Sep 19, 2018

WordPress platform does not provide a way to support 2 factor via XMLRPC at present.

It is worth noting that if you have XMLRPC enabled, attackers can use it to bypass your 2 factor authentication because the WordPress platform does not provide a way to support 2 factor via XMLRPC at present.