If your site keeps asking you to set up two-factor authentication (2FA) after you have already set it up, two separate causes are usually involved. They often happen together.
Your enrollment is not complete. Enrollment only counts as finished when the site has accepted a valid 6-digit code from you. If setup was started but never confirmed, or if 2FA was ever turned off on your account, the site treats you as not enrolled and keeps prompting you.
Your old authenticator entry probably no longer works. When two-factor is turned off on an account, the site generates a new secret for the next enrollment. The entry in your authenticator app is tied to the old secret, so its codes are never accepted.
To fix it:
- Delete the old entry for this site from your authenticator app first, so you do not accidentally read codes from the outdated one.
- Go to your WordPress profile page and scan the QR code shown on screen with your authenticator app. If the QR code does not render, use the manual key instead.
- Tick the enable checkbox and type a current 6-digit code in the same save. Doing only one of the two can leave the form looking like it saved without actually enrolling you.
- Codes rotate every 30 seconds and the site accepts only a narrow window, so type a code that has just appeared rather than one that has been on screen for a while.
If the setup screen still comes back after that, contact support. Support can clear the stale enrollment record, so your next visit to the profile page issues a fresh QR code. This does not log you out and does not require a password reset.