2FA methods supported by WordPress.com
Adding two-factor authentication is one of the most effective ways to protect your WordPress.com account. With TOTP support, you can generate WordPress.com verification codes directly in the Authenticator App.
SMS
WordPress.com can send a one-time verification code to your phone via text message.
Authenticator app (TOTP)
WordPress.com lets you use time-based one-time passwords, so you can generate verification codes in an authenticator app on your device — no network or SMS needed.
Security key (U2F)
WordPress.com works with hardware security keys using the U2F/FIDO standard.
WordPress.com 2FA — Frequently asked questions
Does WordPress.com support an authenticator app?
Yes. WordPress.com supports time-based one-time passwords (TOTP), so you can add it to the Authenticator App and generate verification codes right on your device.
Which two-factor authentication methods does WordPress.com support?
WordPress.com currently supports: SMS, Authenticator app (TOTP), Security key (U2F).
Is it free to generate WordPress.com codes with the Authenticator App?
Yes. The Authenticator App is free to download, and generating WordPress.com verification codes does not require an account or sign-up.
This page is for educational purposes only. We are not affiliated with or endorsed by WordPress.com. All trademarks and product names are the property of their respective owners and are used solely for identification.