2FA & Login Settings
Configure two-factor authentication and SMS-based login for WordPress.
Available on:
Configure two-factor authentication (2FA) and SMS-based login features to enhance your WordPress site security.
TIP
Navigate to SMS → Settings → 2FA & Login to configure these settings.
Login With SMS
Allow users to authenticate using verification codes sent via SMS instead of passwords.
Settings
| Setting | Description |
|---|---|
| Status | Enable/disable SMS login |
| Message Body | Customize the verification SMS |
| User Account Creation | Auto-create accounts for new SMS logins |
Message Variables
| Variable | Description |
|---|---|
%code% | Verification code |
%user_name% | Username |
%full_name% | User’s full name |
%site_name% | Website name |
%site_url% | Website URL |
Example Message
Your login code for %site_name% is: %code%
Two-Factor Authentication
Add an extra security layer by requiring SMS verification after password entry.
Settings
| Setting | Description |
|---|---|
| Status | Enable/disable 2FA |
| Authentication Policy | Optional or Mandatory |
Authentication Policy
| Policy | Description |
|---|---|
| Optional | Users can enable/disable 2FA in their profile |
| Mandatory | All users must use 2FA, no opt-out |
Message Variables
| Variable | Description |
|---|---|
%otp% | One-time password |
%user_name% | Username |
%first_name% | First name |
%last_name% | Last name |
Example Message
Your %site_name% verification code is: %otp%
Related
- WooCommerce 2FA - 2FA for WooCommerce
- OTP Rate Limiter - Limit OTP request frequency
- wp_sms_otp_length - Customize OTP length
Last updated: December 28, 2025