Here’s the settings I have now after trying this. I think I screwed up, but it won’t let me in at the login page.
This is the settings tab:
Login Security Settings
Learn more about Login Security
User Summary
Manage Users
Role Total Users 2FA Active 2FA Inactive
Administrator 2 1 1 (View users)
Total 2 1 1
Settings
2FA Roles
Administrator
Required
Editor
Disabled
Author
Disabled
Contributor
Disabled
Subscriber
Disabled
Grace Period
10
days
For roles that require 2FA, users will have this many days to set up 2FA. Failure to set up 2FA during this period will result in the user losing account access. This grace period will apply to new users from the time of account creation. For existing users, this grace period will apply relative to the time at which the requirement is implemented. This grace period will not automatically apply to admins and must be manually enabled for each admin user.
Administrator
Send an email to users with the selected role to notify them of the grace period for enabling 2FA.
Allow remembering device for 30 days
If enabled, users with 2FA enabled may choose to be prompted for a code only once every 30 days per device.
Require 2FA for XML-RPC call authentication
If enabled, XML-RPC calls that require authentication will also require a valid 2FA code to be appended to the password. You must choose the "Skipped" option if you use the WordPress app, the Jetpack plugin, or other services that require XML-RPC.
SKIPPED
REQUIRED
Disable XML-RPC authentication
If disabled, XML-RPC requests that attempt authentication will be rejected.
Allowlisted IP addresses that bypass 2FA
[I put my IP in here.]
Allowlisted IPs must be placed on separate lines. You can specify ranges using the following formats: 127.0.0.1/24, 127.0.0.[1-100], or 127.0.0.1-127.0.1.100.
This is the 2FA tab now:
Two-Factor Authentication
Learn more about Two-Factor Authentication
Two-Factor Authentication, or 2FA, significantly improves login security for your website. Wordfence 2FA works with a number of TOTP-based apps like Google Authenticator, FreeOTP, and Authy. For a full list of tested TOTP-based apps, click here.
Editing User: admin (you)
1. Scan Code or Enter Key
Scan the code below with your authenticator app to add this account. Some authenticator apps also allow you to type in the text version instead.
YGKCCOLAQOLUSWNG3T7YXFT4X2WZF76G
2. Enter Code from Authenticator App
Download Recovery Codes Optional
Use one of these 5 codes to log in if you lose access to your authenticator device. Codes are 16 characters long plus optional spaces. Each one may be used only once.
ded0 8167 064c 0065
38b1 3a47 7974 a16b
8088 2ac0 aec8 95cd
f635 e243 69e4 ce56
928a ead7 0862 5eeb
Enter the code from your authenticator app below to verify and activate two-factor authentication for this account.
123456
For help on setting up an app, visit our help article.
Grace Period
Two-factor authentication will be required for your account beginning September 25, 2021 9:50 PM
Server Time: 2021-09-15 21:50:05 UTC (2021-09-15 21:50:05 UTC+0)
Browser Time: Wed, 15 Sep 2021 21:50:06 GMT (Wed Sep 15 2021 17:50:06 GMT-0400 (Eastern Daylight Time))
Corrected Time (NTP): 2021-09-15 21:50:05 UTC (2021-09-15 21:50:05 UTC+0)
Detected IP: 66.61.91.36 (allowlisted)
