Customer 2FA

Customer 2FA

Start with customer opt-in before requiring customers to enroll. You need a working WooCommerce My Account page, an administrator account with tested recovery, and a support contact customers can reach.

Try the customer journey

1. Open Awthy Settings and review Role enforcement. Leave customers out of the required roles while retaining any administrator or staff requirements you need. The Customer opt-in preset clears all required roles, including administrators; use it only if you intend all roles to be optional.
2. Save the policy and sign in with a customer test account.
3. Open the customer's account-security area and set up an authenticator.
4. Save recovery codes privately, then test a fresh login in a private browser window.
5. Check the store's My Account, checkout login, lost-password, order-pay, and payment-method pages with that account.
6. Invite a small group of customers only after the journey works.

The customer should complete their second factor during protected login and still reach the store features their account is allowed to use. A shop's theme, checkout extensions, and payment integrations can change this journey.

For example, invite a few regular customers to opt in and give them links to setup and Recovery. Keep enrollment optional while resolving their questions.

If the journey fails

Keep the customer policy optional while you investigate. Record the page, the safe visible error, and the login method used. Never ask a customer for a password, current authenticator code, or recovery code.

Customer passkeys and stronger role requirements depend on the active plan. A locked panel does not mean the customer should change browsers or share credentials with support.