Secure 2FA

After activating the plugin, a “Secure 2FA” menu item will appear in your WordPress admin dashboard’s sidebar.

Yes, you can configure enforce 2FA settings to exclude certain roles from 2FA enforcement.

There is no settings page available for excluding users from forced two-factor authentication. However, you can exclude specific users by adding the following filter to the “functions.php” file of your active theme:

<?php add_filter('secure_tfa_enforce_tfa_excluded_users', function() { // User ID(s) you want to exclude return [1]; });

If a user doesn’t receive their OTP, they should:

1. 01Wait a few minutes and try again.
2. 02Use their backup recovery codes to regain access if OTP delivery fails.
3. 03If the issue persists, the site administrator can assist with troubleshooting by checking the activity logs for the user or deactivate 2FA for that user.
4. 04If you are the site administrator, check the Handling and Troubleshooting Issues below for further assistance.

If you’re facing issues logging in or not receiving OTPs due to 2FA method issue or email or API problems, and you need to regain access to your WordPress account, you can configure the following constants in the config.php file to help resolve these issues:

define( 'SECURE_TFA_DISABLE_PLUGIN', true ) ;

This constant disables the 2FA login process and temporarily deactivates its functionality, although the plugin remains active.

define( 'SECURE_TFA_DISABLE_ENFORCE_TFA', true ) ;

This constant disables the enforced 2FA requirement for users who have not yet enabled it.