Two-factor authentication

Your Pressbotics account holds the credentials to your WordPress sites. Two-factor authentication is the single most useful thing you can do to protect it, and it takes about a minute.

Enabling it

1. 1Open Settings and find the security section.
2. 2Start enrolment. Scan the QR code with any TOTP app — 1Password, Authy, Google Authenticator, your password manager.
3. 3Enter the six-digit code to confirm. Enrolment is not complete until a code verifies, so a mis-scan cannot lock you out.

What it protects

• Signing in to the dashboard.
• Account deletion, which re-verifies your second factor at the point of confirmation.

It does not gate individual publishes. An agent authenticated by OAuth or a key publishes without a second factor — otherwise automation would be impossible. Approval policies, not 2FA, are the control over what agents publish.

Losing your device

Disable and re-enrol from Settings while you are still signed in — do that before wiping an old phone. If you are locked out entirely, email info@pressbotics.com from the address on the account. Recovery requires verifying you own the account and is deliberately not instant.

Worth doing alongside it

• Use a unique password, from a password manager.
• Revoke agent keys you cannot account for.
• Keep client sites on review-everything.