Every admin and staff login requires a one-time code emailed to the account, valid for five minutes. Repeated wrong passwords lock the account temporarily.
What it is
A second lock on the door to your panel, always on for every staff account.
How it works
- After the correct password the panel emails a verification code and shows a code screen instead of logging in.
- The code is valid for five minutes and can be resent after a short wait.
- Too many wrong passwords lock the account for a while and the attempt is written to the activity log.
- If a staff member is stuck on code limits, the owner can reset their limit from the Admins list.
- Remember me keeps only the email, never the password.
Where to find it
It runs automatically on the admin login page. Reset limits in Admin > Users > Admins.