2FA doesn’t activate properly / doesn’t stay active

  • Resolved typofi

    (@typofi)


    4 years, 2 months ago

    Hi, I love the 2FA login feature. I’ve managed to set it up perfectly to two websites. But I’m having trouble with a third one. Everything seems to go the way it’s supposed to but for some reason the 2FA is not properly activated or doesn’t stay active on my user.

    Here is what happens:

    1. Logged in as administrator.
    2. I go to Wordfence Login Security > Two-Factor Authentication
    3. Using Google Authenticator I scan the QR code. The account appears now on my phone and it gives me the code.
    4. I enter it on screen to Wordfence and click Activate.
    5. I get a screen saying “Wordfence 2FA Active / Wordfence two-factor authentication is currently active on your account. You may deactivate it by clicking the button below.”
    6. But when I move out of that screen and then go to WP Users listing or back to Wordfence it shows 2FA Status as Inactive. Or going back to Wordfence Login Security > Two-Factor Authentication, it just gives me once again the QR code.

    Any idea what is happening here and how do I solve it? Is there somewhere something I can reset and try again? I’ve tried several times deleting the account on Google Authenticator and redoing it but it never activates properly.

    EDIT: I also tried creating another user account just for testing. This time with as Editor and made sure 2FA is enabled for Editors in the settings. The same thing happens. It claims the 2FA is activated but then once I move away from the screen it’s not.

    • This topic was modified 4 years, 2 months ago by typofi.
    • This topic was modified 4 years, 2 months ago by typofi.
Viewing 3 replies - 1 through 3 (of 3 total)
  • Plugin Support WFAdam

    (@wfadam)

    Hello @typofi and thanks for reaching out to us!

    Let’s try first to use a different browser to enable 2FA, as there could be an extension or cache causing the issue.

    If that didn’t help, I’ve seen on some sites that trying a different authenticator works.

    Also, try navigating to Tools > Diagnostics > Time, be sure the Wordfence Network and server time are within seconds of each other.

    If you’re still having issues after those steps, I would try to check for a plugin/theme issue. To do this, you can disable your other plugins on the site one at a time and test, or alternatively, use the Health Check & Troubleshooting plugin (https://www.ads-software.com/plugins/health-check/). That is a plugin you will need to install from the Plugins > Add New area.

    If you use the Health Check & Troubleshooting plugin, you can troubleshoot the site with just Wordfence enabled and the changes are only seen in the back end and not to visitors.
    After downloading that, in the plugins section under Health Check & Troubleshooting you’ll see “Troubleshoot”. Click that and you’ll be in Troubleshooting Mode, which you will see a Troubleshooting Mode button in the top admin bar, which lets you know you are actively troubleshooting. (Note about that: Clicking Disable Troubleshooting mode in that area will turn off troubleshooting when you’re done testing for the conflict at the end.)

    With Troubleshooting mode active, in the plugins section, you will see Enable while troubleshooting under all your plugins. Click Enable while troubleshooting under Wordfence, and your site on the backend will act as only Wordfence is enabled. Keep in mind, this doesn’t always rule out plugin conflicts, however, it can a good portion of the time.

    Once you enable the troubleshooting with Wordfence, go over to the Wordfence plugin and check to see if the issues continue.

    If they do continue, then we need to look elsewhere.

    If things are working now, then you can go back to the plugins section and start from the top and click Enable while Troubleshooting under the plugins, one at a time. In between enabling multiple plugins, be sure to go back and test Wordfence is still functioning. That will narrow it down.

    Also, from the top on the admin bar where we see Troubleshooting Mode. Hover over that with your mouse and check to see if a default theme is selected (if you have one installed). It is also good to rule out the theme. Keep in mind, these changes will not change the way the site looks to visitors.

    We always recommend making a site backup prior to installing new plugins, in case there would be an issue.

    Let me know if this helps or what you find!

    Thanks!

    Thread Starter typofi

    (@typofi)

    Thanks for the thorough reply! I’ve tried a different browser and now also with a different authenticator. So far no change. Wordfence and server time are aligned. But I’ll keep digging further following your advice.

    Plugin Support WFAdam

    (@wfadam)

    I would think its a plugin/theme conflict then. Follow the steps above to narrow down the issues.

    Let me know what you find and if this was helpful!

    Thanks again for your support!

Viewing 3 replies - 1 through 3 (of 3 total)
  • The topic ‘2FA doesn’t activate properly / doesn’t stay active’ is closed to new replies.

Tags