Having good security on your website is essential to avoid serious issues like hacking or losing access to your website.
We highly recommend using 2-Factor Authentication on your website login to add an extra layer of security to your site.
Wordfence
Our preferred security plugin is Wordfence. If we build or maintain your website, generally this is the plugin we use and we make it mandatory for all users. Because of this, if you don’t activate your 2FA within the grace period, you will be locked out from the site. To avoid this, follow these instructions:
How to activate 2FA on Wordfence
1. Login to your website
2. Navigate to Your Profile in the left-hand WordPress menu
3. Scroll down your profile page to the Wordfence 2FA section – click Set Up or Activate (or similar)
4. When the Two-Factor Authentication page launches, scan and save the QR code with your preferred authenticator app (eg. Google Authenticator).
5. Then, Download the recovery codes and save these somewhere secure.
6. Open up your authenticator app, and add in the code and click Activate.
7. Your 2FA is now activated! You can double-check this by going to your Profile and checking that it says Active.
