Two‑Factor Authentication (2FA) adds an extra layer of security to your WordPress site. Instead of relying only on a password, users must also provide a second verification method (such as a code sent to their phone or email). On ruachost.com, you can enable 2FA using the Two Factor plugin.
Why Use 2FA?
-
Protects against stolen or weak passwords.
-
Prevents unauthorized access to your WordPress admin.
-
Enhances overall site security.
-
Recommended for all administrator and editor accounts.
Steps to Install and Configure the Two Factor Plugin
-
Log in to WordPress with an administrator account.
-
In the dashboard, go to Plugins → Add New.
-
Search for Two Factor.
-
Click Install Now, then Activate.
-
Go to Users → Profile (or edit a specific user).
-
Scroll down to the Two‑Factor Options section.
-
Select your preferred authentication method:
-
Email codes
-
Time‑based One‑Time Password (TOTP) via apps like Google Authenticator or Authy
-
Backup codes (for emergency access)
-
-
Choose a primary method if multiple are enabled.
-
Click Update User to save settings.
✅ The selected user will now be required to use 2FA when logging in.
Important Notes
-
Always set up backup codes in case you lose access to your primary method.
-
Encourage all administrators and editors to enable 2FA.
-
Test login after enabling to confirm configuration.
-
If you use a caching plugin or CDN, ensure login pages are excluded from caching.
