google two factor authentication backup codes

Google two factor authentication backup codes how to#
Google two factor authentication backup codes generator#
Google two factor authentication backup codes verification#
Google two factor authentication backup codes download#
Google two factor authentication backup codes free#

If you use two-factor verification, an intruder would need to get both the unique password you came up with, and the gadget, which produces the verification codes, to break into your account. In the contemporary world, where database leaks are a standing affair, two-step authentication is not an option, it is, in fact, a must.

Thank you very much for your help and your patience, and I apologize for the fact that it was one of my own leftover plugins that proved to be the culprit.Our regular readers know that we strongly recommend applying two-step verification wherever it’s possible. When I deactivated the Stop Spammers plugin, the Wordfence 2FA login authentication worked as intended. A legacy plugin - Stop Spammers Version 2021.14 - appears to have been interfering in the Wordfence login security 2FA process.

The good news is, I figured out what was going wrong. The same login validation error occurred with the new account, despite following all the steps exactly as instructed.

Google two factor authentication backup codes generator#

I then created a new test admin account, followed the steps to set up its 2FA - scanned the QR code with the iPhone Google Authenticator app to create a unique code generator for that new account, downloaded the new recovery codes, used the code from the Google Authenticator to activate 2FA (that always works), and logged out to test the new account. That enabled me to log in and temporarily deactivate Wordfence’s 2FA feature. Using FTP, I was able to follow the steps to temporarily disable Wordfence. If it doesn’t, respond here and let me know. If the test account works, try it again with your account. For instance if your password is and the code is 123 456, enter 123456 in the password field. If the screen refreshes and you see the username and password field again, try logging in like this:Įnter your username and then for the password field enter your password, a space, and the code. When the screen refreshes it should ask for a 2FA code. Then try logging in, making sure to follow these steps :Įnter your username and password on the site like normal. Create a test account and enable 2FA (you can use the same phone) and activate it. Now that you’re back in you can figure out what happened.

Google two factor authentication backup codes download#

Go to your user profile and add 2FA back to your account, making sure to download the backup codes in case of problems in the future.

Once you have logged in to your WordPress admin you can name the folder back to wordfence again.

This will deactivate Wordfence and allow you to login without the 2FA code.

Look inside the /wp-content/plugins/ directory and rename the wordfence directory to wordfence.bak.

Please use FTP/SFTP - or any file manager your web host provides via their administration panel.

If you haven’t added your site to Wordfence Central follow these steps. You should now be able to login to your site with just a username and password.

Scroll back to the top of the screen and save the changes.

NOTE : You can get your public facing IP by clicking here.

In the section that says “Whitelisted IP addresses that bypass 2FA” add your public facing IP address.Scroll down to the Login Security Options section and expand it by clicking the small black arrow to the right.Click the gear icon at the end of the row that the site you need to access is on.Login to and look for the Configuration tab.

Google two factor authentication backup codes free#

The first way is if you have added the site in Wordfence Central (a free site management tool in your account on ). If you have lost or replaced your old phone and can no longer access your site(s), and you have misplaced the 2FA backup codes, there are 2 ways to get back into the site.

Google two factor authentication backup codes how to#

I’m happy to provide you instructions on how to get back in. I followed the steps as instructed I entered the codes as directed. I am now effectively locked out of my site, and have no way back in. I got the same error: “VALIDATION FAILED: The 2FA code could not be validated. Please try logging in again.”Īfter three failed attempts at using Authenticator code, I tried my first recovery code. I opened the Google Authenticator app, made sure I was looking at the Wordfence authentication code, and entered it as shown.Įvery time, it produces the error “VALIDATION FAILED: The 2FA code could not be validated. I entered my login and password correctly, and then it asked me for the 2FA code. I downloaded my recovery codes, and then I logged out of my site to test the new 2FA system. It added a Wordfence entry on my Google Authenticator iPhone app. Tonight I activated the Two-Factor Authentication feature in the Login Security section, using the scanned QR code it displayed on the plugin’s Login Security page on my site. I recently installed the Wordfence plugin on my website.