WordPress Security & Maintenance

DataFirefly 2FA Fortress

Professional two-factor authentication for WordPress and WooCommerce

Protect the back office and customer accounts with per-role 2FA: TOTP, email, backup codes and a grace period.

TOTP WooCommerce HPOS Multisite Multilingual
  • 30-day refund
  • 12 months updates
  • 24h support
www.datafirefly.com/en/
DataFirefly 2FA Fortress Module Wordpress Woocommerce
v1.0.0 · updated 2026-05-29
What it does

The short version.

01

Back office AND customers

Protect administrator accounts and WooCommerce customer accounts with per-role enforcement.

02

Configurable grace period

Give your teams a configurable window to enable mandatory 2FA before lockout.

03

Three methods

Authenticator app (TOTP), email code and single-use backup codes.

04

Encrypted secrets

TOTP secrets are stored encrypted with AES-256-GCM, outside WordPress salt keys.

The long version

Everything you'd want to know before you install.

A detailed look at how DataFirefly 2FA Fortress works, why we built it the way we did, and the thinking behind the features above.

§ 01

2FA that covers the whole site

Most modules only protect the admin area. DataFirefly 2FA Fortress secures both the back-office login and WooCommerce customer login, with the same proven methods and centralised configuration.

§ 02

Per-role enforcement and grace period

For each role (administrator, shop manager, customer, etc.) decide whether 2FA is disabled, offered or required. When mandatory, a grace period in days gives users time to set it up; afterwards, activation is required at login.

§ 03

Built for WooCommerce customers

Your customers enable two-factor authentication themselves from the Security tab of their account. You can also make it mandatory for the customer role. The module declares HPOS and Cart/Checkout Blocks compatibility.

§ 04

Security and traceability

Brute-force lockout, a security log of logins and sensitive events, new-device login notifications, admin reset and AES-256-GCM encryption of TOTP secrets.