I can’t log-in because we don’t have mfa
-
We are desperate to log in to our account. It’s a non-profit, and people were already knew our site. We did everything we can, we already sent a recovery account form, but it’s been a week and there’s response from WordPress. I need to create a new account to be able to make this thread and get some help. We can’t find our backup code and we don’t have MFA. We already reset our password, but since MFA is enabled (which is we don’t know that is set up) we can’t get the code even in SMS. So please people or WordPress staff. Please shed some light from this.
The blog I need help with is: (visible only to logged in users)
-
It seems your site is down because of a critical error. You must follow the mentioned link Learn more about troubleshooting WordPress, to solve this problem yourself.
-
We are not able to log-in, so we are not able to fix error within WordPress. We already sent recovery account form but it’s taking too long. How can we fix this?
-
Hello, I would like to follow up on this question. Any help will be appreciated. Thank you so much
-
The recovery form is the only way to disable two-step authentication on a locked-out account. What often helps in cases like this:
- A transaction ID is the strongest proof of ownership. If your non-profit has ever paid for a plan, a domain name registration, professional email, or any upgrade, find the receipt (search the email inbox for “WordPress.com receipt”) or pull the transaction ID from a bank or PayPal statement, and add it to the form. The full instructions for finding it are at https://wordpress.com/support/billing-history/#find-your-transaction-id-in-wordpress-com.
- The activation URL from the original signup email is the second-strongest. Search the inbox of the email on the account for the “Confirm your email address” message from when the account was created, and submit the link from that email.
- Please don’t submit the form again. I know waiting is awful, but duplicate submissions tend to push your request back rather than forward.
- Check the spam folder of the account’s original email, not the new email you used to post here. The recovery team replies to the email on file, and those replies sometimes land in spam.
When two-step authentication was first set up, ten one-time codes would have been shown on screen with options to print, download, or copy them. They might be sitting in a folder of papers, a downloaded text file on a computer, a saved note in a password manager, or even an old screenshot. Even one unused code from that set would get you in immediately, so it’s worth one more search before giving up on that path.
WordPress.com Forums 
