Two-factor authentication (2FA) adds an extra layer of security to your WordPress account by requiring your password and a second authentication method when you sign in. FareHarbor requires 2FA to help protect your site and customer data from unauthorized access.
Each WordPress user must set up 2FA on their own account. Administrators cannot set up 2FA for another user.
What happens when 2FA is enforced
After FareHarbor enables 2FA enforcement on your site, a notice appears the next time you sign in to your WordPress dashboard:
Your account requires two-factor authentication to be enabled.
Your account access remains limited until you complete setup. Select Enable Two-factor Authentication to open your Profile settings.
Set up two-factor authentication
FareHarbor offers three methods for two-factor authentication, but recommends using an authenticator app when possible.
Choose the 2FA method you want to use, then follow the corresponding instructions. FareHarbor recommends an authenticator app.
| Method | How it works | Considerations |
| Authenticator app (recommended) | Generates authentication codes on your device. Scan the QR code on your Profile page or enter the shared secret key manually. | Most secure option and works offline. Download Google Authenticator for iOS or Android. |
| Sends an authentication code to the email address associated with your WordPress profile. | Easy to use, but less secure because email accounts can be compromised. | |
| SMS | Sends an authentication code to the phone number associated with your WordPress profile. | Easy to use, but access can be affected if your phone is lost or your phone number changes. |
Recommended: Set up 2FA with an authenticator app
FareHarbor recommends using an authenticator app because it is the most secure 2FA option. Authentication codes are generated on your device and expire quickly.
If you use Google Authenticator, download it from the App Store for iOS devices or Google Play for Android devices.
To set up 2FA with an authenticator app:
- Sign in to your WordPress dashboard with your username and password.
- In the dashboard notice, select Enable Two-factor Authentication.
- On the Profile page, scroll to Two-Factor Options.
- Select Enable Authenticator App.
- Open your authenticator app on your phone or computer.
- Scan the QR code on the Profile page, or enter the shared secret key manually in your app.
- Enter the six-digit Authentication Code from your app.
- Select Verify.
- Select Update Profile.
Set up 2FA with email
Email-based 2FA sends authentication codes to the email address associated with your WordPress profile. Because email accounts can be compromised, this method is less secure than an authenticator app.
To set up 2FA with email:
- On the Profile page, under Two-Factor Options, select Enable Email.
- Select Update Profile.
Set up 2FA with SMS
SMS-based 2FA sends an authentication code to the phone number associated with your WordPress profile.
To set up 2FA with SMS:
- On the Profile page, under Two-Factor Options, select Enable SMS.
- Enter your phone number, including your country calling code, such as +1 for the United States.
- Select Submit, then follow the prompts to verify your number.
- Select Update Profile.
Choose a primary 2FA method
If you enable more than one method, choose which method WordPress uses first when you sign in.
To choose a primary 2FA method:
- Under Two-Factor Options, use the Primary Method dropdown to select a method.
- Select Update Profile.
Sign in with two-factor authentication
After 2FA is enabled, you must enter your password and an authentication code each time you sign in.
To sign in with 2FA:
- Enter your username or email address and password, then select Log In.
- Enter the Authentication Code from your authenticator app or the code sent by email or SMS.
- Select Verify.
FAQs & common issues
Does 2FA affect my FareHarbor booking Dashboard login?
No. This requirement applies only to your FareHarbor Sites WordPress dashboard, not the FareHarbor booking Dashboard used for reservations and operations.
I lost access to my authenticator app. What should I do?
Contact FareHarbor Support through the Contact Form for help restoring access to your WordPress account.
I am using SMS, but I am not receiving codes.
Check your phone signal and make sure incoming messages are not blocked. SMS delivery may take some time. If the issue continues, contact FareHarbor Support through the Contact Form.
I cannot set up my authenticator app.
Update the app, restart your device, and try scanning the QR code again. If needed, log out and sign back in to restart enrollment.
Learn more about WordPress VIP security.