Most of the WordPress and WooCommerce sites that I work on don’t yet have Two-Factor Authentication (2FA) enabled. I believe the delay in implementing has largely to do with the inconvenience of 2FA. However, this inconvenience has become mandatory for most online services these days, and busy eCommerce stores are no exception to that rule.
There’s multiple ways to implement 2FA, but the simplest would be the official Two-Factor plugin by WordPress themselves. The methods that this plugin supports are:
- Authenticator App codes – This is the most popular
- Backup codes
- Email codes – This is the easiest to start out with, and easiest to remotely enable
I’ve started enabling 2FA for clients that host with me, in order to protect their hosting control panels.
