If you suspect a vulnerability,

[nusaiba125]

You can give users a grace period to set up 2FA on their own, or require them to set it up immediately to access your site. You can also make 2FA a mandatory requirement for all users, whether store customers or members, so that no account is left unprotected.

A Magic Link Login With the WP Magic israel whatsapp number data Link Login plugin , you can allow your users to log in to your website without a password.

All they need to do is submit their email addresses. The plugin will automatically send a link to the provided email address. For added security, you can enable an option that only accepts users from the same IP address.