MFA Event Logging & Alerts

Description: Logs MFA enrollments, challenges, failures, and recoveries—and can trigger alerts (Pro).

How it works: MFA events are written to Activity Log and can be used by Alert Rules to send email notifications.

How to access / configure:

  1. WP Admin → AegisShield → Activity Log.
  2. Filter for MFA events.
  3. Configure Alert Rules to notify on repeated MFA failures (Pro).

Recommended setting: Alert on repeated MFA failures and on admin MFA being disabled.