2FA shortcode – Let users manage 2FA from the front-end

The new [wph-2fa-user-settings] 2fa shortcode brings WP Hide’s powerful two-factor authentication controls to your site’s front end. Place the shortcode on any Page, Post or shortcode-capable custom post type to let users enable, test and customize their personal 2FA preferences without needing admin dashboard access. This is ideal for membership sites, client portals, or anyone who must manage access from a public-facing area.

Two-factor authentication significantly reduces account takeover risk by requiring a second verification factor in addition to a password. The 2fa shortcode brings that protection to the front end, solving common problems: users who can’t access wp-admin, multisite or multi-shop front-ends, or sites with locked dashboards can now set up or manage 2FA where they already work — on a regular page.

What users can do (typical capabilities)

When added to a page, the 2fa shortcode presents an intuitive interface where users can:

• Configure the 2FA feature for their account.
• Connect an authenticator app using QR code / TOTP setup.
• View or regenerate recovery/backup codes.
• Choose preferred 2FA methods (where supported).

The 2fa shortcode ships with a lightweight, skwq-friendly stylesheet so it looks good out of the box and adapts to most layouts. If you want the interface to match your brand or theme exactly, you can easily override and extend those styles with custom CSS.

Easy setup for site owners

Drop [wph-2fa-user-settings] into any content area (Pages, Posts, or CPTs). The shortcode respects user roles and shows controls only to authenticated users — visitors see nothing. It’s ideal for membership sites, storefronts, or any site where users need self-service security without admin access.

SEO and UX benefits
Adding a dedicated 2FA page with the 2fa shortcode improves user experience and reduces helpdesk requests about lost access. It also aligns with security best practices — clearly communicating to users that your site values account protection.