Mandatory MFA for Administrators

Description: Ensures every administrator must use MFA before accessing wp-admin (Pro).

How it works: If an admin account is not enrolled, AegisShield can force enrollment and restrict access until complete.

How to access / configure:

  1. WP Admin → AegisShield → Login Guard → MFA (Pro).
  2. Enable “Mandatory for administrators”.
  3. Ensure all admin accounts can receive MFA codes and have backup codes.

Recommended setting: Turn this on for production sites; remove unused admin accounts first.