Two-Factor Authentication is Required for All People With the Capabilities to Publish Here, on make/core

WordPress.orgWordPress.org The community site where WordPress code is created and shared by the users. This is where you can download the source code for WordPress core, plugins and themes as well as the central location for community conversations and organization. https://wordpress.org/ is committed to protecting accounts that play a crucial role in the WordPress ecosystem. Accounts with the ability to publish posts on the authoritative source of information from the WordPress CoreCore Core is the set of software required to run WordPress. The Core Development Team builds WordPress. team need to be secure in order to prevent unauthorized access and maintain the security and trust of the WordPress.org community.

Effective 16 September 2025, any author, editor, or administrator without two-factor authentication enabled will have their role changed to contributor. If your account was demoted as a part of this, after you have enabled two-factor please comment on this post to have your old role restored.

Configuring 2FA on Your Account

You may have noticed prompts when logging in to WordPress.org encouraging you to configure 2FA. If you haven’t yet, visit this link to do so: https://profiles.wordpress.org/me/profile/security.

If you encounter any difficulties while setting up 2FA, follow the steps outlined in Configuring Two-Factor Authentication.

Props to @davidbaumwald, @francina, and @desrosj for reviewing this post and @dd32 for a post whose language was reused here

#core