How to set up WP 2FA to use Authy push notifications for authentication

WP 2FA supports Authy push notifications as one of the 2FA authentication methods, giving you the opportunity to use Authy push notifications on your WordPress website.

Important: The Authy API is closed to new customers. As of March 2023, Twilio no longer accepts new customers on the Authy API, and the service will be fully deprecated in the future. Only Twilio customers who were already using Authy TOTP or push notifications prior to March 1, 2023 remain supported until the Authy API reaches End of Life.

This means the following instructions only apply if you already have an existing Authy application in your Twilio account.

If you are setting up 2FA for the first time, kindly use one of the other 2FA methods supported by WP 2FA, such as 2FA over SMS via Twilio, TOTP with an authenticator app of your choice, or passkeys.

Step 1: Retrieve your Authy application’s API key

Since the Authy API is closed to new customers, you should already have an Authy application set up in your Twilio account. To connect it to WP 2FA, you simply need its Production API Key.

• Log in to your account at twilio.com and open the Console
• Navigate to your existing Authy application
• Open the application’s Settings page and copy the Production API Key

Note: you and your users will also need the Authy app installed on your phones to receive the push notifications required for logging in.

Step 2: Configure WP 2FA

Now that you have your Authy application’s Production API Key at hand, we can go ahead and configure WP 2FA to use Authy push notifications.

• Log into WordPress
• Navigate to WP 2FA > 2FA Policies > 2FA method selection
• From here, tick the checkbox next to Push notification via Authy app service and enter your Production API Key.
• The plugin will verify the API key and accept the new setting.
• After that, click the Save settings button.

Since Twilio will fully deprecate the Authy API in the future, we recommend planning a migration to one of the other 2FA methods supported by WP 2FA, such as one-time codes via a 2FA app (TOTP), one-time codes via email, SMS via Twilio or Clickatell, hardware security keys such as YubiKey, and passkeys.