Account Security, 2FA & Active Sessions

Your BugShield account can contain site access, conversations and operational history, so securing the account is as important as securing WordPress itself. Read Vault Security & Access for guidance about protecting stored site credentials.

Update your password

Open Settings > Login & Security to change your password. Use a unique password that is not shared with WordPress, hosting, email or another service.

Enable two-factor authentication

1. Open the Two-factor (2FA) section in Login & Security.
2. Start setup and scan the QR code with an authenticator app such as Google Authenticator, Authy or 1Password.
3. Enter the current six-digit code to confirm setup.
4. On the Save your backup codes screen, select Download and store the file somewhere safe.

After 2FA is enabled, sign-in requires your password and an authenticator or backup code. Each backup code can only be used once. Download them from the Save your backup codes screen before selecting Done.

Review active sessions

The Active sessions list shows devices signed in to your account, their approximate location and when they were last active. Your current device is clearly labelled to help you review the list. You can select Sign out for an older or unfamiliar session to securely end its access to your account.

If you notice suspicious access

1. Change your BugShield password immediately.
2. Sign out unfamiliar active sessions.
3. Enable 2FA if it is not already active.
4. Review Vault items and activity records for unexpected changes or access.
5. Contact BugShield if you need help securing the account.