Email-based 2FA
Code goes to the administrator email. No authenticator app or phone number.
Free feature
Two-factor loginwithout a paid add-on
Protect administrator accounts with a second step after the password. A 6-digit code goes to the account email and expires after 10 minutes.
What it does
Two-factor login
Bearmor email 2FA applies to administrator accounts with manage_options. An administrator can be excluded when necessary, and a trusted device can be remembered for 30 days.
Administrator accounts
Designed for users with administrator capability, with optional exclusions where needed.
Remember device
Mark your laptop as trusted and skip the code for 30 days. New devices still need the code.
Why it is there
What happens without it
Passwords get leaked all the time. Someone uses the same password on a sketchy site, that site gets breached, now attackers have a list to try on your WordPress login.
Password reuse
One breach somewhere else and suddenly your site is vulnerable too.
Phishing pages
Fake login pages that look exactly like yours. User enters their password, attacker captures it.
Sold credential dumps
A few bucks buys millions of username and password combos to try.
Administrator access
An administrator password opens the whole dashboard. The email code adds another barrier.
A stolen administrator password is not enough without access to the email code. Bearmor keeps this protection in the free plugin.
This stays free.
Use Bearmor Security on your WordPress
Install the free plugin from WordPress.org. Every feature is free, with no paid plan to unlock.