Enforce 2FA for editors??

  • Resolved the_lar

    (@the_lar)


    5 years, 9 months ago

    Hi,

    I have previously used a seperate plugin for 2FA called Google Authenticator but would like to switch to Wordfence for this… however I’m not sure whether Wordfence allows me to enforce the use of 2FA down to editors… this is a must because given the choice, I know that users are lazy and will not set it up unless forced to do so. I can only seee an option to ‘ Require 2FA for all administrators
    ‘ NOT editors.

    Many thanks
    Kevin

Viewing 10 replies - 16 through 25 (of 25 total)
  • Matt

    (@mugwumpman)

    Hi, just to add to the others requesting this functionality. (Required 2FA for other user roles than just administrator.) Is there any update, reasoning behind it, or is there a proposed-feature page we can upvote? +1

    I came here because a recent WF blog article emphasises the need to enforce user accounts security because “a large number of recently discovered vulnerabilities require subscriber-level privileges”, so I thought, why not enable 2fa for everyone?

    Yeah, why not? … ??

    Does anyone have experiencing with using another 2fa plugin alongside Wordfence? I’m a huge Wordfence fan and am reluctant to use another login security plugin but not seeing any response on this thread from Wordfence since Jan 2019 so assuming the ability to enforce for all roles or users, either by an update to Wordfence or via a filter, isn’t going to happen.

    • This reply was modified 3 years, 10 months ago by stevenjc.

    If they can do it: https://www.wpwhitesecurity.com/wordpress-plugins/wp-2fa/

    Surely you can WordFence??

    Plugin Support wfscott

    (@wfscott)

    We are currently testing the 2FA requirement for non-admin roles and it will be coming in one of the next few releases, barring any setbacks with testing.

    @wfscott — awesome! Very happy to hear this.

    thanks for the update @wfscott, appreciated ??

    Glad to hear it’s on the way. Until I saw this thread, I didn’t quite appreciate that “Enable” didn’t mean “Require.”

    In case anyone missed it like I did (it’s not so easy to be notified of revisions for new versions unless you haunt this forum, at least that I know of), 7.5.5 added the option for requirement on any role.

    Thanks @bjf2000 (and Wordfence team), did see that and it looks to work a treat.

Viewing 10 replies - 16 through 25 (of 25 total)
  • The topic ‘Enforce 2FA for editors??’ is closed to new replies.

Tags