This guide will help you to enable Two Factor Authentication for all users. Two Factor Authentication, also known as 2FA, two step verification or TFA (as an acronym), is an extra layer of security that requires not only a password and username but also something that only, the user has with them such as a email, 2FA Apps, etc.
Supported Methods
Loginizer Security Supports the following :
- OTP via Email
- OTP via Mobile App
- User Defined Question & Answer
Enabling 2FA
As an Admin you can enable all of them and let the user choose their choice of 2FA.
To enable it, please go to WordPress Admin Panel -> Loginizer Security -> Two Factor Auth.
The following is a screenshot of the settings page
Individual User Settings
Each user will now be able to see the My Security link in the left menu.
They will need to configure their preference and once they do so, they will be asked for the relevant input during their next login.
The following is a screenshot of the My Security page
Force OTP via Email as Default
When Two Factor Authentication each user has to set their preference.
However, as the Admin you can force the OTP via Email as the default.
All users will then get a OTP in their email to login and immediately secure all your WordPress accounts.
Two Factor Auth for User Roles
Loginizer also supports Two Factor Authentication for specific user roles.
You can setup Two Factor Auth for specific or all user roles e.g. Only Administrator(s) and Editor(s) would be allowed to setup 2FA.
Following is the screenshot of the setting for User Roles :
Enforce Two Factor Authentication
Note :- This option will not be available if the Force OTP via Email is enabled.
To Enable enforced Two Factor Authentication, navigate to Two Factor Auth page and select Enforcement Type under Two Factor Authentication Settings.
There are three Enforcement type -
None - If you do not wish to enable enforced setup then choose none.
Strict - Users must setup Two Factor Authentication immediately. They cannot access other pages untill setup is complete. Any attempt to navigate elsewhere will redirect them to the setup page.
Grace Period - This option provide users some time to complete the setup for Two Factor Authentication.
Set the time limit you wish to provide for the users to comple the Two Factor Authentication.
Select the action that should be taken after the grace time expires for that user. There are two actions provided that is given below -
An example Image is shown below for Grace Period setup -
Below is an exaple of the notice that will be shown when the grace period is enabled and has not expired.
