Zapier WordFence 2FA Trigger Failure

Hi @gluska

Thanks for reaching out!

In order to better assist you, can you please get back to me with a screenshot of where you see this error?

2FA gets assigned to specific user accounts, so it should not be interfering with anything else.

Thanks,

Joshua

This is the screenshot from the Zapier email: https://imgur.com/a/RiTM71L

Hi @gluska

In order to confirm this is Wordfence causing the issue, can you check live traffic to see if there are any blocks for Zapier?

If there are none, can you disable 2FA on Wordfence and see if the error persists?

Thanks,

Joshua

I don’t believe I can see live traffic if the firewall is in learning mode. Let me know if there’s something I’m missing.

When 2FA is disabled, the issue is fixed. Zapier is able to connect.

Is there any way to allow this? It seems like this is where the issue is coming from. Just these warnings all the time. The problem is, each request comes from a different IP (all Zapier though) https://imgur.com/a/WnlYIsh

Hi @gluska

Looks like Zapier is getting blocked.

I would recommend setting your Firewall to learning mode for 7 days, this should give your site time to learn Zapier’s IP addresses and add them to your site.

Let me know how it goes!
Thanks,

Joshua

It’s currently on learning mode right now. Once the 7 days are up what will change? I believe there’s 3 days left

Hi @gluska

There is a chance it can change, not all changes from learning mode are applied within the window.

Once learning mode ends, just let me know!

Thanks,

Joshua

Hey Josh,

Learning mode is over & i’m still getting the error when a zap tries to run. Same thing:

“Trigger partner failure: WordPress ran into an issue. Error code 401: <strong>CODE REQUIRED</strong>: Please provide your 2FA code when prompted.”

Is there a way to whitelist this from 2FA?

Hi @gluska

Thanks for getting back to me!

I did some digging and I found out that zapier is incompatible with Wordfence 2FA due to this reason.

Zapier uses the normal WordPress login flow, meaning if you enable 2FA, it will always fail.

The only workaround I know of is to make a second admin with a very good password, don’t enable 2FA on it, and use that only for Zapier — it’s not as safe, but a bit better than using the main admin (especially if the main admin has posts and is more easily discovered on some themes.)

I hope this helps.
Thanks,

Joshua