Once Fortress has been installed, the only thing necessary is to set up two-factor authentication for your account and any other administrators, shop managers (for sites using WooCommerce), and editors.
SETTING UP 2FA
After a user whose role mandates TOTP-2FA logs in (administrator and editor by default), they will be intercepted and redirected to the TOTP setup page:
You can skip it initially, but only once.
After clicking the “Setup two-factor authentication” button, Fortress will generate and persist a new set of TOTP credentials for the user.
Scan the displayed QR code or copy the revealed secret.
To prevent account lockout through some mismatch between Fortress and the authenticator app, Fortress will not activate TOTP-2FA until the user provides a valid OTP.
Once setup, the next time you log in, you will be required to enter your 2FA authentication code or recovery code:
