Lately Wordfence Two-factor authentication has been flakier than a country biscuit on my e-commerce site. The only suggestion from wordfence technical support I’ve found online is that it “might be a conflict with another plug-in”.
Here’s a quick remedy to get logged in.
FTP to your host account
rename your wordfence directory wordfence1. This will disable the plugin and allow you to log in.
Once logged in and back on your dashboard, rename your wordfence plugin back to wordfence via FTP. Reload your dashboard.
Goto Wordfence > login security and click disable two-factor.
Thanks to Metadata.mx Link