A step-by-step guide to configure the Two-Factor Authentication plugin

Pre-requisites : Download And Installation

• Download our miniOrange two-factor authentication plugin on your WordPress website.

Getting started with the setup

Let’s see how an administrator can setup 2FA for users. This can be done in two very simple ways:-

1. Setup Wizard
2. Dashboard of the plugin

1. Setup Wizard

The setup wizard appears right after the successful installation and activation of the 2FA plugin for WordPress. The Wizard helps you set up 2FA.

Let’s follow the steps below to Setup Wizard

• Once the plugin is activated, the setup wizard screen appears.
• Click on the Let’s get started! button.

Step 1: The wizard guides you to configure the 2FA setup prompt for users.

• By default, the Prompt users to set up 2FA after first login option is enabled.
  
• When enabled, users will be prompted to configure a 2FA method after their first login. They must select one of the allowed authentication methods and complete the setup process.
• Click the Continue Setup button to proceed to the next step.

Step 2: The wizard guides you to select the user roles for which you want to enable Two-Factor Authentication (2FA).

• By default, the Only for specific roles option is selected.
• Select the required user roles from the available options. In this example, Administrator and Author are selected.


OR

• Select All users to enable 2FA for every user on your website, regardless of their assigned role.
• Enable the Allow administrators to skip 2FA from the login screen if needed checkbox. When enabled, administrators still see the normal second-factor step, along with a link to complete login without 2FA if they choose to use it. Leave this option unchecked to remove the skip option.
• Click the Continue Setup button to proceed to the next step.

Step 3: The wizard guides you to choose how you want to enforce Two-Factor Authentication (2FA) setup for users. You can either require users to set up 2FA immediately or allow them a grace period to complete the setup.

• 1. Select Enforce 2FA immediately to require users to set up 2FA right away, without any grace period.
• 2. Alternatively, the Allow a grace period option gives users additional time to complete their 2FA setup before it is enforced.
• Click All Done to complete the setup wizard.




The wizard confirms that the setup is complete and that Two-Factor Authentication (2FA) has been successfully configured.

• Click Go to plugin dashboard to open the plugin dashboard and manage your 2FA settings.

2. 2FA Plugin configuration with dashboard

• Click Skip Setup Wizard to exit the wizard and configure the plugin settings manually.




After skipping the setup wizard, you can configure 2FA settings manually from the plugin dashboard. The Access Rules section lets you define who must use 2FA.

• Click 2FA Configurations from the left menu. The Access Rules tab opens by default.
• Enable the Enable 2FA toggle to turn on Two-Factor Authentication for your website.
• Select the user roles for which you want to enable 2FA. You can use the Role Filter search box to find a specific role. In this example, Select All Roles is selected, which enables 2FA for all roles.
• Enable the Allow administrators to skip 2FA from the login screen if needed checkbox. When enabled, administrators still complete the usual 2FA step, but the login screen displays a recovery link to finish login without 2FA if they have trouble.
• Click Save Settings to save your changes.

3. Configure 2FA Methods

After setting up the plugin, simply pick any 2FA method and configure it in a few easy steps!

• Authenticator Apps
• OTP Over SMS
• OTP Over Email
• Email Verification
• Security Questions
• OTP Over Telegram
• Passkey
• miniOrange Push Notification

Additional Resources

• miniOrange 2-Factor Authentication
• Configure 2FA Settings
• Remember Device to Bypass 2FA
• Remember IP to Bypass 2FA
• Setup 2FA on any Login Form
• Passwordless Login