Enable two-factor authentication

[rifathasan]

If you’ve followed the steps in the previous section, you have a strong password. But that doesn’t change the fact that the only thing standing between your site and a hacker is your password. Two-factor authentication is an extra layer of security for logging into your site. Typically, a site requires a username and password to skype database log in, and the username is often your email address . This means that if an attacker knows your email address, they only need to guess one authentication factor — your password — to gain access . Adding another authentication factor greatly increases WordPress security , and it’s easy to do. You can install a plugin to do it, so you don’t have to mess around with code. Here are a few free plugins that will let you enable two-factor authentication on your site:

WP2FA​
Google Authenticator
WordPress 2-Step Verification
The free version of Wordfence also has this feature, as does iThemes Security. However, we don’t recommend using iThemes for anything other than two-factor authentication for a number of reasons.