VIP Authentication, our new authentication solution focused on improving security and user experience, is coming soon to the VIP Dashboard for users who sign in with GitHub or WordPress.com.
What’s Changing?
We’re upgrading our current authentication system with a new solution that includes Multi-Factor Authentication (MFA) and several new features:
- MFA Management tool: Strengthen redundancy and resilience by autonomously adding, editing, or removing MFA methods, ensuring secure access even if one method fails and gain greater control and flexibility over your account’s security.
- Monitor authentication changes: Receive emails for every MFA action you take to stay notified of any suspicious activity
- Increased security: For important actions, such as managing your MFA methods, we’ll ask you to verify your identity again to provide an extra layer of security.
- Upgraded login experience: A refreshed login page design, along with a more streamlined and user-friendly authentication process.
Why Are We Doing This?
Security is at the core of WordPress VIP. We’re increasing security measures for users to provide stronger protection for your account, expanding authentication options for redundancy and resilience, increasing visibility into your account actions, and adding an additional layer of security for sensitive actions.
We’re providing tools to help you have more control over your MFA methods, along with an improved UI to make logging into the VIP Dashboard both safer and more intuitive at the same time.
What Do You Need to Do?
For now, stay tuned. There will be a follow-up Lobby Post within the next couple weeks with more details on the upcoming changes. You will be required to upgrade your user account to use the new authentication system if you use GitHub or WordPress.com to log in to the VIP Dashboard. Once you’ve upgraded, logging in will feel almost the same as before, with the added benefits of the new system working seamlessly behind the scenes.
We’ll be updating the VIP Dashboard login page to the new design for all users, regardless of your login method. VIP Authentication has no impact on users logging in with Single Sign-On (SSO) and SSO users do not need to go through the upgrade. If you have SSO enabled, you may still have users in your organization that need to upgrade.