Two-Factor Authentication

Add a second authentication step using email OTP, authenticator apps, SMS, or backup codes.

2 min read

Enable authenticator app 2FA for chosen roles, pick TOTP or HOTP, decide whether XML-RPC needs 2FA, and set up an app by QR code or private key.

4 min read

Turn on email one-time codes for chosen roles, set up the method from a user profile, and test the login before your users rely on it.

2 min read

Send 6-digit login codes by SMS through Twilio: choose roles, enter your Account SID, token and sender, and check sender ID rules by country.

3 min read

Enable single-use 2FA backup codes for chosen roles, track how many users hold codes or are running low, and see how often codes are used.

2 min read

Turn on trusted devices, set trust duration and a per-user device limit, enable new-device emails, and revoke devices from the site-wide list.

2 min read

Check which of your devices can skip the 2FA step, when each one was last used and expires, and revoke any device you do not recognize.

2 min read

See who has 2FA set up and which method they use, track active sessions and devices, and revoke or clean up sessions across the site.

2 min read

Record every 2FA event, review success and failure stats, filter logs by event type or date, export them to CSV or JSON, and delete old logs.

4 min read