How to use two-factor authentication in WordPress with Clef

This article describes how to configure WordPress to use two-factor authentication with the Clef plugin. The Clef plugin works together with mobile devices to provide two-factor authentication services for WordPress.

Two-factor authentication is more secure than only requiring users to type a password, and helps secure your site against unauthorized access.

Step 1: Install the Clef app on a mobile device

Before you install the WordPress plugin, download and install the Clef app on one of your mobile devices, such as a smartphone or tablet.

Clef currently supports the following operating systems:

• Google Android
• Apple iOS
  The Clef app for iOS requires iOS version 7.0 or later.

After you install the app on your mobile device, follow the prompts to create a Clef login account.

Step 2: Install the Clef plugin in WordPress

After you install the Clef app on your mobile device, you are ready to install the Clef plugin in WordPress. To do this, follow these steps:

1. Log in to your WordPress site as the administrator.
2. In the left-hand pane, click Plugins.
3. Click Add New.
4. In the Search Plugins text box, type clef, and then press Enter.
5. Locate Clef Two-Factor Authentication, and then click Install Now.
6. After WordPress finishes installing the plugin, click Activate Plugin.

Step 3: Configure the Clef plugin in WordPress

To configure the Clef plugin to work with your WordPress site, follow these steps:

1. Log in to your WordPress site as the administrator.
2. In the left-hand pane, click Clef.
3. Click Get Started.
4. Click I already have the app.
5. WordPress displays the Clef wave. On your mobile device, start the Clef app, and then hold the device up to the screen so the two waves can synchronize.
6. After the two waves synchronize, two things happen:
   • The mobile device confirms the login, and displays a timer that shows how much longer the login session remains valid.
     You can change the login timer settings to any duration you choose.
   • In WordPress, an e-mail verification box appears. If you want to change the e-mail verification address, type the new e-mail address and then click the green icon.
     Log in to the e-mail address that you specified for verification, and then click the hyperlink in the message from Clef to verify the e-mail address.
7. Click Complete setup. You can invite additional users to use Clef for logins. When you are done, click Continue and finish setup.

8. You can now log in to WordPress using Clef. Whenever you try to log in to WordPress after a session expires, the WordPress login page shows the Clef wave. Hold your mobile device up to the screen so the two waves can synchronize, and then Clef logs you in automatically.
   

   By default, passwords are disabled for all users who enable Clef. If you are ever locked out of your site for some reason, you can use an override URL to log in to your site without Clef. Clef sends this override URL to the verification e-mail address that you specified. For more information about this feature, please visit http://support.getclef.com/article/11-creating-a-secret-url-where-you-can-log-into-your-wordpress-site-with-a-password.

Disabling Clef for WordPress

If you want to disable Clef logins for WordPress, follow these steps:

1. Log in to your WordPress site as the administrator.
2. In the left-hand pane, click Clef.
3. Under Disable passwords, clear the Disable passwords for Clef users check box, and then click Save Changes.
4. In the left-hand pane, click Plugins, and then click Installed Plugins.
5. Locate Clef, and then click Deactivate. You can now log in to WordPress using only a username and password.

More Information

• For more information about the Clef plugin for WordPress, please visit https://wordpress.org/plugins/wpclef.
• To view the official Clef documentation, please visit http://docs.getclef.com.

Related Articles

• Optimizing WordPress with the L3 Optimized for WordPress plugin

  This article shows how you can quickly and easily optimize your WordPress installation using the L3 Optimized for WordPress plugin.