) for all your users with this easy to use plugin.

== Description ==

<strong>A FREE & EASY TO USE TWO-FACTOR AUTHENTICATION PLUGIN FOR WORDPRESS</strong><br />

Add an extra layer of security to your WordPress website login page and its users. Enable [two-factor authentication (2FA)](https://wp2fa.io/?utm_source=wordpress.org&utm_medium=referral&utm_campaign=all+plugins&utm_content=plugin+repos+description), the best protection against users using weak passwords, and automated password guessing and brute force attacks.

[youtube https://www.youtube.com/watch?v=vRlX_NNGeFo]

<a href="https://wp2fa.io/features/?utm_source=wordpress.org&utm_medium=referral&utm_campaign=WP2FA&utm_content=plugin+repos+description" target="_blank">Features</a> | <a href="https://wp2fa.io/support/kb/getting-started-wp-2fa-plugin/?utm_source=wordpress.org&utm_medium=referral&utm_campaign=WP2FA&utm_content=plugin+repos+description" target="_blank">Getting Started</a> | <a href="hhttps://wp2fa.io/get-wp-2fa-premium-trial/?utm_source=wordpress.org&utm_medium=referral&utm_campaign=WP2FA&utm_content=plugin+repos+description" target="_blank">14-Day Premium Trial</a>

Use the [WP 2FA plugin](https://wp2fa.io/?utm_source=wordpress.org&utm_medium=referral&utm_campaign=WP2FA&utm_content=plugin+repos+description) to enable two-factor authentication for your WordPress administrator user, and to enforce your website users, or some of them to use 2FA. This plugin is very easy to use. It has wizards with clear instructions, so even non technical users can setup 2FA without requiring technical assistance.

#### Maintained & Supported by WP White Security

WP White Security builds high-quality WordPress security & admin plugins such as [WPassword](https://www.wpwhitesecurity.com/wordpress-plugins/password-policy-manager-wordpress/?utm_source=wordpress.org&utm_medium=referral&utm_campaign=PPMWP&utm_content=plugin+repos+description), and [WP Activity Log](https://wpactivitylog.com/?utm_source=wordpress.org&utm_medium=referral&utm_campaign=WSAL&utm_content=plugin+repos+description), the #1 user-rated activity log plugin for WordPress.

Browse our list of [WordPress security plugins](https://www.wpwhitesecurity.com/wordpress-plugins/?utm_source=wordpress.org&utm_medium=referral&utm_campaign=all+plugins&utm_content=plugin+repos+description) to see how our plugins can help you better manage and improve the security of your WordPress websites and users.

###WP 2FA Key plugin features & capabilities

* Free Two-factor authentication (2FA) for all users
* Supports [multiple 2FA methods](https://wp2fa.io/features/multiple-2fa-methods-support/?utm_source=wordpress.org&utm_medium=referral&utm_campaign=WP2fA&utm_content=plugin+repos+description)
* [Universal 2FA app support](https://wp2fa.io/features/universal-2fa-app-support/?utm_source=wordpress.org&utm_medium=referral&utm_campaign=WP2fA&utm_content=plugin+repos+description) - generate codes from Google Authenticator, Authy & any other 2FA app.
* Supports [2FA backup methods](https://wp2fa.io/features/alternative-2fa-backup-method-options/?utm_source=wordpress.org&utm_medium=referral&utm_campaign=WP2FA&utm_content=plugin%20repos%20description)
* [Very easy to use and simple to set up](https://wp2fa.io/features/easy-to-use-simple-setup-wizards/?utm_source=wordpress.org&utm_medium=referral&utm_campaign=WP2fA&utm_content=plugin+repos+description)
* Use [2FA policies to enforce 2FA with a grace period](https://wp2fa.io/support/kb/configure-2fa-policies-enforce/?utm_source=wordpress.org&utm_medium=referral&utm_campaign=WP2FA&utm_content=plugin%20repos%20description),
* Or require users users to instantly setup 2FA upon logging in,
* [Out of the box support for third party plugins](https://wp2fa.io/features/third-party-plugins-support/?utm_source=wordpress.org&utm_medium=referral&utm_campaign=WSAL&utm_content=plugin+repos+description) such as WooCommerce and other e-commerce & membership plugins,
* [No WordPress dashboard access required for users to set up 2FA](https://wp2fa.io/features/no-wordpress-dashboard-access-required/?utm_source=wordpress.org&utm_medium=referral&utm_campaign=WSAL&utm_content=plugin+repos+description)
* Protection against automated password & dictionary attacks,
* And many other [plugin features](https://wp2fa.io/features/?utm_source=wordpress.org&utm_medium=referral&utm_campaign=WP2fA&utm_content=plugin+repos+description)).

### Extend the functionality of WP 2FA & automate more
<strong>[Upgrade to WP 2FA Premium](https://wp2fa.io/pricing/?utm_source=wordpress.org&utm_medium=referral&utm_campaign=WP2FA&utm_content=plugin+repos+description)</strong> to:

* Add trusted devices - no need for 2FA code each time you log in,
* Whitelabel all the 2FA pages - for a consistent user experience,
* Give the users more 2FA methods to choose from and use,
* Configure different 2FA policies for different user profiles,
* More alternative 2FA backup methods,
* Easily get an overview of users' 2FA setup with the reports,
* And many other features.

Refer to the [features and benefits page](https://wp2fa.io/features/?utm_source=wordpress.org&utm_medium=referral&utm_campaign=WP2FA&utm_content=plugin+repos+description) to learn more about the benefits of upgrading to WP 2FA Premium.

### Free and Premium Support

Support for WP 2FA is free on the WordPress support forums.

Premium world-class support is available via email to all [WP 2FA Premium](https://wp2fa.io/features/?utm_source=wordpress.org&utm_medium=referral&utm_campaign=WP2FA&utm_content=plugin+repos+description) users.

> <strong>Note</strong>: paid customer support is given priority and is provided via one-to-one email and over the phone. [Upgrade to Premium](https://wp2fa.io/pricing/?utm_source=wordpress.org&utm_medium=referral&utm_campaign=WP2FA&utm_content=plugin+repos+description) to benefit from priority support.
>

For any other queries, feedback, or if you simply want to get in touch with us please use our [contact form](https://wp2fa.io/contact/?utm_source=wordpress.org&utm_medium=referral&utm_campaign=WP2FA&utm_content=plugin+repos+description).

### As Featured On:

* [WPBeginner](https://www.wpbeginner.com/plugins/how-to-add-two-factor-authentication-for-wordpress/)
* [WP White Security](https://www.wpwhitesecurity.com/best-two-factor-authentication-plugins-wordpress/)
* [IsitWP](https://www.isitwp.com/best-wordpress-security-authentication-plugins/)
* [WP Astra](https://wpastra.com/two-factor-authentication-wordpress/)
* [MainWP](https://mainwp.com/how-to-use-the-wp-2fa-plugin-on-your-child-sites/)
* [FixRunner](https://www.fixrunner.com/wordpress-two-factor-authentication/)

#### Related Links and Documentation

* [What is Two-factor authentication](https://www.wpwhitesecurity.com/two-factor-authentication-wordpress/?utm_source=wordpress.org&utm_medium=referral&utm_campaign=WP2FA&utm_content=plugin+repos+description)
* [Why you need both 2FA & strong passwords](https://www.wpwhitesecurity.com/two-factor-authentication-strong-passwords-wordpress/?utm_source=wordpress.org&utm_medium=referral&utm_campaign=WP2FA&utm_content=plugin+repos+description)
* [Setting up Google authenticator for WordPress 2FA](https://www.wpwhitesecurity.com/google-authenticator-app-wordpress-2fa/?utm_source=wordpress.org&utm_medium=referral&utm_campaign=WP2FA&utm_content=plugin+repos+description)
* List of [supported 2FA apps](https://wp2fa.io/support/kb/configuring-2fa-apps/)
* [The definitive guide to WordPress Security](https://www.wpwhitesecurity.com/wordpress-security/?utm_source=wordpress.org&utm_medium=referral&utm_campaign=WP2FA&utm_content=plugin+repos+description)
* [Official WP 2FA plugin website](https://wp2fa.io/?utm_source=wordpress.org&utm_medium=referral&utm_campaign=WP2FA&utm_content=plugin+repos+description)

== Installation ==

=== From within WordPress ===

1. Visit 'Plugins > Add New'
1. Search for 'WP 2FA'
1. Install & activate the WP 2FA from your Plugins page.

=== Manually ===

1. Download the plugin from the [WordPress plugins repository](https://wordpress.org/plugins/wp-2fa/)
1. Unzip the zip file and upload the `wp-2fa` folder to the `/wp-content/plugins/` directory
1. Activate the WWP 2FA plugin through the 'Plugins' menu in WordPress

== Screenshots ==

1. The first-time install wizard allows you to setup 2FA on your website and for your user within seconds.
2. The wizards make setting up 2FA very easy, so even non technical users can setup 2FA without requiring help.
3. You can require users to enable 2FA and also give them a grace period to do so.
4. Users can also use one-time codes via email as a two-factor authentication method.
5. You can use policies to require users to instantly set up and use 2FA, so the next time they login they will be prompted with this.
6. It is recommended for all users to also generate backup codes, in case they cannot access the primary device.
7. In the user profile users only have a few 2FA options, so it is not confusing for them and everything is self explanatory.
8. The plugin blocks the accounts of users who are required to have 2FA but fail to enable it within the grace period, so they do not jeopardize the security of your website.

== Changelog ==

= 2.1.0 (2022-01-12) =
	
* **New features**
	* Added a new default user status - User has not logged in yet.

* **Improvements**
	* Update a number of links used in the plugin.
	* Updated the redirects and logic that are triggered after the install wizard (improved UX).
	* Better handling of users without user role.
	
* **Bug fixes**
	* Fixed: User 2FA state is permanentely cached when using Redis object caching.
	* Fixed an edge case in which the admin might be locked out of the plugin's settings during an upgrade.
	* Fixed a PHP warning triggered during login on some websites.

Refer to the complete [plugin changelog](https://wp2fa.io/support/kb/wp-2fa-changelog/) for more detailed information about what was new, improved and fixed in previous version updates of WP 2FA.
