The Two Factor plugin for self-hosted WordPress sites is an excellent way of improving the security of your site. There were plans to move this into Core last year but this hasn’t happened – to be honest, I suspect it may be due to how unfinished it currently is, in particular it’s not very user-friendly.
One such “unfriendly” feature is that once you set up a third party authenticator app (which you do via a QR code) there’s no option to do it again – switch phones or apps and there’s no way to set this back up again.
(more…)




