How to enable and configure trusted devices

When enabling the Trusted devices setting, users will be presented with a “Remember this device” option when entering their 2FA code, as highlighted in the screenshot below.

Note: The Trusted devices feature is available in WP 2FA Premium.

Users who add a trusted device will not have to use 2FA to log in when several conditions are met for a period of time configured by the site administrator. Every user can add multiple trusted devices.

When this option is enabled and the user adds a trusted device, WP 2FA will deposit a cookie in the user’s browser. The cookie includes a TTL (Time To Live) that specifies how long the device will be remembered for and the device’s IP address, among other things. These parameters give you the option to place restrictions on how devices are remembered.

To get started with trusted devices configuration:

1. Navigate to WP 2FA > 2FA Policies > Sitewide 2FA policies
2. Choose User Access Settings

3. Scroll down until you reach the Trusted Devices section.

4. Click Enable trusted devices

You’ll such options available:

• For how long should the plugin remember a device – select the number of days the plugin will remember the trusted device. Once it expires, users will need to authenticate via 2FA again.
• When should users be prompted for 2FA code on trusted devices – choose when users should be asked to enter a 2FA code again on trusted devices:
  • Only when cookie is not found — users will only be prompted for a 2FA code if the trusted device cookie is missing.
  • When cookie is not found or when the cookie is found but the IP address is different — users will be prompted for a 2FA code if the trusted device cookie is missing, or if the device is recognized but the login comes from a different IP address.

Important: Trusted devices settings are configured per 2FA policy. To enable Trusted devices for a specific user role, first follow the instructions for setting up a separate 2FA policy per user role.

Then, follow the same instructions in this guide: open User Access Settings, scroll down to the Trusted devices section, and configure the settings for that role.