Back to Support Manage your account Enable Two-Step Authentication

Enable Two-Step Authentication

Your WordPress.com site is your home on the internet, and you want to keep that home safe. Hopefully, you’ve already chosen a unique and hard-to-crack password for your account. To add another layer of home security, you can enable two-step authentication by following the steps in this guide.

What is Two-Step Authentication?

Two-step authentication is a method of making your online accounts safer. Not only does it require that you know something to log in (a password), but you must also possess something (your mobile device or a physical key). The benefit of this approach to security is that even if someone discovers your password, they cannot log in unless they also have access to your possession.

WordPress.com offers two-step authentication via a mobile device (this guide) and also using a physical security key. Once you’ve set up two-step authentication, we send a new code to your device any time you log in with your password, which you must input before logging in. It adds an extra step to the login process, making your account much more secure.

Set Up Two-Step Authentication

Here, we’ll explain how to enable two-step authentication on your WordPress.com account. Take the following steps:

  1. Click on your profile at https://wordpress.com/me.
  2. On the left side, select the Security menu option: