• Resolved pierrodelon

    (@pierrodelon)


    It’s my stupid fault. The other day a thing came up in my Dashboard suggesting I set up two factor authentication. Was busy and didn’t pay attention, OK’d it and went through the install steps like a bad robot. Now I don’t remember WHICH two factor authentication app/add-on it was, and I can find no reference to any two-factor authentication on my dashboard, yet when I try to log in there it is! Luckily I have the user and pw to the two-factor, but I really want to remove it altogether. Can anyone help? Suggest a step to find out which it is and where to find? There’s nothing in my plugins that says two factor authentication. Nothing that I can find on the dash. Help me (squealing)!

Viewing 6 replies - 1 through 6 (of 6 total)
  • Moderator James Huff

    (@macmanx)

    Volunteer Moderator

    Try manually resetting your plugins (no Dashboard access required). If that resolves the issue, reactivate each one individually until you find the cause.

    I suspect it’s part of a larger security plugin.

    Thread Starter pierrodelon

    (@pierrodelon)

    Thanks, but I don’t quite get this. I have no difficulty accessing my dashboard or my list of plugins, which is short, like 6. None are the culprit as far as I can figure out. I looked at details on all and none mention two factor authentication.

    When I first try to go on my dashboard I get a small panel that drops down at top middle And says:

    Authentication Required
    A username and password are being requested by
    http://nameofsite.net. The site says “Limited!”
    User Name:
    Password:

    I have these and can readily log in to this panel which takes me to the real login for the real username and password for the dashboard. No problems.

    Only thing I want to do is get rid of the Authentication Required business so going to the dashboard site just goes directly to the dashboard login page.

    Moderator James Huff

    (@macmanx)

    Volunteer Moderator

    Ok, that’s Basic Access Authentication: https://en.wikipedia.org/wiki/Basic_access_authentication

    Not exactly what’s traditionally referred to as Two Factor Authentication these days, though I can understand the confusion.

    Access your server via FTP or SFTP, navigate to /wp-admin/ and open the .htaccess file in a plain text editor.

    You’ll find a section, about 5 lines, like this:

    AuthName "Limited!"
    AuthUserFile /home/yourdirectory/.htpasswds/public_html/wp-admin/passwd
    AuthGroupFile /dev/null
    AuthType basic
    require user username

    Remove that section.

    Thread Starter pierrodelon

    (@pierrodelon)

    Thanks very much, that remedied the problem. For the record, the .htaccess file was not in the /wp-admin/ folder but in the main folder for the whole site. I got there through the “control panel” and #’d out the section first, after making a copy of the whole .htaccess file.

    Here is what the section looked like. Both the active and the #’d out sections were there to begin with:

    <Files "wp-login.php">   
    AuthType Basic
    AuthUserFile "/home/nameofsite/www/www/.htpasswd"
    AuthName Limited!
    require valid-user
    </Files>
    
    # AuthType Basic
    # AuthUserFile "/home/nameofsite/www/www/.htpasswd"
    # AuthName Limited!
    # require valid-user
    Thread Starter pierrodelon

    (@pierrodelon)

    Again, many thanks for your help. It is greatly appreciated.

    Moderator James Huff

    (@macmanx)

    Volunteer Moderator

    You’re welcome!

Viewing 6 replies - 1 through 6 (of 6 total)
  • The topic ‘Two factor authentication can't remove?’ is closed to new replies.