How to use YubiKey with WP 2FA

WP 2FA supports YubiKey as a secondary WordPress authentication factor. Whether you already use YubiKey, have it implemented in your organization, or would like to switch to using a hardware key, WP 2FA enables you to use YubiKey as your WordPress 2FA authentication method.

In this knowledge base entry, we will be covering how to enable and configure YubiKeys for your WordPress website.

Step 1: Enable YubiKey authentication

For users to be able to select YubiKey as their 2nd authentication factor, you must first make it available as a 2FA method. You can do this in one of two ways. If you’re installing WP 2FA for the first time, you can simply enable it during the plugin’s initial configuration wizard. On the other hand, if you have an existing installation, you can enable the option from the plugin’s settings.

Note: Enabling YubiKey authentication makes the option available to users setting up 2FA. We cover the configuration process in Step 2, which you’ll find below.

Enabling YubiKey authentication in the initial configuration wizard

The WP 2FA initial configuration wizard walks you through the basic configuration process of the plugin. When selecting 2FA methods, make sure you choose YubiKey, along with any other options that you want to make available to your users.

Enabling YubiKey authentication in the plugin’s settings

If you already have WP 2FA up and running but would like to add YubiKey authentication as one of the two-factor authentication options, you can do so from the plugin’s settings.

After logging in to your WordPress admin dashboard:

• First, navigate to WP 2FA > 2FA Policies
• Head to the Select the allowed primary 2FA methods section
• Tick the checkbox next to One-time password via hardware key (with YubiKey).

Once ready, scroll down to the bottom of the page and click on Save Changes.

Step 2: Configure YubiKey authentication

When YubiKey is enabled as an allowed primary 2FA method, users can choose it when configuring 2FA for their WordPress user account.

It will be one of the available options in the Choose the 2FA method step:

Make sure that the One-time password via YubiKey option is selected, and then click on NEXT STEP.

Step 2.1: Set up 2FA with YubiKey

Next, make sure that your keyboard input is focused on the YubiKey OTP field and insert your YubiKey device. Touch/press the YubiKey button to generate the code, and click the I’M READY button when done.

Step 3.1: Confirm YubiKey configuration

To confirm your YubiKey configuration, make sure your keyboard input is focused on the YubiKey confirmation code text field and generate the code once again.

You can then proceed with the rest of your WordPress 2FA configuration process.

More WP 2FA configuration options

Want to learn more about the many features WP 2FA offers? Check out the WP 2FA knowledge base for even more guides and how-to’s.

New to WP 2FA? Get started today and rest easier knowing that your WordPress website is now more secure.