MFA QR Engine Selection

Description: Chooses how QR codes are generated/handled for enrollment (Pro). How it works: The QR engine setting (pro_mfa_qr_engine) controls QR rendering strategy to balance compatibility and privacy. How to access / configure: WP Admin → AegisShield → Login Guard → MFA (Pro). Select the QR engine option. Save and test enrollment on multiple devices/browsers. Recommended setting: Prefer the most compatible QR option; avoid third-party QR endpoints if privacy is a concern.

MFA Methods (Authenticator / Email)

Description: Controls which MFA methods users can use (e.g., authenticator app via QR, email codes). How it works: AegisShield exposes allowed methods in the enrollment UI and validates codes using the selected method’s provider. How to access / configure: WP Admin → AegisShield → Login Guard → MFA (Pro). Select allowed MFA methods. Save and test enrollment for a non-admin user. Recommended setting: Allow authenticator + backup codes as primary; keep email MFA as fallback if needed.

Description: Allows devices to be remembered for a period, reducing repeated MFA prompts (Pro). How it works: When enabled, AegisShield issues a secure trusted-device token and honors it until expiry (pro_trusted_device_lifetime_days). How to access / configure: WP Admin → AegisShield → Login Guard → MFA (Pro). Enable “Trusted devices”. Set device lifetime days and Save Changes. Recommended setting: Enable with 30 days; lower for high-risk or shared-computer environments.

MFA Event Logging & Alerts

Description: Logs MFA enrollments, challenges, failures, and recoveries—and can trigger alerts (Pro). How it works: MFA events are written to Activity Log and can be used by Alert Rules to send email notifications. How to access / configure: WP Admin → AegisShield → Activity Log. Filter for MFA events. Configure Alert Rules to notify on repeated MFA failures (Pro). Recommended setting: Alert on repeated MFA failures and on admin MFA being disabled.

MFA Enforcement Policies

Description: Defines how and when MFA is required (e.g., always, only on wp-admin, remembered/trusted devices). How it works: Policies evaluate context (role, device trust, session age) to decide whether to prompt for MFA. How to access / configure: WP Admin → AegisShield → Login Guard → MFA (Pro). Choose enforcement mode and trusted device settings. Save changes and test login flows. Recommended setting: Enable trusted devices with a 30‑day lifetime to reduce friction while maintaining security.

Mandatory MFA for Administrators

Description: Ensures every administrator must use MFA before accessing wp-admin (Pro). How it works: If an admin account is not enrolled, AegisShield can force enrollment and restrict access until complete. How to access / configure: WP Admin → AegisShield → Login Guard → MFA (Pro). Enable “Mandatory for administrators”. Ensure all admin accounts can receive MFA codes and have backup codes. Recommended setting: Turn this on for production sites; remove unused admin accounts first.

Role-Based MFA Enforcement

Description: Enforces MFA for selected WordPress roles (Pro). How it works: On login, AegisShield checks the user’s role against the enforced list and requires MFA if applicable. How to access / configure: WP Admin → AegisShield → Login Guard → MFA (Pro). Enable enforcement and select roles. Save changes and notify users. Recommended setting: Enforce at least for administrators and editors; expand to authors on content-heavy sites.

Description: Allows MFA codes to be delivered via email as a second factor. How it works: When enabled, AegisShield generates a one-time code and sends it to the user’s email, then validates it during login. How to access / configure: WP Admin → AegisShield → Login Guard → MFA. Enable Email MFA (if shown). Test mail delivery to ensure codes arrive reliably. Recommended setting: Use email MFA only if SMTP deliverability is strong; prefer authenticator-based MFA for highest security.

Offline QR Enrollment & Backup Codes

Description: Supports QR enrollment and provides one-time backup codes for account recovery. How it works: Backup codes are generated securely and can be used if the authenticator device is unavailable. How to access / configure: WP Admin → AegisShield → Login Guard → MFA. Enroll via QR. Download/record backup codes during enrollment. Recommended setting: Always generate backup codes and store them securely off-site.

Description: A guided interface to enroll users into MFA (QR, email, or backup codes depending on configuration). How it works: The UI walks users through generating/confirming a second factor and stores the enrollment state upon successful verification. How to access / configure: WP Admin → AegisShield → Login Guard → MFA. Click “Enroll” for your account. Follow the prompts to complete setup and save backup codes. Recommended setting: Require admins to enroll; store backup codes in a password manager.

Archives: FAQs | Aegisify - WordPress Tools, Security…

Categories: AegisShield
MFA QR Engine Selection
read more
Categories: AegisShield
MFA Methods (Authenticator / Email)
read more
Categories: AegisShield
Trusted Devices
read more
Categories: AegisShield
MFA Event Logging & Alerts
read more
Categories: AegisShield
MFA Enforcement Policies
read more
Categories: AegisShield
Mandatory MFA for Administrators
read more
Categories: AegisShield
Role-Based MFA Enforcement
read more
Categories: AegisShield
Email-Based MFA
read more
Categories: AegisShield
Offline QR Enrollment & Backup Codes
read more
Categories: AegisShield
MFA Enrollment UI
read more

What’s New At Aegisify