Brian Haas

Hi @kloproterra,

You’ve identified a genuine, well-known limitation of this plugin. The Two Factor plugin currently works on a voluntary, per-user basis — each user must opt in to configure a second factor themselves. There is no built-in way for a site administrator to require that users in certain roles have 2FA configured before they can access the site. This gap is consistently the most-requested missing feature in the plugin.

There is an open GitHub issue (#846) tracking role-based enforcement as a planned feature, but it isn’t in the plugin yet.

Sorry the plugin doesn’t meet your use case in its current state — hopefully the enforcement feature lands in a future release.

Hey @bowerwebsolutions

The email code validation screen showing the WordPress logo is actually not specific to the Two Factor plugin — this is WordPress core behavior. WordPress uses the same login page styling (with the WP logo) for all login-related screens by default, including the 2FA validation step.

To customize it with your own logo and branding, you can use the built-in login_enqueue_scripts and login_headerurl hooks that WordPress provides natively — no plugin needed. If you want a more complete solution with full theme branding, there are a lot plugins in the repository. See here: https://ww.wp.xz.cn/plugins/search/login+page+customizer/

Since the 2FA validation screen reuses WordPress’s standard login page template, this customization will apply to it automatically — no special handling for the Two Factor plugin is required.

Thank you so much for the kind review @aelbo! 🙏

Hey @mjezegou35

Thanks for reaching out! Our support policy covers the current and previous major versions of WordPress.

With WordPress 6.9 being the latest release, we actively support 6.8 and 6.9. Since you’re on 6.6.2, that version falls outside our current support window, which is why we’re unable to guarantee compatibility or troubleshoot activation issues on that version.

We’d strongly recommend upgrading WordPress to 6.9 — the current plugin release is fully compatible and multisite network activation will work as expected.

If upgrading isn’t an option right now, you can install an older release of the Two Factor plugin as a workaround. We’d suggest version 0.14.2, which is the last release before the minimum WordPress requirement was raised to 6.8.

You can download it here:
https://github.com/WordPress/two-factor/releases/tag/0.14.2

Please note: we don’t recommend staying on an older plugin version long-term, as it won’t receive bug fixes or security updates. This should only be a temporary solution while you plan your WordPress upgrade.

Let us know if you have any other questions!

Hi @yeosunhui

I understand you no longer have access to your Authenticator app and didn’t activate recovery codes. Now you want to reset Two Factor authentication . Here are your options:

If you have access to the WordPress admin through another admin account, you can manage the user’s 2FA settings directly from Users → [username] → Edit. This allows you to reset the TOTP and let the user set it up again.

If you dont have another admin access let me know!

Hallo / Hey @thomascloer

Thank you very much for raising this issue. I’ve opened a GitHub issue to track this on the development side: https://github.com/WordPress/two-factor/issues/872

Hope we can solve this issue fast! 🙂

Greets
Brian

Hey @johan-stam

Thanks for the report — sorry to hear it stopped working across multiple sites. To help narrow this down, could you share a few more details?

1. What 2FA method(s) are you using? (Email, TOTP/authenticator app, backup codes, etc.)
2. What exactly happens when you try to log in? Do you reach the 2FA screen at all, or does it fail before that? Any error messages?
3. Which SMTP plugin are you using? Even without logs, knowing the plugin may help identify a compatibility issue.
4. Are all three sites on the same host or different hosting environments?
5. Can you temporarily enable WordPress debug logging (WP_DEBUG and WP_DEBUG_LOG in wp-config.php) and check /wp-content/debug.log for any errors during a login attempt?

Any details you can share will help a lot!

Thanks!

Hi @yorlinqnl,

Thank you very much for taking the time to share a review! 🙏