Firewall & login

Allow users to bypass 2FA

Let an administrator exempt one WordPress user from two-factor authentication using the Bypass 2FA checkbox on the user profile.

Administrators can exempt a single user from 2FA when that person needs a simpler login. Prefer this over turning 2FA off for the whole site.

Steps

  1. Go to Users → All Users.
  2. Open the user you want to change.
  3. Scroll to Two Factor Authentication.
  4. Check Bypass 2FA (“Check this box to allow the user to bypass Two Factor Authentication.”).
  5. Click Update User / Save.

Two Factor Authentication section on a user profile

When Bypass 2FA is checked, that user is not asked for a 2FA code at login. When it is unchecked, they must use 2FA if the feature is enabled for their role (or if they already enrolled).

The same profile section shows whether 2FA is configured and lets admins disable 2FA for that user when needed.

Reset everyone

To clear 2FA for all users at once, see How to reset 2FA.

Still stuck? Get help or contact us.

Larger screenshot

Enlarged image