Lost MFA

Thanks for reaching out. I’m happy to provide you instructions on how to get back in.

If you have lost or replaced your old phone and can no longer access your site(s), and you have misplaced the 2FA backup codes, there are 2 ways to get back into the site.

The first way is if you have added the site in Wordfence Central (a free site management tool in your account on wordfence.com).

• Login to Wordfence.com and look for the Configuration tab.
• Click the gear icon at the end of the row that the site you need to access is on.
• Scroll down to the Login Security Options section and expand it by clicking the small black arrow to the right.
• In the section that says “Whitelisted IP addresses that bypass 2FA” add your public facing IP address.

NOTE : You can get your public facing IP by clicking this link.

• Scroll back to the top of the screen and save the changes.
• You should now be able to login to your site with just a username and password.

If you haven’t added your site to Wordfence Central follow these steps.

• Please use FTP/SFTP — or any file manager your web host provides via their administration panel.
• Look inside the /wp-content/plugins/ directory and rename the wordfence directory to wordfence.bak. This will deactivate Wordfence and allow you to login without the 2FA code.
• Once you have logged in to your WordPress admin you can name the folder back to wordfence again.
• Go to your user profile and add 2FA back to your account, making sure to download the backup codes in case of problems in the future.

tim

Hello Tim,

Thanks for your response. It’s not a MFA from my website but the MFA from wordfence.com/central. Thats the one that have to be removed.

@wfsupport IS this possible? Account is ‘DeOnlineStrateeg.nl’

The status of this issue was resolved, but it isn’t.
It’s not my own WordPress, but wordfence.com/central. That MFA has to be reset.

I apologize. I had resolved it when I thought this was about your site.

For future reference to anyone who finds this thread via search engine or forum search, if you are locked out of Wordfence.com (not your own site) you can send an unlock request to feedback [at] wordfence [dot] com. In the subject line please add Locked out of Wordfence.com. We can handle it there. Again this is only if you are locked out of Wordfence.com, not your own site.

@mlkoekenberg – Can you email me at the above address and link to this forum post? Add ATTN TIM to the subject line as well.

Tim