Two-factor authentication (2FA) is a security method that requires two different ways of proving your identity. For example paying with a credit card not only requires the card, but also a PIN, a signature, or an ID. Two-factor authentication is rapidly gaining importance for logging into online accounts.
Google, Microsoft, Facebook, PayPal, and many online services have already implemented an optional two layered log in process on their sites.
If you have a WordPress blog, you too can provide two-factor authentication using Google Authenticator.
Add Two-factor Authentication to WordPress blog
To enable two-factor authentication for a WordPress blog do the following:
- Install and activate the Google Authenticator plugin
- Open a user profile and enter a description that you see in the Google Authenticator app
- This creates a QR code that you need to scan with the app in your phone. If you can’t do that you can alternatively use the secret code on the page and enter it in the app.
- You can download the app by following links on this Google Support page.
- Press the update profile button to save the settings
When you now try to log in with the user account, you are asked to enter the username, password and the Google Authenticator code that you can generate on your smartphone.
The Google Authenticator plugin for WordPress is a great app for companies and webmasters who want to improve their site’s login security. This renders brute force and dictionary attacks, as well as other forms of guessing or stealing account credentials useless.