Two-factor authentication (2FA) is one of the best ways to secure account access. It presents an extra obstacle, another layer of complexity to unauthorized account access.


Shield Security has integrated easy-to-use two-factor authentication (2FA) by email. You have the ability to enforce email-2FA for your users, or to allow any user to enable/disable it for their account.

How to enable/disable email-2FA for your user account

Before you can perform the steps outlined here, you must ensure that email-2FA system for your WordPress site is enabled.


Once the system has been enabled, you'll need to turn on 'Enable Email Authentication' option and choose user roles you want to allow using this option. Once you've done this, that particular user role will have the ability to enable or disable email-2FA for their user account.


Example


We'd like to allow our site subscribers to decide whether they want to use email-2FA or not.


The first step we need to do is to turn on 'Enable Email Authentication' option and then uncheck the 'Subscribers' user role from the 'Enforce - Email Authentication' list:     

Important: If you leave 'Subscribers' user role selected, they'll be enforced for email-2A. This means that they'll not have the ability to decide whether they want to use it for their user account or not.


Once you have this set, your site subscribers can go to their profile page and enable/disable email-2FA for their user account by checking/unchecking the email-2FA checkbox:

If they want to use email-2FA for their user account, they'll need to check the 'Email Authentication' checkbox from their profile and click to save. 


Next time they try to login, they'll be presented with the OTP window and prompted to verify their identity with the email-2FA code:

If they don't want to use email-2FA for their user account, they can leave 'Email Authentication' checkbox unchecked (see the screenshot above).